Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36372e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e36372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: hcQVvvcNPXxXEsQR7FwiZFvc8MMHKBmeI0q+Y40i3Vk=
Subject key identifier: DC:89:DE:21:CC:64:AB:CE:CA:9E:DE:61:36:F1:1B:DA:44:B4:AC:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4EE2F96278FEC4456C5507557C178DF7E8DE48B6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36372e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:11 +0000
ROA not before: Tue 22 Sep 2026 13:24:11 +0000
ROA not after: Tue 21 Sep 2027 13:29:11 +0000
asID: 212238
IP address blocks: 212.97.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e2:f9:62:78:fe:c4:45:6c:55:07:55:7c:17:8d:f7:e8:de:48:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:11 2026 GMT
Not After : Sep 21 13:29:11 2027 GMT
Subject: CN=DC89DE21CC64ABCECA9EDE6136F11BDA44B4AC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:ac:16:10:ce:32:c5:d2:20:c6:a0:3c:8d:
93:22:32:6c:1a:f1:3d:31:d3:d0:99:97:13:29:65:
72:bf:04:be:65:fb:25:c1:58:79:31:fd:fc:bc:ba:
d9:56:02:eb:b4:05:89:4e:f4:5b:64:84:3d:b2:64:
c4:d5:fc:86:21:3e:e8:35:da:dc:36:5c:fd:3a:54:
1b:a0:0a:35:51:9e:1d:aa:e8:df:63:12:29:70:60:
24:30:f9:33:48:7a:87:7a:89:9d:20:7d:5f:fa:11:
b5:84:aa:90:1b:f0:f9:ed:9f:e9:19:03:57:24:8d:
87:6d:72:ee:2c:b8:a9:1a:47:61:c6:f1:47:d0:36:
8b:de:61:28:ad:27:ce:6f:c1:2e:8b:5f:f3:d6:6b:
9f:4e:6d:5f:49:f8:ec:cb:8e:b1:4b:c9:70:39:cb:
8b:31:fe:12:a6:ab:bd:9b:71:0f:7b:d6:bc:28:e2:
3e:8b:18:73:02:3d:ea:f5:e6:7b:b9:6b:0e:cd:59:
45:b5:9a:34:07:f2:ae:ed:23:31:f3:02:94:49:ca:
29:5a:09:06:7f:c2:2f:48:3d:f1:cc:c2:42:9c:5d:
2b:86:86:4c:99:26:c1:35:6e:2f:9d:c7:e2:38:da:
03:3c:d0:a7:33:24:df:45:de:6d:e6:4a:b4:45:56:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:DE:21:CC:64:AB:CE:CA:9E:DE:61:36:F1:1B:DA:44:B4:AC:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.67.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b8:ab:68:ca:8d:73:e4:39:71:a4:c9:36:41:31:90:c4:64:
d2:8a:88:27:46:bc:01:2f:a3:6e:96:78:cf:23:3f:0c:49:25:
41:a9:40:c1:63:ec:f8:9f:62:2d:6f:82:e8:da:c5:fa:12:2f:
1e:36:97:d9:e5:59:aa:1a:69:50:21:25:d9:6f:94:1d:93:a2:
c9:ef:be:3e:35:28:2f:10:a8:32:18:1a:67:ad:80:b4:a1:2a:
44:50:4b:11:45:c0:34:05:8c:e5:50:0f:59:d3:78:b0:a2:5a:
a4:5c:4b:a3:d3:87:d3:33:40:56:2d:4b:c0:5e:fb:d7:1b:8e:
43:f2:3c:13:dd:04:fc:a9:b3:1d:5c:e1:72:7d:ae:44:58:56:
7b:2a:29:19:fe:e0:9f:95:14:6a:c0:95:6a:80:8c:e0:3e:28:
bb:78:ab:2a:d4:c4:21:95:6d:e8:f7:a4:56:df:a7:56:c4:00:
5f:5e:bc:f4:7c:45:74:97:d6:c4:ec:e9:f1:4f:cc:52:3c:08:
e4:3d:4e:2f:02:85:a9:d5:1b:48:47:f9:02:28:48:24:14:a9:
47:2b:e9:5f:b2:81:0d:5a:f5:3c:2d:3c:d0:56:0c:b5:a0:0e:
e5:fa:9c:6a:b4:1e:0f:e9:91:45:08:6c:c6:9d:87:be:21:55:
ad:09:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:54:24 2026 by rpki-client