Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e38362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Akr2p1FpSqCl8UMUpho5pGzpDnR4YDYHync0gCmJ+Zs=
Subject key identifier: BC:37:4E:35:F5:81:DE:C2:18:AB:3C:06:9B:04:DF:07:97:6A:7A:BA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52F2557B846479537D580DA9CA0AFC426243196E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 21 Oct 2025 13:22:51 +0000
ROA not before: Tue 21 Oct 2025 13:17:51 +0000
ROA not after: Tue 20 Oct 2026 13:22:51 +0000
asID: 212238
IP address blocks: 212.32.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f2:55:7b:84:64:79:53:7d:58:0d:a9:ca:0a:fc:42:62:43:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 13:17:51 2025 GMT
Not After : Oct 20 13:22:51 2026 GMT
Subject: CN=BC374E35F581DEC218AB3C069B04DF07976A7ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:ea:f7:52:07:eb:76:f3:e8:0b:fd:07:3b:
3c:34:5d:da:56:6a:cf:21:21:ec:66:26:95:b2:8b:
2f:4e:97:1f:f2:dd:a7:2c:c1:b0:2d:73:63:6a:3c:
49:e2:3e:2e:1a:d9:e0:57:3d:6c:d3:76:7b:9f:e3:
3a:75:c1:15:b4:35:9b:85:bd:7c:00:b6:06:a4:d2:
fb:d4:17:ad:e0:ec:6a:26:92:0d:20:cb:15:91:65:
59:03:1c:c2:6f:69:7b:d0:bb:d7:e1:a2:8e:d5:a5:
fb:e9:8a:bc:ea:c6:e7:48:28:4d:97:00:1b:8d:0d:
17:f7:4a:79:e3:90:90:be:26:9d:1a:92:cd:45:87:
7b:3f:e7:5d:3a:57:4e:4b:05:5d:56:a9:6e:8f:bf:
56:f8:ec:a0:65:a7:31:dd:00:f8:74:a9:58:62:cf:
65:92:a6:1b:4c:b7:e4:fc:f3:27:01:9d:73:6e:6a:
8a:e6:a4:d5:df:70:20:59:11:7a:be:7a:37:57:f2:
00:51:99:51:31:0d:7c:1e:fe:e9:b5:13:9d:b5:70:
f2:fc:b6:a4:b7:03:34:1f:f2:27:4c:3d:cd:dc:83:
23:05:3d:f8:22:a3:b1:18:1e:6e:8a:15:00:d9:ed:
2d:de:ee:59:1c:df:a2:e6:a0:87:da:09:2a:88:3e:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:4E:35:F5:81:DE:C2:18:AB:3C:06:9B:04:DF:07:97:6A:7A:BA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f8:42:bf:31:c0:04:f8:9e:d9:21:eb:46:10:61:90:81:63:
44:4c:a5:ca:9a:38:44:12:bd:13:39:97:c8:ac:92:e5:a8:c4:
34:3b:0b:72:60:26:fe:32:17:36:86:d6:15:59:ba:fb:4d:4a:
69:96:05:a8:1c:68:dd:9a:c6:5d:d2:26:82:79:6a:8f:0f:a7:
91:59:60:78:c6:af:6d:f6:e3:38:1f:7d:8c:ed:9a:6c:66:0a:
11:ca:e1:9c:ec:fd:90:dc:83:a5:34:e9:20:42:d0:34:3d:9c:
ad:85:43:7a:70:2f:47:45:3a:f0:7b:ef:f3:29:bc:af:78:ac:
54:2f:2e:fe:c6:07:b2:2e:8a:36:c0:0e:23:d6:e6:66:95:94:
66:d9:0e:9e:69:24:3b:36:8a:5e:45:dd:fe:df:72:de:15:66:
b2:6a:c0:e0:54:c8:0f:56:8b:88:4b:51:aa:72:c2:28:45:59:
08:32:6e:9c:25:1a:92:d1:04:5d:2e:62:88:2c:9e:df:21:c2:
9f:71:37:f4:4f:6f:1c:9a:5f:a7:4a:e2:2d:fc:e7:89:e3:b5:
38:20:0b:5a:bc:f8:6e:20:3f:9e:33:18:78:d6:b5:b8:de:80:
30:69:ae:0d:95:1e:20:f4:e8:a5:ff:a2:41:5a:6b:31:66:7b:
25:dd:fd:81
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUvJVe4RkeVN9WA2pygr8QmJDGW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NTFaFw0yNjEwMjAxMzIyNTFaMDMxMTAvBgNV
BAMTKEJDMzc0RTM1RjU4MURFQzIxOEFCM0MwNjlCMDRERjA3OTc2QTdBQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEur3UgfrdvPoC/0HOzw0XdpW
as8hIexmJpWyiy9Olx/y3acswbAtc2NqPEniPi4a2eBXPWzTdnuf4zp1wRW0NZuF
vXwAtgak0vvUF63g7Gomkg0gyxWRZVkDHMJvaXvQu9fhoo7VpfvpirzqxudIKE2X
ABuNDRf3SnnjkJC+Jp0aks1Fh3s/5106V05LBV1WqW6Pv1b47KBlpzHdAPh0qVhi
z2WSphtMt+T88ycBnXNuaormpNXfcCBZEXq+ejdX8gBRmVExDXwe/um1E521cPL8
tqS3AzQf8idMPc3cgyMFPfgio7EYHm6KFQDZ7S3e7lkc36LmoIfaCSqIPrvxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvDdONfWB3sIYqzwGmwTfB5dqerowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBWMA0GCSqGSIb3DQEBCwUAA4IBAQAY+EK/McAE+J7ZIetGEGGQgWNETKXKmjhE
Er0TOZfIrJLlqMQ0OwtyYCb+Mhc2htYVWbr7TUpplgWoHGjdmsZd0iaCeWqPD6eR
WWB4xq9t9uM4H32M7ZpsZgoRyuGc7P2Q3IOlNOkgQtA0PZythUN6cC9HRTrwe+/z
KbyveKxULy7+xgeyLoo2wA4j1uZmlZRm2Q6eaSQ7NopeRd3+33LeFWayasDgVMgP
VouIS1GqcsIoRVkIMm6cJRqS0QRdLmKILJ7fIcKfcTf0T28cml+nSuIt/OeJ47U4
IAtavPhuID+eMxh41rW43oAwaa4NlR4g9Oil/6JBWmsxZnsl3f2B
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:21 2025 by rpki-client