Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38392e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nEBlOq7TM3kspSLFoBrBHgOb+ueXhjkc3wRILPH0XdA=
Subject key identifier: 4D:56:9D:A3:E7:32:48:ED:DD:D5:41:09:77:BB:D5:E0:5D:FA:F8:99
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16DF8B643C6BBCCF0AE83787EAB5DAFB3BE0ED2C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:04 +0000
ROA not before: Thu 17 Sep 2026 16:24:04 +0000
ROA not after: Thu 16 Sep 2027 16:29:04 +0000
asID: 136787
IP address blocks: 212.32.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:df:8b:64:3c:6b:bc:cf:0a:e8:37:87:ea:b5:da:fb:3b:e0:ed:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:04 2026 GMT
Not After : Sep 16 16:29:04 2027 GMT
Subject: CN=4D569DA3E73248EDDDD5410977BBD5E05DFAF899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:70:47:4e:57:fd:08:9d:e4:95:34:dc:cb:
db:2e:70:ac:b4:94:45:f2:3f:b0:75:cf:5d:5e:d0:
69:b5:57:9c:61:84:ae:74:40:ef:a4:d0:dc:89:c9:
39:db:49:be:02:a0:41:9b:aa:c7:7a:ea:57:f3:5a:
7b:f4:92:d1:11:97:9f:dd:13:06:bd:89:6f:41:61:
80:32:ae:25:cf:9d:d0:80:94:c0:7d:7a:df:da:f6:
a8:e1:14:8d:3e:42:ab:6d:1d:f8:22:02:80:8a:f8:
ad:1b:5b:94:3b:a4:e2:0a:8c:3b:3c:b2:bf:99:fc:
fb:d2:8f:c4:73:17:14:b0:db:1f:7a:47:24:50:d8:
5c:4a:36:e6:91:dd:85:19:56:1e:de:45:12:15:e7:
17:de:6d:d2:61:cd:c0:2e:06:86:26:55:c5:2f:a7:
08:9a:14:a3:3d:91:d8:e3:25:97:a7:c3:00:1e:b1:
41:43:3e:82:82:d3:9c:7f:a5:57:68:c3:7f:81:e9:
aa:9a:b8:74:f0:9d:f5:ac:65:78:64:03:25:3e:a8:
79:ca:94:89:4c:c6:5c:84:87:4c:bf:1a:4c:ed:c7:
66:ab:19:9f:c8:f7:16:5b:9e:b3:87:d7:a4:20:d8:
ad:7a:21:77:64:98:c4:22:22:a7:3c:42:94:a2:cc:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:56:9D:A3:E7:32:48:ED:DD:D5:41:09:77:BB:D5:E0:5D:FA:F8:99
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:01:fc:ba:ef:02:a6:fd:31:47:b5:07:d1:fc:7d:38:e0:23:
47:8d:98:3b:cf:c8:11:52:8d:cc:31:37:a1:c1:ac:c4:0d:67:
b7:e5:ed:f3:95:7a:77:5e:98:8d:bf:1e:ca:4a:63:52:dc:a1:
c7:17:46:13:77:2d:bf:71:ed:77:d4:8c:de:44:eb:51:ca:b7:
56:1f:cc:8c:0a:c9:17:c4:0c:36:f1:53:18:e6:a3:de:41:3d:
dc:6a:ca:3f:70:1b:ba:09:57:3e:d3:35:d9:26:18:30:f7:67:
7b:fa:e7:55:26:a0:da:22:a9:76:32:b5:44:26:e5:78:85:1e:
7b:30:48:cb:ef:97:74:64:4f:c7:65:af:42:e4:b3:a1:70:f8:
9d:92:01:bc:0b:f1:b3:a6:3e:fc:1e:8f:4e:4b:5c:1e:8c:8c:
10:00:c6:ac:9a:e7:bf:25:06:97:0b:58:4f:06:c2:e8:0d:1b:
5e:45:78:5b:d9:9f:68:cc:73:ed:f2:17:ed:9b:bc:6c:d4:b2:
09:89:55:d4:01:b3:f0:b8:2d:6b:6d:7e:e3:93:cf:03:00:c0:
78:2a:0a:32:9f:0b:f0:8b:4e:4a:e0:fd:a9:3e:a0:f2:13:21:
9d:1d:a6:60:a3:50:33:de:29:ac:a7:63:25:06:7c:04:10:09:
d1:16:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:51:19 2026 by rpki-client