Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: OBN4jMwXLIcdX00gJKxPVNSNxKQq3uuxvj83YOmnYUE=
Subject key identifier: 26:EB:4F:10:5A:4A:9E:09:56:9A:67:91:B2:D7:79:C9:7C:2A:B6:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36B83E95F1D0AED21D5E48A08C85BE00D267C746
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:28:59 +0000
ROA not before: Thu 17 Sep 2026 16:23:59 +0000
ROA not after: Thu 16 Sep 2027 16:28:59 +0000
asID: 136787
IP address blocks: 212.32.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b8:3e:95:f1:d0:ae:d2:1d:5e:48:a0:8c:85:be:00:d2:67:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:23:59 2026 GMT
Not After : Sep 16 16:28:59 2027 GMT
Subject: CN=26EB4F105A4A9E09569A6791B2D779C97C2AB63D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:4f:02:1e:1c:4b:e0:9a:eb:50:c6:e6:00:
b3:79:2b:13:23:42:0d:d0:d4:6c:32:00:3e:6f:78:
9e:aa:8e:d5:6d:b9:17:23:f4:2c:fd:fe:d5:1e:fe:
91:d2:30:08:ad:fc:22:e1:54:cb:46:a6:3b:bb:60:
97:22:79:6c:62:e1:bf:de:69:1b:59:39:f2:e1:06:
b7:06:ac:70:82:a2:ca:d2:78:b5:24:8e:ac:f0:8f:
ce:32:34:52:d0:e3:8e:8d:06:90:31:ed:f9:62:01:
3b:b3:e1:20:d8:9a:b7:05:8f:d6:af:01:df:d2:9f:
f1:54:73:53:f2:fd:ee:39:72:b4:7d:0f:89:91:61:
e2:21:14:bc:bd:25:c8:25:11:04:0a:2f:02:b6:b6:
a7:e8:87:86:e8:c6:48:cf:eb:de:1f:f1:0c:78:a7:
15:b9:34:79:02:15:b5:df:19:aa:6e:9e:d6:02:6f:
dd:eb:75:0b:1b:ab:a6:90:d9:c7:1d:96:af:cc:af:
72:09:ea:3f:95:c2:17:ee:e0:a7:11:8a:3a:86:3b:
98:e2:7a:e0:9d:fd:4d:0d:8e:39:62:99:4a:0a:f0:
e9:01:fd:be:b8:71:3e:b2:3c:30:83:2f:bd:4d:22:
99:da:a7:5f:60:21:b3:c5:06:df:c0:5a:74:5b:44:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:4F:10:5A:4A:9E:09:56:9A:67:91:B2:D7:79:C9:7C:2A:B6:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.82.0/24
Signature Algorithm: sha256WithRSAEncryption
14:52:2c:74:07:0e:f5:a0:5f:31:37:63:c2:47:c1:ae:5d:86:
13:56:6f:2e:5d:f1:42:a1:a8:54:77:c3:4a:1c:e2:20:82:72:
d3:90:26:14:84:94:5c:07:e4:bf:b8:90:d3:b0:9c:10:49:28:
7f:15:19:86:0b:83:0a:f9:07:a4:b1:4c:38:c1:9b:ee:3a:56:
82:9c:6c:26:1e:fa:95:04:f1:70:4a:42:78:d6:02:b4:6a:4b:
f9:44:ae:af:9f:32:05:da:65:ee:a6:6c:65:c7:17:e7:e5:0d:
62:80:5b:b8:d8:20:ef:0a:68:63:a2:b5:0d:44:52:59:52:e8:
1f:7d:1f:91:6f:c5:a1:94:5b:f7:1a:25:2f:36:bc:93:72:53:
3d:ea:2c:ea:e1:5f:1b:fe:27:9e:41:ba:1a:e3:d6:73:d3:e6:
57:2a:12:c2:5d:9e:e8:f0:41:d5:d4:b4:7c:56:5f:c6:e5:2d:
89:11:12:be:5c:57:15:cc:c8:3e:cf:54:d5:38:26:25:05:91:
ee:47:d3:34:b4:bc:1a:71:14:cf:52:45:4e:96:dc:1c:87:9f:
72:6f:1e:33:a6:8f:99:f9:fd:e4:52:47:f0:e3:9b:33:74:44:
12:09:63:4d:e9:b7:f5:41:86:af:44:c6:81:99:62:d6:b6:9a:
d6:30:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:52:40 2026 by rpki-client