Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38342e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cXbBb4dtdTbsueAoiN37KkE7Vq74ioOz8jv5eY32SCw=
Subject key identifier: B9:B7:6A:C9:BD:C9:61:A1:19:41:87:00:E2:92:8C:EC:64:A6:86:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 59218FD33147F19A32834ECA4474BB42C9574EBE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:03 +0000
ROA not before: Thu 17 Sep 2026 16:24:03 +0000
ROA not after: Thu 16 Sep 2027 16:29:03 +0000
asID: 136787
IP address blocks: 212.32.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:8f:d3:31:47:f1:9a:32:83:4e:ca:44:74:bb:42:c9:57:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:03 2026 GMT
Not After : Sep 16 16:29:03 2027 GMT
Subject: CN=B9B76AC9BDC961A119418700E2928CEC64A68647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:e0:36:87:0d:12:b2:87:f2:94:d7:4e:64:
08:5d:9c:62:01:db:96:bb:4c:f0:13:e3:e7:7e:9a:
42:1f:95:45:a9:94:64:c4:17:09:91:a5:4e:a5:60:
5e:1d:c9:b6:df:d0:1b:3e:94:e9:14:66:28:13:9c:
70:a2:e6:84:dc:46:fb:23:e9:14:75:68:0b:93:d9:
e8:c9:2b:3f:9a:af:87:19:72:6b:3d:3a:47:8e:ff:
86:7e:17:cb:d0:87:0a:f5:2e:67:1a:cc:55:88:8f:
48:fd:25:a9:3f:21:a3:d0:34:13:cc:2d:12:f9:0a:
60:f6:1d:34:e3:ca:e3:5f:ab:b9:c5:2e:6c:16:9e:
68:d4:e7:41:16:b5:4d:4f:09:f1:b3:af:ed:33:74:
d7:ef:14:c5:0f:7c:b3:21:21:b6:34:98:db:83:7f:
2c:da:25:1b:b2:d0:2b:5c:59:3e:ec:40:b8:6c:db:
8e:a4:61:b6:3a:4d:41:78:57:2c:55:22:6d:8c:80:
26:b2:48:ad:80:fd:30:90:5c:7d:22:9c:2e:00:8f:
7a:70:f5:77:ba:9e:f5:b7:56:a2:a2:6d:4d:9b:99:
20:f1:12:0b:ad:cf:af:72:02:21:30:4c:29:d6:eb:
67:ee:64:84:1f:e8:6c:8c:ff:9f:cd:00:45:da:c1:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:6A:C9:BD:C9:61:A1:19:41:87:00:E2:92:8C:EC:64:A6:86:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.84.0/24
Signature Algorithm: sha256WithRSAEncryption
05:48:89:72:bf:25:ea:1a:74:81:75:2c:1a:1f:77:9d:1c:1f:
07:f4:09:3e:55:00:bf:d8:12:00:56:af:3b:76:08:fa:c1:73:
ac:22:e7:47:f0:89:ba:d3:38:a0:99:d9:8d:82:f4:9f:cf:c4:
1b:23:1c:b7:48:73:87:54:ee:a6:0b:6f:ca:f4:a9:22:44:ea:
8e:46:2a:07:16:08:7b:0f:a2:8f:e4:02:04:5c:54:c8:fa:4b:
5e:6a:e1:42:0b:04:2e:68:4f:64:a2:5f:90:3d:e7:ae:67:1f:
d6:78:17:2b:a6:30:54:c0:14:f0:0d:0c:d3:78:fc:bb:4f:c5:
1c:5e:d5:2a:75:13:08:ac:6a:52:42:2a:38:9d:9f:a7:ed:2c:
7b:3d:9b:2e:16:71:b9:aa:44:47:a0:1a:9d:ef:76:e3:79:38:
ed:38:5a:9f:7d:a4:03:74:f7:37:76:04:82:9b:16:78:72:b8:
33:50:d9:9d:ae:91:e5:3c:37:56:20:42:d1:d9:e4:00:a3:ab:
45:0f:66:05:56:6d:ff:14:49:f1:2f:6b:86:37:ed:ae:46:60:
1e:90:57:70:8d:bc:a4:cb:cd:b9:0b:72:e8:2c:d3:9e:08:3e:
79:da:35:d1:9d:67:16:33:67:f2:9c:52:7e:b0:d9:3c:6a:3f:
4c:e3:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:40:18 2026 by rpki-client