Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
File: 3231322e34372e36342e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: UtkBLRKyecp9KPRZBN35zHXYiT4BPilmTWAKG+2p0tU=
Subject key identifier: 2E:D9:84:FC:16:97:F9:DB:A5:0A:03:6A:20:03:BE:A5:4C:9E:B4:12
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0474D7F3468E36518B1F11471B5581FBEB4FABC0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
Signing time: Tue 28 Jul 2026 09:27:09 +0000
ROA not before: Tue 28 Jul 2026 09:22:09 +0000
ROA not after: Tue 27 Jul 2027 09:27:09 +0000
asID: 51167
IP address blocks: 212.47.64.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:74:d7:f3:46:8e:36:51:8b:1f:11:47:1b:55:81:fb:eb:4f:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 09:22:09 2026 GMT
Not After : Jul 27 09:27:09 2027 GMT
Subject: CN=2ED984FC1697F9DBA50A036A2003BEA54C9EB412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:2b:a6:3d:30:66:ea:fd:bb:e5:8c:c6:fe:
a2:ff:aa:8d:a0:bd:48:47:98:b1:d2:60:6c:d2:aa:
81:28:57:12:44:ab:02:78:88:55:40:97:6d:69:4a:
3a:ec:6c:61:5a:f4:41:e2:5e:aa:8d:db:a5:0d:72:
50:5d:11:43:44:a3:a3:0f:2c:1d:f3:88:76:a9:45:
7d:05:92:b0:93:5b:18:75:39:c2:65:02:80:fd:da:
71:42:6f:ba:cf:19:9a:16:dd:23:23:85:29:9c:93:
c6:2b:27:46:34:c1:ef:b1:65:15:f1:e1:7f:99:f0:
f8:b6:34:fe:c9:44:8e:fe:b7:62:c1:f9:00:20:4c:
97:2e:e3:81:80:a0:cc:92:1e:4a:aa:16:83:d9:b7:
2f:96:e8:e2:c5:b8:d4:0c:29:4a:09:70:29:d6:2a:
73:51:7f:84:c3:fb:ad:c5:50:c9:54:46:5b:c3:e2:
7e:fe:d6:bb:9b:78:c7:da:00:f6:da:41:86:51:c0:
7c:da:83:ec:9c:b8:0b:75:81:a7:5b:d5:59:88:21:
62:70:25:30:54:1d:8a:9b:56:16:9f:2d:79:33:fc:
57:8f:50:2f:f5:47:d8:8c:13:25:4c:a0:98:4c:ac:
e1:05:e2:62:06:87:01:cd:d0:3e:85:eb:61:bd:34:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:84:FC:16:97:F9:DB:A5:0A:03:6A:20:03:BE:A5:4C:9E:B4:12
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.64.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:3c:54:ba:87:25:c7:88:b9:50:75:90:40:2a:03:fc:fc:a4:
65:d5:4d:1f:d6:f2:02:f6:8c:97:19:fa:86:9a:7a:08:2a:59:
b1:ce:6d:6f:4f:02:af:ab:7a:9d:29:eb:e7:c6:bd:91:03:c7:
39:46:3f:84:68:77:67:24:11:8f:87:4d:75:8f:11:4e:52:45:
41:6a:0f:26:67:a2:6a:04:c5:ba:6f:bb:ee:d7:b7:ff:e0:fd:
22:64:6b:a1:f1:53:77:80:de:93:c1:b9:d7:28:c1:0c:8c:62:
7f:9e:1c:09:e9:cc:1c:3b:ba:68:8f:8f:d1:2e:09:99:db:39:
53:88:3b:cd:93:17:28:3c:85:d0:4c:ba:12:42:89:26:86:7f:
dc:25:46:3e:5b:da:d6:4a:e2:37:9b:25:4a:3c:cf:f7:b6:0e:
95:36:e7:fb:ec:8f:da:a4:bd:41:04:ac:84:cd:2e:59:a8:42:
dd:91:52:84:38:f0:0a:7d:94:c0:07:a4:e1:b9:f6:05:81:38:
ea:f0:cd:44:c5:eb:05:23:45:0f:ca:6f:aa:6b:c7:0d:1e:2a:
4d:2c:c6:58:d8:57:b8:60:a5:f2:9f:f7:3c:b0:00:9e:c2:54:
27:22:05:57:be:00:13:bf:ed:96:02:f2:5d:6e:42:c3:35:28:
0f:e1:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:23 2026 by rpki-client