Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38332e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Pu3mvvoaShL3F9oVxpYi+++KwtB0XDsNJijFoA53Hgg=
Subject key identifier: E6:A8:78:26:15:58:95:76:F5:6E:D0:BF:01:27:AA:28:9F:4A:25:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 04B0AA5A6294DDCC7573613013E5A2DDF750B93B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:28:59 +0000
ROA not before: Thu 17 Sep 2026 16:23:59 +0000
ROA not after: Thu 16 Sep 2027 16:28:59 +0000
asID: 136787
IP address blocks: 212.32.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b0:aa:5a:62:94:dd:cc:75:73:61:30:13:e5:a2:dd:f7:50:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:23:59 2026 GMT
Not After : Sep 16 16:28:59 2027 GMT
Subject: CN=E6A8782615589576F56ED0BF0127AA289F4A25DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:ba:d4:91:a3:87:36:38:7e:b3:28:c3:a4:
b5:bd:38:21:9c:82:59:ce:db:2a:9f:26:2a:f5:13:
cd:eb:ed:a2:cd:3a:e5:15:6d:44:4a:33:b8:b9:f4:
6b:bb:6d:62:f3:39:35:fd:c4:d2:d6:c3:e2:ec:27:
a8:40:42:fd:d6:51:fa:d8:37:da:bb:ad:72:19:b6:
3f:f3:b2:71:f9:06:a3:0d:d6:8e:06:51:07:9d:f2:
b9:84:c8:5c:4f:e8:ee:7d:23:e4:97:4a:da:74:ef:
f2:3f:29:1d:ab:3b:45:e5:be:94:de:6e:78:98:52:
21:48:13:5d:e2:72:1e:af:0f:e0:9c:9a:bf:55:29:
57:b3:41:43:ff:af:84:38:f1:b9:f1:a4:dc:e6:27:
75:34:ec:be:ea:50:fb:25:9f:78:1a:d4:f2:67:d1:
ff:11:7a:83:34:a1:23:23:4e:66:85:04:45:c0:da:
d8:54:83:62:cc:05:31:72:f6:ed:3a:6e:84:b0:a4:
50:ae:da:b7:22:1e:30:95:c6:23:d7:be:dc:28:1a:
c3:ca:38:5f:02:3c:4b:58:c4:2b:56:4c:2a:b5:88:
ef:b8:93:5a:64:05:cb:3b:9c:a7:0e:76:27:3c:1b:
27:c7:f5:f8:46:3d:15:62:1e:39:2d:11:bd:18:0d:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A8:78:26:15:58:95:76:F5:6E:D0:BF:01:27:AA:28:9F:4A:25:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:67:7c:cc:76:86:11:5e:51:98:7f:08:0b:2c:6c:f2:99:de:
28:7b:dc:e2:e1:01:f4:49:e7:5d:f1:fa:76:3b:99:38:b8:75:
59:5f:06:a5:74:d7:d2:0f:63:00:0d:82:69:06:94:5e:89:d8:
02:f4:54:82:c2:89:bd:91:91:ba:63:f1:e9:e4:35:6b:d7:9f:
de:ab:36:22:41:e2:68:d2:75:5d:24:3c:32:af:cd:6d:b0:0d:
b1:46:35:d0:6a:ca:40:09:f0:93:9b:26:1e:e7:63:a2:c8:39:
02:2d:07:65:33:64:bf:fc:d2:13:29:d9:5d:85:5a:27:34:b4:
75:b3:43:b3:17:ca:c7:63:ab:eb:1a:f0:b3:d1:42:e1:0f:74:
e8:cb:ba:76:5e:41:79:52:50:99:3a:04:4d:5a:13:f3:b4:4d:
bb:f5:d2:f6:0e:4b:eb:5d:a4:5b:ed:20:8e:94:92:ed:ac:de:
25:d7:8c:a6:bf:44:c9:f5:a4:16:89:b6:50:70:14:6d:30:4a:
81:36:1a:bf:dd:38:b5:ea:55:e7:54:51:6b:ec:d1:3f:ea:b1:
90:ff:34:d4:41:31:0b:75:ba:e8:55:94:b2:ad:c2:25:52:14:
bf:b1:4a:3a:2e:26:c3:00:f5:d0:89:b1:15:39:31:31:b8:68:
26:a9:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:12:26 2026 by rpki-client