Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39322e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e39322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 0A3WbZ5CYEDF8JHX/Gk+GUAwJX51/MwfZdKjTe1utfg=
Subject key identifier: 28:C0:47:0B:4F:7A:FC:F6:D4:40:10:67:F6:3C:33:D5:2B:B4:6B:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2663FB668571C08D9AADAACB3FD508D53F5E0925
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39322e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 07 Aug 2025 08:05:04 +0000
ROA not before: Thu 07 Aug 2025 08:00:04 +0000
ROA not after: Thu 06 Aug 2026 08:05:04 +0000
asID: 212238
IP address blocks: 212.32.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:63:fb:66:85:71:c0:8d:9a:ad:aa:cb:3f:d5:08:d5:3f:5e:09:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 7 08:00:04 2025 GMT
Not After : Aug 6 08:05:04 2026 GMT
Subject: CN=28C0470B4F7AFCF6D4401067F63C33D52BB46BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:96:e8:a5:dd:85:bd:f2:e2:96:f2:da:fd:
4d:1a:52:5e:d8:11:a5:be:ac:4e:4f:e7:2a:83:54:
51:31:70:3f:32:8a:45:2b:61:aa:80:02:14:67:33:
38:28:18:69:7b:19:0d:15:47:1f:83:41:56:95:bc:
aa:de:af:ff:9d:a3:ca:d7:1b:a5:b2:b6:a0:bb:65:
09:71:8b:a5:c0:10:d6:94:fa:24:f2:4b:ba:be:6a:
8e:9b:aa:e6:0c:4b:6a:07:88:66:74:13:92:94:01:
02:49:9e:86:22:fd:79:a8:a2:6c:f8:f5:98:1e:c6:
c3:37:89:ac:65:df:d4:79:e1:ad:d1:ae:c0:fa:42:
5b:da:2f:8b:9c:02:1c:32:3e:d1:b0:d6:09:31:c3:
da:72:41:2c:62:8a:9a:39:74:de:8b:c0:cb:d0:3d:
d6:01:6a:4b:06:fa:8f:34:7e:9b:fb:79:5f:03:fd:
cd:4a:7e:13:47:ad:3c:96:19:4f:91:32:e0:2e:fb:
b0:ca:75:d3:45:d7:49:04:ce:a2:f5:fd:5f:73:66:
54:ba:77:ff:bb:23:f8:eb:7b:78:0b:20:d3:e5:51:
68:82:43:df:13:ed:29:72:51:18:47:fa:73:e7:58:
64:57:6e:ad:cd:26:d7:b0:d5:2a:d6:ff:4e:3f:3c:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:47:0B:4F:7A:FC:F6:D4:40:10:67:F6:3C:33:D5:2B:B4:6B:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:87:4a:42:6e:e2:ca:b7:bd:0f:5e:b8:44:8d:77:5f:2c:6d:
63:eb:44:b1:03:8b:91:3c:b5:2a:3a:fd:ec:32:20:49:f8:2b:
5a:74:b8:e2:87:18:6c:32:3a:65:c0:b0:5c:f0:2d:6b:43:e9:
71:6d:48:57:db:c0:13:c3:a3:d1:55:89:fa:f6:63:95:00:9b:
53:dd:16:e6:44:7e:b7:81:51:a0:2a:90:a5:58:31:44:ad:cb:
23:b1:d7:aa:e0:e5:29:ef:54:bb:16:93:17:ac:17:77:21:5d:
de:0a:fe:69:e7:a7:26:7b:bf:ae:53:e3:c6:6f:49:bc:13:20:
5a:c2:08:75:a9:60:e9:a6:5e:c7:89:63:16:c5:de:48:20:c5:
83:b0:bd:2d:e7:7f:3a:cf:55:58:f2:f6:30:6b:a6:53:af:9b:
65:5b:3d:a4:39:14:52:a2:ee:c5:6c:ab:c1:b1:d3:80:fe:06:
27:1f:76:1d:a9:2d:16:7c:6c:ec:17:23:52:c5:27:60:47:35:
73:4b:31:27:8a:52:7a:fb:ea:2c:33:66:49:a1:76:9a:aa:c1:
de:84:fa:ed:e3:cc:f8:91:31:e1:5b:cd:9f:81:f9:5d:02:2c:
55:62:86:b7:93:fa:60:96:4c:98:20:98:25:cb:86:45:83:03:
98:4d:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:15 2025 by rpki-client