Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e39312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 01igzu4b1DJJmvoWZzdK6Donc0/7ZBLXrTIBk6WoVVs=
Subject key identifier: DC:49:77:5D:C9:F1:13:53:39:E8:C8:C7:6C:D4:69:96:94:7D:E0:23
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 407A4DD24FE709811DB4C80A6BDB4D8CE747F43E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:02 +0000
ROA not before: Thu 17 Sep 2026 16:24:02 +0000
ROA not after: Thu 16 Sep 2027 16:29:02 +0000
asID: 136787
IP address blocks: 212.32.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7a:4d:d2:4f:e7:09:81:1d:b4:c8:0a:6b:db:4d:8c:e7:47:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:02 2026 GMT
Not After : Sep 16 16:29:02 2027 GMT
Subject: CN=DC49775DC9F1135339E8C8C76CD46996947DE023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:12:70:4f:13:69:35:eb:9f:00:03:95:75:
cb:ff:a4:27:fb:19:05:e9:d0:c8:f4:4d:7a:32:5e:
2a:87:2b:f9:17:85:9d:35:6e:dc:46:30:b2:10:8d:
cd:bf:64:e3:17:a0:12:33:a6:f7:53:49:84:01:9c:
3e:fc:58:a3:b1:cf:2d:91:87:b1:60:8a:33:43:32:
b5:75:bc:e6:f2:be:61:a8:61:fd:6d:f2:81:c4:f1:
dd:1e:e1:0b:d3:9d:0d:ad:76:8c:88:1f:ab:25:26:
68:26:c3:0a:4b:1f:58:4d:57:ff:7e:11:05:5d:e7:
16:15:bb:87:ca:05:ba:e6:43:57:42:9f:9b:3d:b1:
1d:d9:14:f0:03:3e:7c:83:ff:f2:2e:20:3d:42:5a:
c6:63:f1:ba:8c:b8:f5:70:f6:28:97:da:ca:a6:0c:
6f:d4:f7:28:e2:e4:f8:ff:cf:0d:d6:38:95:56:fb:
cb:6b:86:e9:a6:36:10:9a:a6:9b:6c:4d:19:02:5d:
31:63:06:24:74:b9:ab:53:76:94:92:70:89:f2:2d:
b5:fe:c8:c0:e8:80:65:0a:37:ce:c3:89:a3:a0:4b:
0e:5d:3b:aa:9b:72:19:9d:88:a2:ce:dc:a9:73:04:
d0:52:0a:11:31:74:d2:40:c1:64:3b:42:2b:d8:a7:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:77:5D:C9:F1:13:53:39:E8:C8:C7:6C:D4:69:96:94:7D:E0:23
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8d:52:ce:07:35:85:15:ce:08:9c:69:8d:f7:1e:cd:b7:5e:
06:7a:ae:0b:06:96:cd:ed:a6:1b:81:d1:4e:f3:28:dc:64:ff:
16:af:34:c2:e8:5a:55:95:6e:7f:58:db:a3:8a:56:0f:74:cf:
ee:d0:42:30:15:9a:e2:37:3b:92:f9:e8:fa:d5:46:fb:06:f8:
d8:3f:db:65:93:a2:17:62:02:67:34:0c:f4:67:0c:02:4a:57:
16:fe:1f:1f:c0:e8:7e:8f:63:25:10:35:50:9a:2f:56:9c:9b:
a5:09:01:87:66:e8:57:6a:dd:a0:6a:13:a3:a7:6e:8f:ff:1d:
86:96:ec:5d:ae:13:47:8a:ed:83:91:b5:05:4c:83:5f:a9:61:
06:e9:45:e9:d1:83:f2:71:06:91:7a:91:96:f1:74:ca:5d:10:
ec:e4:f0:ad:f9:a4:85:da:98:a1:a4:fb:27:b6:ef:ff:c0:5d:
f5:ae:a7:b7:9b:79:62:b6:b6:1d:aa:8d:53:e9:ce:85:f0:19:
ef:85:a1:7a:4f:a5:4b:d7:f3:79:ec:71:75:12:41:f1:57:83:
ed:5f:7d:46:df:bc:18:5c:5b:e9:35:45:40:95:1b:5c:c5:ae:
a3:2a:12:3a:88:c5:cc:a3:aa:0e:89:0d:c4:57:d5:c0:3f:96:
86:f2:37:85
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQHpN0k/nCYEdtMgKa9tNjOdH9D4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTcxNjI0MDJaFw0yNzA5MTYxNjI5MDJaMDMxMTAvBgNV
BAMTKERDNDk3NzVEQzlGMTEzNTMzOUU4QzhDNzZDRDQ2OTk2OTQ3REUwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNThJwTxNpNeufAAOVdcv/pCf7
GQXp0Mj0TXoyXiqHK/kXhZ01btxGMLIQjc2/ZOMXoBIzpvdTSYQBnD78WKOxzy2R
h7FgijNDMrV1vObyvmGoYf1t8oHE8d0e4QvTnQ2tdoyIH6slJmgmwwpLH1hNV/9+
EQVd5xYVu4fKBbrmQ1dCn5s9sR3ZFPADPnyD//IuID1CWsZj8bqMuPVw9iiX2sqm
DG/U9yji5Pj/zw3WOJVW+8trhummNhCapptsTRkCXTFjBiR0uatTdpSScInyLbX+
yMDogGUKN87DiaOgSw5dO6qbchmdiKLO3KlzBNBSChExdNJAwWQ7QivYpzX1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3El3XcnxE1M56MjHbNRplpR94CMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzOTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBbMA0GCSqGSIb3DQEBCwUAA4IBAQA6jVLOBzWFFc4InGmN9x7Nt14Geq4LBpbN
7aYbgdFO8yjcZP8WrzTC6FpVlW5/WNujilYPdM/u0EIwFZriNzuS+ej61Ub7BvjY
P9tlk6IXYgJnNAz0ZwwCSlcW/h8fwOh+j2MlEDVQmi9WnJulCQGHZuhXat2gahOj
p26P/x2GluxdrhNHiu2DkbUFTINfqWEG6UXp0YPycQaRepGW8XTKXRDs5PCt+aSF
2pihpPsntu//wF31rqe3m3litrYdqo1T6c6F8BnvhaF6T6VL1/N57HF1EkHxV4Pt
X31G37wYXFvpNUVAlRtcxa6jKhI6iMXMo6oOiQ3EV9XAP5aG8jeF
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:15 2026 by rpki-client