Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qQ1Eb2IQwek5qugUSm2wG3sDTHhB46oBNeeLaHNzZG4=
Subject key identifier: A0:86:C7:4F:74:A1:7E:77:45:51:F5:C4:47:DF:06:BE:93:4E:6D:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34E024BFC036EC5B662905D508663547C62477F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:53 +0000
ROA not before: Thu 16 Oct 2025 15:42:53 +0000
ROA not after: Thu 15 Oct 2026 15:47:53 +0000
asID: 136787
IP address blocks: 212.32.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e0:24:bf:c0:36:ec:5b:66:29:05:d5:08:66:35:47:c6:24:77:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:53 2025 GMT
Not After : Oct 15 15:47:53 2026 GMT
Subject: CN=A086C74F74A17E774551F5C447DF06BE934E6D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:ce:4c:7d:66:ea:78:19:b8:5b:02:7b:bc:
89:7d:bb:48:e4:9e:43:5a:d9:e5:d8:18:ca:99:a4:
69:8c:1e:46:61:0b:02:ae:e8:57:03:8d:cf:1d:25:
34:51:ca:8e:44:74:56:e7:67:f4:38:de:c7:ce:e0:
ab:dd:b5:03:35:1e:2f:09:80:7c:11:fe:4a:aa:ac:
c4:ef:c1:24:08:1d:be:69:64:b4:1c:35:c4:38:0b:
b2:08:c8:f9:b6:d8:d0:3c:f6:be:d2:2a:49:2e:4a:
5e:da:0d:6d:aa:a1:85:7a:50:18:b6:92:67:f4:0f:
b5:58:84:e6:dc:27:67:b9:e4:3b:bf:86:3b:58:c8:
ac:9f:c7:df:a8:4a:16:ec:a4:9b:a1:e1:98:38:1f:
1c:80:89:75:47:31:32:b1:66:23:f7:9a:22:23:7c:
7c:1a:08:c9:c9:a3:6c:71:91:25:95:94:6d:93:57:
ef:7d:0c:06:26:cf:40:bb:99:65:61:be:0f:38:84:
7b:0c:73:d1:d9:0c:9b:b6:ba:ea:6a:49:23:e3:d5:
16:df:a8:24:d6:9a:ab:66:c9:be:9d:b6:f0:05:0e:
75:43:f9:2d:f5:1c:45:4a:7a:98:e0:31:1e:ef:f5:
2d:5a:1b:c0:ca:2f:25:0a:5b:2b:68:82:78:42:c4:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:C7:4F:74:A1:7E:77:45:51:F5:C4:47:DF:06:BE:93:4E:6D:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.88.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e2:5c:1b:0b:c8:a0:49:74:df:b3:47:30:a7:31:ca:a5:f7:
2f:8e:2a:a7:c1:df:1f:dc:fb:68:30:0f:92:c5:7b:23:3c:dc:
1e:a3:e2:04:a9:8a:ce:40:6a:d2:4f:eb:65:0a:10:83:ae:66:
62:c2:41:36:bc:b5:bc:b1:7b:df:e9:8f:48:3b:ee:04:57:05:
b1:ff:33:68:27:66:d2:2f:98:47:54:cd:16:4c:9d:73:ed:18:
bc:f5:d3:16:00:97:9d:ab:c2:db:3f:76:0d:7f:41:c0:46:33:
bf:c8:d4:bf:63:44:0e:37:7e:d0:b9:66:ae:11:c8:c9:00:a3:
3c:7e:fc:e1:e5:4e:f4:a2:2a:0d:55:5f:22:fa:78:54:aa:66:
f3:98:e3:50:87:1c:58:a9:93:be:60:26:38:e8:b7:67:1b:a2:
05:52:52:0c:2a:a3:e8:94:57:ad:0d:89:cd:16:5d:33:c2:63:
25:35:a3:54:95:35:3a:2a:bf:70:f4:25:9e:6b:ac:75:a9:3c:
4f:28:c0:cd:17:9a:e8:5c:9d:d9:8c:2c:44:bd:c1:06:00:e3:
50:19:17:b4:1f:a9:1f:e7:0e:ab:e5:2d:c6:b5:d3:31:02:0b:
23:35:68:7a:3b:89:9d:53:72:e8:c6:a1:bb:2d:bb:af:0e:d2:
bc:4e:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:48 2025 by rpki-client