Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38372e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +BqriM5el1GBTZamH7yYueA1WrVoKbI7sAaOaFIvW8o=
Subject key identifier: ED:DC:8F:82:4B:B9:26:2D:DE:54:7C:E8:F0:EC:C2:BC:48:5C:2E:4A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E9F2B75E96013FA4BD62866E41EE9821DF7815F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:04 +0000
ROA not before: Thu 17 Sep 2026 16:24:04 +0000
ROA not after: Thu 16 Sep 2027 16:29:04 +0000
asID: 136787
IP address blocks: 212.32.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:9f:2b:75:e9:60:13:fa:4b:d6:28:66:e4:1e:e9:82:1d:f7:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:04 2026 GMT
Not After : Sep 16 16:29:04 2027 GMT
Subject: CN=EDDC8F824BB9262DDE547CE8F0ECC2BC485C2E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:57:0a:e5:55:5f:5f:af:8b:16:4e:6c:6b:
b2:ab:43:7d:df:55:bc:12:79:ae:47:a5:5b:d1:b6:
43:5d:be:56:8e:aa:ea:44:15:0d:f0:e1:ba:1a:9a:
12:a3:55:d1:08:69:19:d8:99:ff:8d:45:27:1c:6a:
08:60:3a:53:17:d7:23:4d:4f:0a:b4:72:95:f1:06:
b2:be:51:c5:c4:f2:43:08:ad:d1:4a:f9:d1:4f:a0:
f6:c9:e4:8c:f2:96:1f:8b:e6:3d:6d:23:f2:94:dd:
7e:db:8f:d7:96:53:a3:27:2a:18:eb:df:cb:72:a3:
c4:8e:e9:f3:05:67:ad:ca:b2:7a:28:0e:67:aa:e0:
81:be:d2:c5:70:3e:42:dd:d6:48:94:39:c1:55:87:
44:1d:b5:a3:e5:76:e1:93:0e:5a:53:10:a0:7a:31:
46:58:e2:6d:ea:4d:bf:09:8d:44:6b:a9:2a:23:f2:
d6:f6:d5:0f:d2:eb:d0:fe:5f:db:e5:59:88:dd:1b:
87:08:21:9f:e9:73:ad:70:00:55:df:f8:1d:59:46:
18:5e:b8:fa:cb:e2:60:65:86:b5:d3:ca:20:7a:b8:
a6:f6:b0:80:a8:4b:97:88:22:db:63:aa:32:1f:f5:
d2:4b:dd:ca:71:92:c7:ee:41:dc:e7:83:6c:fc:f6:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:8F:82:4B:B9:26:2D:DE:54:7C:E8:F0:EC:C2:BC:48:5C:2E:4A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.87.0/24
Signature Algorithm: sha256WithRSAEncryption
84:03:8d:31:f9:7d:ce:60:76:ea:9a:1b:71:92:1b:54:df:08:
c5:04:53:c2:0c:b2:c6:d5:aa:64:a3:a6:7f:89:38:94:98:93:
da:10:00:ec:dd:62:18:5a:55:65:e2:d3:f6:90:4c:b6:da:14:
3b:83:ce:1b:b6:3c:dc:32:8d:57:6a:0c:3b:bd:bb:c4:ff:b5:
c1:5f:a1:b7:51:cf:71:25:0a:af:6b:1e:6c:e6:bc:bd:13:ac:
49:33:db:fd:5a:c3:50:98:59:7e:68:ea:c4:24:76:1e:b7:80:
dc:8e:b5:c4:00:6e:f4:86:e4:96:af:da:8f:3c:90:81:06:81:
0c:90:86:04:6a:a6:ba:bf:1a:42:28:cf:23:cc:75:5e:39:48:
db:ec:73:7d:ed:2a:25:ed:92:7c:f1:84:6f:2d:9a:13:a4:0c:
e5:54:8c:08:71:aa:27:a8:aa:ff:0b:27:29:f1:1f:9e:40:34:
f9:51:e5:1e:83:d4:37:15:2b:1e:6f:ba:80:1f:1b:a5:e6:b9:
c4:23:9e:5d:19:ca:a7:4c:82:4a:78:66:97:f3:ec:fc:69:57:
7c:9c:f3:d0:1d:8b:35:9c:67:3a:94:46:4a:4b:a3:43:c6:17:
1c:59:13:9a:66:26:4f:81:d2:41:8c:61:a0:31:26:5f:4c:61:
79:f3:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:24:53 2026 by rpki-client