Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38352e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 1wqRrRBFigwFtH319LDY4Nfg0s5unI5mee3N5YfvS5c=
Subject key identifier: 33:2F:9D:EF:33:33:17:B6:77:56:AA:43:B5:D2:C5:66:B1:3C:2A:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D88E3479B9AD37280171FDFB3C95F1518D8B4CD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:01 +0000
ROA not before: Thu 17 Sep 2026 16:24:01 +0000
ROA not after: Thu 16 Sep 2027 16:29:01 +0000
asID: 136787
IP address blocks: 212.32.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:88:e3:47:9b:9a:d3:72:80:17:1f:df:b3:c9:5f:15:18:d8:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:01 2026 GMT
Not After : Sep 16 16:29:01 2027 GMT
Subject: CN=332F9DEF333317B67756AA43B5D2C566B13C2AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:50:d9:5a:20:f0:0a:b7:3e:f5:81:ce:f5:
d6:d4:2f:c2:91:98:cc:0f:04:e0:c5:74:b7:d2:94:
ca:35:83:88:45:46:9c:b2:21:bf:13:75:38:67:25:
17:04:03:28:28:fa:c9:7d:0f:a0:10:99:7d:cf:15:
31:20:a0:bc:26:af:fd:fe:3c:b7:c8:84:e5:48:55:
4b:71:ed:81:35:58:fd:7e:22:ed:54:a6:88:13:e7:
d8:fe:4f:4a:2e:fb:1e:9c:02:df:81:4d:ba:0e:c8:
bb:a2:88:b0:06:0a:0e:f2:78:ff:aa:87:6b:bb:b7:
fa:3a:33:3f:75:95:3d:26:b0:ef:1a:35:b1:24:71:
80:83:2c:f6:f1:ab:ba:15:c8:be:85:69:47:78:19:
0f:f0:e4:db:30:f1:1e:8e:8d:62:a6:1b:34:42:de:
54:17:11:73:8e:a1:5f:2e:30:86:a6:10:cc:d2:85:
66:08:50:99:b1:b4:85:ac:b0:74:01:eb:d0:54:dc:
f3:74:dd:96:b3:6c:a7:61:a4:c1:55:68:5e:65:46:
55:d9:99:2f:e8:72:be:82:9a:ec:59:39:7c:c8:d0:
1d:c2:42:0c:f7:e3:fc:6c:38:c5:60:e5:26:15:d7:
13:2c:3b:29:ad:0f:b0:77:2c:12:9c:d7:77:50:ac:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:9D:EF:33:33:17:B6:77:56:AA:43:B5:D2:C5:66:B1:3C:2A:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.85.0/24
Signature Algorithm: sha256WithRSAEncryption
54:32:6c:8a:f3:cc:d0:c3:f1:51:30:b0:3d:d5:b4:23:21:7f:
ed:98:03:63:9d:78:88:8e:79:dd:66:c2:fa:f1:f4:bb:c2:d5:
00:e0:8a:f4:ed:89:52:1e:80:4c:34:04:47:d2:06:52:40:01:
5b:4d:b0:86:87:be:73:ef:50:9c:14:38:06:bd:9b:af:16:84:
6e:49:4e:5e:0e:6c:8b:a5:ab:36:fc:f4:c6:94:19:b3:81:92:
84:a0:87:93:2a:c7:2b:7f:14:6e:6a:92:8c:cf:ca:6d:09:15:
82:c6:21:81:a4:59:cf:0b:41:74:cc:23:17:88:78:66:86:7a:
8f:e7:81:84:e6:3f:6f:0c:41:71:62:73:63:57:9a:bb:72:38:
2f:05:be:f1:be:9c:fa:0a:6b:61:41:41:4b:0b:76:0d:c4:db:
69:28:14:38:c8:46:70:a5:e6:b2:2e:79:71:aa:0a:f9:ef:e2:
96:d4:21:86:bb:78:e9:ef:19:4f:af:d3:f5:45:9b:b3:17:0d:
ad:fb:f7:d9:67:92:9e:62:cb:64:3d:4a:f6:0d:b9:5d:9d:e6:
4c:b1:fc:ea:16:78:86:ff:0f:57:56:5f:a9:91:26:d6:9c:78:
bf:27:e6:77:70:69:58:5c:2a:ac:e3:a5:ff:97:19:14:5b:02:
3e:fa:ad:49
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDYjjR5ua03KAFx/fs8lfFRjYtM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTcxNjI0MDFaFw0yNzA5MTYxNjI5MDFaMDMxMTAvBgNV
BAMTKDMzMkY5REVGMzMzMzE3QjY3NzU2QUE0M0I1RDJDNTY2QjEzQzJBRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2lDZWiDwCrc+9YHO9dbUL8KR
mMwPBODFdLfSlMo1g4hFRpyyIb8TdThnJRcEAygo+sl9D6AQmX3PFTEgoLwmr/3+
PLfIhOVIVUtx7YE1WP1+Iu1UpogT59j+T0ou+x6cAt+BTboOyLuiiLAGCg7yeP+q
h2u7t/o6Mz91lT0msO8aNbEkcYCDLPbxq7oVyL6FaUd4GQ/w5Nsw8R6OjWKmGzRC
3lQXEXOOoV8uMIamEMzShWYIUJmxtIWssHQB69BU3PN03ZazbKdhpMFVaF5lRlXZ
mS/ocr6CmuxZOXzI0B3CQgz34/xsOMVg5SYV1xMsOymtD7B3LBKc13dQrLHvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMy+d7zMzF7Z3VqpDtdLFZrE8Kv0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzODM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBVMA0GCSqGSIb3DQEBCwUAA4IBAQBUMmyK88zQw/FRMLA91bQjIX/tmANjnXiI
jnndZsL68fS7wtUA4Ir07YlSHoBMNARH0gZSQAFbTbCGh75z71CcFDgGvZuvFoRu
SU5eDmyLpas2/PTGlBmzgZKEoIeTKscrfxRuapKMz8ptCRWCxiGBpFnPC0F0zCMX
iHhmhnqP54GE5j9vDEFxYnNjV5q7cjgvBb7xvpz6CmthQUFLC3YNxNtpKBQ4yEZw
peayLnlxqgr57+KW1CGGu3jp7xlPr9P1RZuzFw2t+/fZZ5KeYstkPUr2DbldneZM
sfzqFniG/w9XVl+pkSbWnHi/J+Z3cGlYXCqs46X/lxkUWwI++q1J
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:57:27 2026 by rpki-client