Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38312e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: DKyQ/8GPv9zRfMlN/HWQTnu+s3eBJLXgprtsZAWaUpo=
Subject key identifier: AB:4C:1C:9C:FB:FA:5C:42:A8:11:FB:5D:42:48:BB:D7:7C:0B:7D:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3927AE6F8498812D7F399C7B186F1C7FD467E057
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:03 +0000
ROA not before: Thu 17 Sep 2026 16:24:03 +0000
ROA not after: Thu 16 Sep 2027 16:29:03 +0000
asID: 136787
IP address blocks: 212.32.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:27:ae:6f:84:98:81:2d:7f:39:9c:7b:18:6f:1c:7f:d4:67:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:03 2026 GMT
Not After : Sep 16 16:29:03 2027 GMT
Subject: CN=AB4C1C9CFBFA5C42A811FB5D4248BBD77C0B7DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:c8:e1:c2:6b:62:87:c6:d4:be:cc:99:23:
30:8d:f6:7b:10:18:62:70:28:d5:e3:d1:9c:a5:be:
a3:43:de:3a:51:7f:bf:a3:a1:fb:be:eb:da:07:c1:
7f:4a:a5:3e:ac:f9:4d:82:f5:8c:14:76:ad:63:3c:
ed:69:6e:bb:f5:08:7c:89:28:ad:b6:21:83:1d:9b:
9c:c5:47:dc:da:29:68:19:8b:a3:42:c9:47:19:9a:
cf:ad:e7:11:4a:eb:cb:b2:9c:01:a4:e8:05:1d:fb:
dc:72:96:66:4e:e0:2a:d7:ce:31:12:2b:ef:80:ef:
d7:fb:c4:51:cb:04:56:f3:44:1a:3e:e4:1c:aa:cd:
68:56:4b:13:ad:7d:e4:1d:f8:dd:4d:33:39:4a:f5:
f5:22:88:03:41:9a:27:3f:6e:5d:3a:9b:f8:f5:78:
11:4c:f0:1a:3b:14:0d:c4:bd:5b:0a:04:85:1e:1a:
d2:50:1a:0b:7b:b1:a9:cd:6e:a3:7c:5c:49:2c:39:
a3:62:14:a8:72:f4:50:f1:0e:87:91:62:57:3b:e8:
fb:da:bb:73:8f:25:31:6b:13:2f:1b:36:ab:51:6e:
75:1f:dd:6f:cf:0e:45:69:fb:94:16:7a:12:e7:58:
3b:1e:60:98:de:a7:d4:fa:d7:a4:ac:09:5d:0e:58:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:1C:9C:FB:FA:5C:42:A8:11:FB:5D:42:48:BB:D7:7C:0B:7D:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a5:05:53:37:6c:52:fd:e1:ac:a8:0a:19:f9:54:1d:39:d3:
74:30:e8:12:5b:6d:07:71:60:9a:77:e2:06:7b:c0:d8:35:fc:
b9:5c:ce:a0:a2:90:80:8c:0c:b7:3b:29:76:35:25:90:4c:b0:
81:a1:60:f8:b6:d2:9c:47:e6:2b:7e:c2:7d:95:f8:44:2e:f5:
93:ca:00:0a:14:7c:d6:8c:76:70:6a:c2:73:61:1a:66:a1:63:
2f:0c:22:71:e0:db:d5:5c:a7:5d:eb:b3:50:74:8d:89:0c:23:
2e:eb:3d:fe:60:78:f3:9e:7b:74:2c:d9:58:58:f2:f9:97:3c:
ac:8b:1f:c6:95:8a:0c:44:9c:9d:a4:fe:46:f2:6d:a8:b3:80:
ea:e3:68:da:20:41:0c:10:a9:d4:21:2e:a4:23:85:67:8c:cd:
7d:0b:19:dd:c3:cf:1d:b7:dc:3e:70:4a:10:ab:c4:ca:2d:18:
e8:fb:84:0e:30:45:7f:c8:d1:af:a7:36:6b:cb:38:e1:fa:58:
60:25:72:05:6f:e4:68:09:89:ca:8f:04:f5:f9:b1:fc:fa:e5:
b4:2e:53:35:26:94:14:44:47:88:8c:4a:4f:a8:87:c5:11:d4:
c5:5d:c3:8c:da:ea:21:a1:70:29:f9:44:62:1a:81:a6:11:b6:
57:9d:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:49:25 2026 by rpki-client