Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38392e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pC4MK25P3vprx5ODDvY1BwonrWtuutDJo1InpEh1AWY=
Subject key identifier: 24:CF:6E:32:F7:88:34:33:F0:95:79:32:FF:BD:93:A3:11:61:D9:72
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3EC5633728477126A9FD2DF5C5121B72CB92FE32
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:54 +0000
ROA not before: Thu 16 Oct 2025 15:42:54 +0000
ROA not after: Thu 15 Oct 2026 15:47:54 +0000
asID: 136787
IP address blocks: 212.32.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c5:63:37:28:47:71:26:a9:fd:2d:f5:c5:12:1b:72:cb:92:fe:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:54 2025 GMT
Not After : Oct 15 15:47:54 2026 GMT
Subject: CN=24CF6E32F7883433F0957932FFBD93A31161D972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:4b:5c:58:f6:02:c7:e9:da:09:fd:0f:80:
3e:18:48:4f:e2:0f:b7:33:4c:46:e7:fd:fe:ba:87:
c3:82:fc:c0:fd:57:86:4f:7b:5a:56:b5:a8:4a:87:
69:6a:a5:ab:cd:4b:94:fb:ef:b1:21:98:08:e2:d5:
ab:7d:66:86:36:09:f5:c9:06:b5:c7:bb:8c:c7:f3:
83:21:24:26:93:15:53:20:e6:bc:30:99:f1:91:4c:
86:78:0a:fe:6c:b1:61:ba:5c:61:96:84:8d:e9:61:
aa:73:3b:37:05:5a:6b:87:4f:d0:43:25:a3:75:d5:
b3:e7:52:f1:4e:c7:42:7f:24:c4:e8:2b:8a:35:5f:
1f:16:be:09:9e:3b:59:c8:d8:dd:07:4c:c0:d6:14:
df:6e:f6:6c:e8:c4:79:b2:d2:e8:75:9a:22:12:34:
fa:c2:b4:26:09:58:2c:75:08:d7:59:00:1d:8e:24:
07:f7:f3:62:59:06:fc:c3:d4:6f:d3:c5:f8:95:26:
2f:31:a6:be:f2:0f:2e:e2:ef:e0:1d:4e:d6:42:04:
61:3b:eb:92:bd:92:08:2f:fa:c2:cb:43:d3:1d:bc:
bc:23:16:72:3e:9b:0b:41:38:1e:cc:51:63:45:80:
17:c5:79:cd:ad:7b:fa:62:bc:2e:fc:1a:76:2b:d4:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:6E:32:F7:88:34:33:F0:95:79:32:FF:BD:93:A3:11:61:D9:72
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.89.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a4:5a:d1:82:da:1d:e5:f4:1e:a0:cc:13:3f:f9:9c:02:8b:
14:f7:fe:09:57:3e:c5:49:1b:e8:0c:0a:b9:e1:81:95:09:82:
d1:0e:05:ed:1e:39:ef:ef:40:4f:f1:e7:dd:93:82:6c:28:b4:
08:0a:fb:2f:cc:a0:50:f6:f2:9d:9b:31:4a:d7:13:9b:2d:8d:
34:bd:44:7a:46:51:6f:e7:5c:e4:8d:31:ef:21:d4:ad:63:10:
29:e6:66:c7:52:77:ca:11:c2:bf:9c:a6:5e:4e:1c:29:f7:1b:
70:40:17:27:c1:e1:ec:69:f9:51:07:25:36:83:d4:dc:f4:56:
f5:00:f5:4b:bb:9c:23:c4:ed:2b:8c:a0:37:83:98:39:05:91:
33:79:51:59:94:e1:93:59:85:ed:fc:af:1f:0e:d0:78:63:e6:
49:56:b6:e1:57:b5:c3:1b:9f:f1:8f:1f:47:1d:68:b0:b8:2f:
01:22:3f:aa:8c:35:b1:64:8a:47:ec:02:ac:75:88:5c:ab:21:
af:7d:7c:28:e7:d7:4d:8b:3e:05:2f:d6:a1:fd:03:b5:e3:42:
18:3b:b6:8d:32:5a:6b:17:b6:cb:b9:1f:d9:cd:fe:53:6f:c6:
3c:ce:2d:03:63:24:96:c6:b2:1e:c5:d6:cb:56:ae:b8:0b:3a:
bc:d6:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:16 2025 by rpki-client