Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e382e302f32312d3234203d3e203437353833.roa
File: 3231322e38352e382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: WRE0ws2BcL4TARxMcOECoD/jQC761W5lOa2Qfcj1h/U=
Subject key identifier: 87:A2:3B:8E:92:D3:7B:15:7A:AE:C3:4A:7B:88:D9:F1:90:C4:4F:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37DE8E81554402A49D816C230DA6698977FEA9B8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e382e302f32312d3234203d3e203437353833.roa
Signing time: Wed 11 Mar 2026 12:23:24 +0000
ROA not before: Wed 11 Mar 2026 12:18:24 +0000
ROA not after: Wed 10 Mar 2027 12:23:24 +0000
asID: 47583
IP address blocks: 212.85.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:de:8e:81:55:44:02:a4:9d:81:6c:23:0d:a6:69:89:77:fe:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 11 12:18:24 2026 GMT
Not After : Mar 10 12:23:24 2027 GMT
Subject: CN=87A23B8E92D37B157AAEC34A7B88D9F190C44F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:ce:de:6f:68:10:e3:1a:5d:a1:f5:a5:fb:
78:c8:9e:46:5c:73:c9:92:c6:7e:6d:56:30:c6:3f:
44:56:ca:bb:92:af:74:bf:5b:38:e5:27:3a:37:df:
72:6e:7b:de:f8:a3:c7:2e:da:1e:83:d1:1c:9e:0d:
06:cf:00:6b:2b:da:58:73:38:eb:a5:7d:ff:cc:35:
5f:b3:fa:5a:83:30:61:6f:f8:6e:84:cc:8f:f6:04:
44:c6:6d:bd:36:be:b3:a5:7c:6d:cb:c5:2b:36:70:
c0:81:ac:cf:88:25:12:8d:07:65:03:ea:4f:f5:ba:
c0:f3:0f:ac:06:28:5d:60:24:c0:3e:f0:8d:7a:e6:
75:75:c8:ec:c3:92:9c:bc:e7:86:aa:9c:49:50:7c:
89:91:63:81:77:00:c6:5e:19:ce:6f:9a:95:7c:0a:
2c:c7:b0:96:23:6b:bd:c1:44:04:8a:b6:e0:d6:cd:
ee:2b:6f:83:bd:56:e6:21:6d:27:1c:6d:08:aa:91:
56:37:5b:9d:2c:3f:cc:d7:48:c8:85:b3:e9:6c:95:
ff:3c:32:4f:4b:0f:5f:82:f6:af:6a:65:22:f8:cd:
22:8e:6b:cd:0c:5f:a5:73:58:11:62:62:00:bf:6c:
7e:05:a0:3d:be:64:2d:23:f9:24:48:9b:37:f1:91:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A2:3B:8E:92:D3:7B:15:7A:AE:C3:4A:7B:88:D9:F1:90:C4:4F:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.8.0/21
Signature Algorithm: sha256WithRSAEncryption
83:92:24:ed:1c:b8:10:94:c5:a1:c2:f1:95:8a:3a:26:fb:f7:
34:18:d4:87:92:a2:b3:00:31:f7:f8:30:ac:2e:de:58:6e:47:
8b:e3:07:66:15:a1:0a:07:97:1f:61:33:2e:bf:f6:e2:bf:15:
51:0f:8e:35:e2:a3:3f:99:87:13:68:6f:4e:f6:1e:b1:94:49:
6f:f7:f5:68:e7:aa:e5:98:74:90:b1:1a:d3:a7:f4:2a:31:13:
f0:ed:12:a0:fc:f5:a9:c6:6f:e2:3f:f3:51:2f:29:f9:23:b5:
70:b3:b2:35:1b:06:52:7b:f2:69:54:82:7e:2f:60:89:17:b9:
c8:2d:41:f1:e6:11:48:fc:97:b0:75:b4:2e:d0:1e:ed:6a:79:
54:40:84:8a:29:2b:8e:cc:fb:d2:cb:69:26:50:5f:1d:43:90:
e9:b9:1b:24:21:d5:0b:38:c2:45:fe:e6:92:44:31:90:da:69:
53:4c:62:2f:f9:3d:1e:00:e3:14:76:42:53:f3:91:01:41:90:
68:68:f3:a3:ac:39:90:50:ac:8f:70:9d:94:53:f6:59:cc:00:
49:37:a8:7a:dd:21:eb:3c:4d:9f:63:0a:77:c5:d2:4a:a5:ea:
09:f9:94:66:1c:6c:1b:06:32:b7:1c:1b:80:35:7f:9e:83:31:
6c:8f:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:34 2026 by rpki-client