Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e39302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: UA3bXf/lZt/D2UY+mqFMiExxJEDTodS/tJzaUtgXmM8=
Subject key identifier: 54:0C:33:07:A4:13:91:BF:CF:D9:FE:A2:2C:98:D2:54:88:CE:24:B9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B5EAA12BB2F33E094BD0DA9866239DE26A7F060
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:02 +0000
ROA not before: Thu 17 Sep 2026 16:24:02 +0000
ROA not after: Thu 16 Sep 2027 16:29:02 +0000
asID: 136787
IP address blocks: 212.32.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5e:aa:12:bb:2f:33:e0:94:bd:0d:a9:86:62:39:de:26:a7:f0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:02 2026 GMT
Not After : Sep 16 16:29:02 2027 GMT
Subject: CN=540C3307A41391BFCFD9FEA22C98D25488CE24B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:5f:b0:d7:bf:4e:8e:51:aa:9c:e3:43:c4:
f9:b1:f6:32:43:34:18:d1:dc:54:68:cb:23:9c:e3:
f6:12:8c:5a:9e:41:ca:40:1d:d9:3e:28:66:a2:c6:
65:1a:5d:da:b0:44:54:48:bb:c0:1e:7a:26:1f:3f:
7e:eb:93:fe:90:9e:87:6e:fe:23:59:13:bb:73:ff:
87:76:a4:64:47:03:a5:93:ab:32:b1:39:29:35:c0:
57:0b:3c:d0:06:bb:40:04:0d:21:33:19:dc:63:08:
46:83:be:ee:2b:0c:71:69:9c:8f:2b:57:a0:a0:82:
70:c8:82:2d:b0:5b:b5:55:4a:af:6e:ea:e2:3e:8a:
ca:88:10:10:15:e5:f9:f6:ac:a1:d4:be:e0:73:01:
83:51:ab:a9:e9:fa:69:db:e4:67:57:5c:e4:e1:63:
a6:7a:bc:51:6c:0e:90:28:58:c7:29:15:23:59:8a:
58:14:2b:f7:4e:f0:d4:81:83:1f:df:de:23:eb:c7:
63:30:41:a2:2f:a7:db:92:e5:af:eb:44:79:76:86:
56:6c:35:04:3a:6a:d8:34:97:2a:d9:61:6f:90:61:
dc:be:26:37:6c:3a:ee:12:49:01:99:3c:11:60:09:
fd:6e:96:3e:d5:e4:6c:ec:60:cd:45:cc:91:a6:c3:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:33:07:A4:13:91:BF:CF:D9:FE:A2:2C:98:D2:54:88:CE:24:B9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.90.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9c:a6:50:b7:db:69:73:57:30:98:41:8f:64:12:38:bf:39:
45:d8:69:63:f2:18:4c:a6:00:f5:1b:59:08:33:5b:b5:9a:f2:
4e:4d:69:76:7d:da:b8:42:a4:75:f6:08:26:7b:e7:28:94:14:
73:ba:54:b4:59:67:4d:0c:3c:94:61:01:36:1d:c9:1c:50:16:
f5:4a:4a:76:50:64:f2:69:c1:30:2e:fb:f8:4a:3c:73:5b:d6:
a2:53:0c:b8:d6:1c:ee:b3:9e:1f:cb:98:ca:f8:3c:9d:a7:73:
e5:99:e7:96:c3:cb:0c:c5:fc:c8:3d:6b:56:82:4e:48:09:b8:
40:a8:de:94:1d:5c:b1:56:f9:ea:a5:e4:68:6b:a5:c3:21:16:
03:1c:cc:3a:4b:dc:f7:bb:5d:31:14:54:14:7c:80:7a:5a:bd:
05:37:52:45:a3:e0:9f:a2:1f:8a:50:bc:a9:40:3c:eb:ae:30:
96:bb:37:36:70:ef:27:0c:ff:32:af:fb:31:3f:89:80:26:9d:
03:9d:28:80:a5:cd:28:2f:43:59:3a:73:be:5a:ec:90:f9:3a:
a5:e2:f1:da:9a:12:62:aa:89:f5:9c:b2:71:8c:86:d8:3e:59:
b7:10:fc:da:c7:a4:bf:dc:32:f4:36:9c:29:92:50:83:cf:34:
5d:95:8b:40
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUa16qErsvM+CUvQ2phmI53ian8GAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTcxNjI0MDJaFw0yNzA5MTYxNjI5MDJaMDMxMTAvBgNV
BAMTKDU0MEMzMzA3QTQxMzkxQkZDRkQ5RkVBMjJDOThEMjU0ODhDRTI0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hF+w179OjlGqnONDxPmx9jJD
NBjR3FRoyyOc4/YSjFqeQcpAHdk+KGaixmUaXdqwRFRIu8AeeiYfP37rk/6Qnodu
/iNZE7tz/4d2pGRHA6WTqzKxOSk1wFcLPNAGu0AEDSEzGdxjCEaDvu4rDHFpnI8r
V6CggnDIgi2wW7VVSq9u6uI+isqIEBAV5fn2rKHUvuBzAYNRq6np+mnb5GdXXOTh
Y6Z6vFFsDpAoWMcpFSNZilgUK/dO8NSBgx/f3iPrx2MwQaIvp9uS5a/rRHl2hlZs
NQQ6atg0lyrZYW+QYdy+JjdsOu4SSQGZPBFgCf1ulj7V5GzsYM1FzJGmww+HAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVAwzB6QTkb/P2f6iLJjSVIjOJLkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzOTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBaMA0GCSqGSIb3DQEBCwUAA4IBAQApnKZQt9tpc1cwmEGPZBI4vzlF2Glj8hhM
pgD1G1kIM1u1mvJOTWl2fdq4QqR19ggme+colBRzulS0WWdNDDyUYQE2HckcUBb1
Skp2UGTyacEwLvv4SjxzW9aiUwy41hzus54fy5jK+Dydp3PlmeeWw8sMxfzIPWtW
gk5ICbhAqN6UHVyxVvnqpeRoa6XDIRYDHMw6S9z3u10xFFQUfIB6Wr0FN1JFo+Cf
oh+KULypQDzrrjCWuzc2cO8nDP8yr/sxP4mAJp0DnSiApc0oL0NZOnO+WuyQ+Tql
4vHamhJiqon1nLJxjIbYPlm3EPzax6S/3DL0NpwpklCDzzRdlYtA
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:47:49 2026 by rpki-client