Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
File: 3231322e32382e3138342e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: dRZ4nlslFkYH6Gr6zHugOL2LkLcSKJsbMDkCO2lX7nQ=
Subject key identifier: 37:44:FF:CB:BF:11:0E:CF:2D:D2:D8:C7:D5:2C:DC:0E:F4:7A:A0:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63FFB7E6A568FABB0171D57C869A8AB05B2A5E4A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
Signing time: Wed 16 Sep 2026 20:28:57 +0000
ROA not before: Wed 16 Sep 2026 20:23:57 +0000
ROA not after: Wed 15 Sep 2027 20:28:57 +0000
asID: 40021
IP address blocks: 212.28.184.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ff:b7:e6:a5:68:fa:bb:01:71:d5:7c:86:9a:8a:b0:5b:2a:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 16 20:23:57 2026 GMT
Not After : Sep 15 20:28:57 2027 GMT
Subject: CN=3744FFCBBF110ECF2DD2D8C7D52CDC0EF47AA087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f7:32:2f:fe:f5:fb:39:66:e7:f1:44:b0:cd:
37:2b:93:26:50:25:49:12:76:4f:e2:a7:c4:df:cb:
28:c3:c2:e9:3e:da:75:48:db:32:8f:d0:ab:75:e5:
da:9c:36:e6:1c:0a:40:f0:e4:19:4e:d7:51:9f:cd:
6a:f2:6e:10:e8:9d:24:aa:b6:6b:62:7e:38:7a:e0:
b3:70:67:df:9e:7f:c6:11:e8:41:2f:3d:0e:d0:c8:
04:bb:58:56:b2:b6:06:c0:49:df:92:7d:37:f9:16:
ad:50:a5:0c:52:34:62:6b:d5:16:08:77:16:41:a0:
22:9e:72:f6:58:20:8c:6d:40:b1:d4:2e:20:eb:34:
37:57:28:ca:2b:3f:05:c1:75:68:4f:3d:df:a5:ad:
5d:fb:5d:91:8c:e8:0d:73:61:91:6e:03:cf:b9:b0:
5e:e2:76:81:55:b8:03:05:2d:ae:ba:1c:cf:87:16:
39:e6:46:11:0c:1b:36:fd:c2:e6:82:df:5b:79:59:
5c:79:50:b3:86:27:40:7e:64:08:33:90:6c:bd:c6:
2d:13:dd:61:ce:2a:7c:5f:2f:6f:50:21:78:74:86:
bb:fe:01:89:00:a1:45:cc:27:cd:90:01:81:dc:f2:
a5:6d:e8:c8:97:30:08:0c:ad:73:2f:b1:ad:4d:63:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:FF:CB:BF:11:0E:CF:2D:D2:D8:C7:D5:2C:DC:0E:F4:7A:A0:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.184.0/21
Signature Algorithm: sha256WithRSAEncryption
78:15:c8:b6:86:ce:a0:f7:47:bc:d9:03:d0:7c:3f:a6:45:d1:
4e:0e:15:44:91:b2:bd:aa:75:83:54:b2:a0:48:d4:0b:15:84:
a1:ff:a3:6b:7a:d1:0f:01:45:9a:d0:e8:52:bf:84:ea:09:f5:
b3:73:e6:77:2e:d4:76:37:20:ce:b5:21:99:18:b6:db:ac:60:
3d:99:6d:10:e5:ed:25:54:44:20:31:6e:f4:b5:42:05:ce:26:
18:44:89:db:ab:c7:e7:72:c7:7c:56:2f:22:e7:d2:46:fe:d3:
e2:12:af:68:f5:53:04:f4:de:49:12:0c:4d:ef:7c:1c:94:38:
54:4a:08:b3:ab:01:60:f3:da:78:6c:8d:b9:56:94:0a:2d:da:
5d:73:32:dd:da:b1:9f:34:d8:2a:71:bf:59:39:a8:72:b8:5e:
8e:aa:dc:82:bf:b2:8e:ca:ac:b7:e3:a9:89:98:cc:f8:f9:e3:
fe:76:81:35:32:18:6e:38:85:55:42:da:c1:07:2a:8d:3b:3d:
fa:02:ea:6c:69:8d:0b:63:3e:94:b0:dd:4f:34:fb:73:00:15:
29:52:b3:a3:74:ac:4f:11:af:09:ab:2b:13:58:ae:3c:9a:89:
3c:80:dd:af:1d:a8:1c:a0:06:77:14:2b:75:f7:03:28:cc:1f:
02:28:54:12
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUY/+35qVo+rsBcdV8hpqKsFsqXkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTYyMDIzNTdaFw0yNzA5MTUyMDI4NTdaMDMxMTAvBgNV
BAMTKDM3NDRGRkNCQkYxMTBFQ0YyREQyRDhDN0Q1MkNEQzBFRjQ3QUEwODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt9zIv/vX7OWbn8USwzTcrkyZQ
JUkSdk/ip8TfyyjDwuk+2nVI2zKP0Kt15dqcNuYcCkDw5BlO11GfzWrybhDonSSq
tmtifjh64LNwZ9+ef8YR6EEvPQ7QyAS7WFaytgbASd+SfTf5Fq1QpQxSNGJr1RYI
dxZBoCKecvZYIIxtQLHULiDrNDdXKMorPwXBdWhPPd+lrV37XZGM6A1zYZFuA8+5
sF7idoFVuAMFLa66HM+HFjnmRhEMGzb9wuaC31t5WVx5ULOGJ0B+ZAgzkGy9xi0T
3WHOKnxfL29QIXh0hrv+AYkAoUXMJ82QAYHc8qVt6MiXMAgMrXMvsa1NY/iLAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUN0T/y78RDs8t0tjH1SzcDvR6oIcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMjM4MmUzMTM4
MzQyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
1By4MA0GCSqGSIb3DQEBCwUAA4IBAQB4Fci2hs6g90e82QPQfD+mRdFODhVEkbK9
qnWDVLKgSNQLFYSh/6NretEPAUWa0OhSv4TqCfWzc+Z3LtR2NyDOtSGZGLbbrGA9
mW0Q5e0lVEQgMW70tUIFziYYRInbq8fncsd8Vi8i59JG/tPiEq9o9VME9N5JEgxN
73wclDhUSgizqwFg89p4bI25VpQKLdpdczLd2rGfNNgqcb9ZOahyuF6OqtyCv7KO
yqy346mJmMz4+eP+doE1MhhuOIVVQtrBByqNOz36AupsaY0LYz6UsN1PNPtzABUp
UrOjdKxPEa8JqysTWK48mok8gN2vHagcoAZ3FCt19wMozB8CKFQS
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:43:31 2026 by rpki-client