Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e39302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jmYaVEIhuPzBHKEo6ucul1rmOArL+A2kTRZ1uHgwe0s=
Subject key identifier: 0F:4D:5F:E3:54:F7:2C:5C:77:E2:89:94:25:5B:BC:70:9D:14:21:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28ACBD8F8DD45F3926CBCF1DCBC346C376C1E265
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:53 +0000
ROA not before: Thu 16 Oct 2025 15:42:53 +0000
ROA not after: Thu 15 Oct 2026 15:47:53 +0000
asID: 136787
IP address blocks: 212.32.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:bd:8f:8d:d4:5f:39:26:cb:cf:1d:cb:c3:46:c3:76:c1:e2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:53 2025 GMT
Not After : Oct 15 15:47:53 2026 GMT
Subject: CN=0F4D5FE354F72C5C77E28994255BBC709D142110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:37:fe:fd:2d:cc:41:66:d6:6b:66:48:46:
ce:27:1a:b4:db:3d:22:f7:51:fa:57:aa:4a:3b:7a:
25:0c:5a:52:24:13:15:52:43:7d:1f:24:f1:b8:0f:
15:04:e7:9b:b8:1d:57:b2:1b:4e:20:fb:f6:0e:48:
31:62:0e:1c:c3:47:68:d6:53:cd:8b:c2:62:fa:4e:
0c:71:0f:41:0e:38:f0:74:e6:d9:0e:31:8e:6a:ed:
a9:9e:02:bb:89:43:77:a9:72:93:8f:b8:ab:d4:b6:
ca:bc:c5:f3:0f:c3:57:20:c2:6f:0e:f5:19:d8:e4:
4c:58:cd:39:5b:63:a6:6e:10:e1:07:55:a9:86:b9:
4a:90:0a:5a:a6:ce:b4:a7:9d:69:bf:63:2d:c8:bf:
37:93:aa:ae:e4:81:bf:e7:42:67:88:46:76:9c:98:
d9:64:e2:c2:6f:39:d8:0f:e3:c6:5c:38:22:cd:b5:
f6:9d:40:fb:20:e0:a2:3f:8d:cf:c6:54:10:87:ba:
99:1f:05:88:66:a9:15:93:2d:c7:6c:8e:72:5a:5e:
8d:8f:e6:ce:d6:aa:dc:fb:9a:5e:08:ef:79:c8:3b:
2b:30:ca:44:7f:20:46:93:cb:0d:50:ac:e7:e7:6c:
f0:a5:e2:f1:51:ed:47:79:00:58:b1:09:8a:9f:09:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:5F:E3:54:F7:2C:5C:77:E2:89:94:25:5B:BC:70:9D:14:21:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.90.0/24
Signature Algorithm: sha256WithRSAEncryption
48:da:25:54:96:cc:15:db:6f:30:74:76:01:27:4e:94:f7:03:
79:f4:9b:48:fe:92:49:04:60:35:8c:4a:52:29:8a:82:81:65:
05:19:ea:d6:9c:6a:ef:6d:6f:c9:15:5e:d4:8e:d2:d9:23:8b:
14:f0:f4:0b:0c:a5:f6:30:cb:36:2f:a4:f9:0c:d4:1d:10:71:
82:72:09:18:8b:00:71:bd:a7:dd:ed:49:b9:16:20:41:21:28:
c1:45:af:e4:ff:0a:b9:51:75:37:32:2c:00:73:10:3b:11:b7:
51:ac:04:f6:06:1f:83:9d:da:52:ff:8a:64:bd:f7:22:01:b8:
d5:f9:6f:28:98:21:05:43:cf:a2:72:a6:15:56:e4:e0:d0:24:
f7:1e:a8:ef:c0:ad:2d:77:82:c5:b5:2b:1d:bc:d6:83:05:5e:
5e:c4:f5:8a:95:d7:88:f2:0e:46:20:45:27:19:1e:18:13:ab:
46:18:ed:e5:a6:36:a5:bd:a9:16:49:3f:2f:38:ad:3d:ed:ad:
f2:80:5c:15:ef:41:fa:67:49:74:9c:1e:0c:07:40:0a:8a:dd:
c3:1a:14:a9:f3:11:98:0d:7a:65:4f:5a:f1:f0:53:43:7d:47:
9f:c7:c8:15:90:c2:c0:68:d7:43:04:3c:2e:a6:88:3e:7b:45:
9e:15:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:17 2025 by rpki-client