Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e39312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Dh6ICdH6y99RRxIVe68j4mBaeu85BeCFQP3SQ8lP7mg=
Subject key identifier: BB:C3:02:81:DE:2E:36:54:29:E1:27:E7:EB:94:0C:F6:6C:D0:8C:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A63B0EFF32298DC4A36A03E688402E0BD400C40
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:54 +0000
ROA not before: Thu 16 Oct 2025 15:42:54 +0000
ROA not after: Thu 15 Oct 2026 15:47:54 +0000
asID: 136787
IP address blocks: 212.32.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:63:b0:ef:f3:22:98:dc:4a:36:a0:3e:68:84:02:e0:bd:40:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:54 2025 GMT
Not After : Oct 15 15:47:54 2026 GMT
Subject: CN=BBC30281DE2E365429E127E7EB940CF66CD08CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:b5:fd:d8:e8:ea:7a:50:9c:fe:4d:3a:78:
4d:39:40:37:e5:1f:ec:4e:9b:fd:7d:2f:b4:87:92:
e6:9d:ea:16:e2:f7:e8:3f:80:ec:6b:37:2f:e4:f3:
7e:f2:e5:53:17:04:ac:d4:2c:f9:0f:d5:cf:bf:97:
76:fb:10:6e:01:3d:f5:f4:61:1e:06:e8:e6:15:24:
cc:42:53:d6:38:95:59:dd:7a:8d:04:50:31:16:b6:
0f:32:d7:0a:a0:b9:f3:5b:0b:cb:2c:f6:9e:f2:da:
cf:89:54:2b:5e:67:06:ec:1c:0d:45:f5:d8:8c:71:
68:fe:9e:d9:bc:cb:45:cb:4d:51:dd:fb:d9:36:95:
6f:87:39:42:df:da:5d:46:d6:35:8c:58:2c:18:ca:
8d:25:1c:f9:fd:94:9d:d4:cb:59:c1:3b:89:90:7e:
8f:03:7b:14:3c:eb:c4:fd:00:6d:f6:d7:5e:de:96:
e0:52:9f:68:8b:38:b9:23:b7:8f:6b:81:3d:0f:d9:
57:52:87:24:71:9c:d3:93:77:79:79:9c:1b:5a:65:
05:13:fb:7c:88:0f:43:b2:4a:aa:53:97:2e:fa:88:
54:77:e1:d2:f5:ba:b2:85:74:f1:21:8b:7a:cf:9e:
85:5b:53:61:a7:fb:f5:52:3d:0e:24:e1:30:e0:53:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:02:81:DE:2E:36:54:29:E1:27:E7:EB:94:0C:F6:6C:D0:8C:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:23:37:47:c4:fd:27:ab:7f:57:da:22:a0:b1:f5:00:4f:50:
7d:0c:3f:e6:cb:79:ed:e6:1f:94:72:8f:a5:54:00:b6:35:b7:
8b:3f:a9:ad:9d:a3:06:49:3b:82:9b:61:46:f9:38:17:e0:f7:
36:94:67:37:21:ff:3f:98:3e:0c:5a:75:89:f1:59:06:44:f6:
05:13:31:38:d1:c5:fa:92:d2:67:83:ef:91:3e:f0:9d:f8:1d:
b8:2c:32:48:54:66:7d:cd:f8:ed:de:0a:b4:28:6f:13:a4:f5:
14:f0:80:ac:6c:50:6d:32:53:32:5b:f8:69:56:9f:04:84:58:
80:bd:76:ec:f3:fb:97:40:83:b5:80:f6:a4:70:96:a0:a9:24:
73:a8:dd:36:68:e5:ef:20:de:9e:a9:f9:da:17:0d:3d:d1:ff:
21:ac:29:67:b7:f5:92:6e:dc:fc:79:e3:ff:87:25:b2:72:9b:
8e:d8:d2:21:84:c9:43:f3:1a:2a:c8:64:47:e3:45:e4:97:49:
29:43:e6:b0:70:3f:f3:b9:8a:7d:1c:ed:1e:13:c9:87:99:db:
86:c1:48:ad:62:75:af:92:c0:ed:34:9b:ab:75:cf:6b:bc:2b:
90:af:5e:a4:7d:43:58:95:8c:69:b3:70:df:cb:1d:bc:e3:fb:
8e:5a:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:00 2025 by rpki-client