Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39342e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e39342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: R3bRVoQXEARnv5pTJLHrEN5dnMjvT1A6+MNkBkERqCk=
Subject key identifier: E2:AB:FD:DB:66:D1:80:DE:CC:90:E4:FC:CB:3A:64:05:64:67:D5:3A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5ED6E5F93DE55F0999E2EA10B0A146299C42A441
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:53 +0000
ROA not before: Thu 16 Oct 2025 15:42:53 +0000
ROA not after: Thu 15 Oct 2026 15:47:53 +0000
asID: 136787
IP address blocks: 212.32.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d6:e5:f9:3d:e5:5f:09:99:e2:ea:10:b0:a1:46:29:9c:42:a4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:53 2025 GMT
Not After : Oct 15 15:47:53 2026 GMT
Subject: CN=E2ABFDDB66D180DECC90E4FCCB3A64056467D53A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:86:f0:1a:31:77:93:2c:d0:aa:0d:2c:4c:
7a:04:10:d3:82:82:05:64:02:de:31:a9:53:2b:15:
6c:1c:e3:30:9a:b7:07:89:61:af:5c:e5:f7:0a:f7:
9f:23:79:d8:9b:95:ec:c2:a3:e7:e7:f6:12:83:8b:
4e:6c:e3:c2:15:d0:7e:79:c3:27:f1:a1:92:1f:2a:
ec:97:11:ab:53:23:93:dc:34:f1:b3:ff:9e:7a:c2:
aa:e1:77:94:52:d1:16:da:a5:a0:d5:f6:6f:1e:25:
54:78:14:97:b9:50:68:06:50:0d:56:58:e9:4a:aa:
a1:6f:aa:57:c8:7a:55:96:eb:0d:e0:d0:ad:a3:91:
a7:41:7b:d2:35:4e:23:c1:a9:ae:cb:f0:ce:a7:b7:
5f:e1:fa:50:bf:55:c1:d1:0f:3f:a3:bc:54:a2:4a:
b8:8a:f9:d8:ec:d2:33:7b:df:43:a5:9b:c5:6a:da:
f3:d0:1b:42:37:ec:ae:53:be:51:31:96:12:73:66:
e0:d3:65:fb:7f:bf:c1:9f:e3:d0:ed:57:4f:18:c7:
7a:2c:03:ce:24:3e:3d:52:81:db:0c:90:c4:bb:c2:
c3:14:d7:dc:54:07:4b:b6:95:66:fd:66:39:63:8d:
ec:24:06:a7:2b:5a:b5:8c:c5:60:78:25:bf:5c:75:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:FD:DB:66:D1:80:DE:CC:90:E4:FC:CB:3A:64:05:64:67:D5:3A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.94.0/24
Signature Algorithm: sha256WithRSAEncryption
66:31:ae:83:bf:dd:58:aa:01:d9:35:57:f1:80:7e:4b:68:43:
b4:91:89:23:1b:9f:ad:3f:53:15:73:0f:08:e1:9f:14:fb:f3:
54:5a:de:6d:58:e1:d1:b8:f9:9b:31:43:e8:4c:b6:65:9c:bd:
ab:b6:77:92:5f:49:86:0d:53:e5:b7:fd:f0:1c:81:c9:72:5a:
96:f3:fa:bb:5d:ce:6b:a0:63:06:6f:13:a1:43:80:40:ed:8a:
89:78:a1:f1:5b:1c:80:c6:59:e7:ea:19:74:97:7c:13:fb:ac:
e0:2d:64:80:ff:d1:25:a2:6d:1f:59:25:5a:5d:38:50:36:92:
99:38:c1:88:e2:7b:b2:59:a9:c7:6c:e6:32:e0:de:91:95:e3:
ad:4f:d3:6b:ca:03:57:d1:e3:aa:ae:cc:e7:60:b5:c2:89:56:
f9:95:46:3d:4a:7c:ab:c1:6d:9b:22:6e:51:d1:a9:57:41:bd:
3a:88:02:02:96:ae:95:97:26:1a:d7:5a:d6:68:ed:b6:4f:93:
dc:f8:73:2e:e9:5b:74:b0:3c:dd:d3:9f:a3:44:1d:3e:4a:61:
f9:26:47:f6:21:f7:f0:3c:7c:78:28:78:1f:46:c8:c1:fe:ee:
51:91:63:d7:e1:f5:bd:1d:22:4c:90:fc:2d:bd:89:24:a9:08:
27:3a:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:42 2025 by rpki-client