Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e35362e34302e302f32312d3332203d3e203430303231.roa
File: 3231322e35362e34302e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: r+D412mfRaJGPlW1VZxj47b9gHGXwkgSXmj16pAdYOI=
Subject key identifier: A2:AE:4F:01:B3:92:8B:3D:80:42:23:AC:71:E9:93:E4:2E:A6:DB:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F5B4F13440A23CF17E895420A2907D7AC9AC99C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e35362e34302e302f32312d3332203d3e203430303231.roa
Signing time: Mon 07 Sep 2026 09:28:33 +0000
ROA not before: Mon 07 Sep 2026 09:23:33 +0000
ROA not after: Mon 06 Sep 2027 09:28:33 +0000
asID: 40021
IP address blocks: 212.56.40.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5b:4f:13:44:0a:23:cf:17:e8:95:42:0a:29:07:d7:ac:9a:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 09:23:33 2026 GMT
Not After : Sep 6 09:28:33 2027 GMT
Subject: CN=A2AE4F01B3928B3D804223AC71E993E42EA6DBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:5f:5f:77:8d:e5:8a:f9:87:2b:b9:23:60:
bb:58:02:26:82:78:1a:44:26:7d:f2:f5:b8:70:75:
20:9f:0e:1c:01:3b:50:08:7e:9d:b8:a0:b3:57:1a:
50:71:80:fa:5c:72:82:47:05:a2:7c:92:aa:93:66:
e6:97:01:63:e7:d2:80:c5:95:09:f3:b2:36:da:95:
4e:47:23:ca:5f:c6:3c:f4:d5:91:ed:df:0b:95:ba:
d4:c2:f5:7f:af:5e:e5:a5:bb:5c:77:6f:a6:8a:ec:
00:c2:0c:a2:9f:04:6a:36:fa:94:fd:e1:c0:6a:7a:
c1:62:34:6e:21:cd:28:ee:c5:bd:1d:10:40:46:1c:
b2:66:e5:58:75:fd:e7:2c:e1:94:6b:e0:6e:1e:d3:
20:cd:55:66:91:7a:84:4e:7f:4d:91:24:30:48:36:
e1:e2:1c:35:75:80:52:fe:78:ca:37:f1:03:fe:90:
ca:f7:0e:1f:c6:bc:db:e5:ca:38:b5:ae:24:91:ce:
9d:6f:bc:9b:46:d3:a3:0f:b9:6c:c4:6c:1a:48:20:
2e:24:8c:f8:be:56:a6:ec:ed:e5:26:cb:d7:51:03:
ab:a1:84:68:b1:4d:48:1a:a3:c8:61:1b:9e:36:3e:
a4:58:76:2c:17:bf:e1:5f:4e:aa:99:c5:2c:fe:15:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:4F:01:B3:92:8B:3D:80:42:23:AC:71:E9:93:E4:2E:A6:DB:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e35362e34302e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.40.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:05:4f:2b:65:cd:dc:38:76:c0:8f:f5:d9:da:1d:b4:80:de:
cc:83:da:cd:0c:67:7e:81:47:79:15:f1:6a:f3:60:17:b8:2c:
64:35:15:53:f8:e5:cf:d4:60:29:27:a1:a2:82:04:a2:1e:9d:
13:92:15:bd:8b:f3:fe:99:c5:e0:11:4d:d6:89:d0:09:a5:e3:
b8:0d:ea:da:9d:d5:f2:6f:ac:57:dd:9a:a4:8b:22:63:07:cc:
d4:4c:ab:55:76:b4:17:dd:c4:18:bd:19:11:b0:c3:0a:4b:fa:
4e:b1:b1:b1:eb:16:5a:db:7b:2c:a3:4d:6b:23:44:34:05:98:
80:90:d0:b9:82:99:4a:64:06:59:d9:55:2d:d2:c5:d4:b0:0c:
fe:89:12:7d:b9:30:2b:62:a5:52:23:72:76:69:cb:2d:a9:20:
fb:38:e8:a0:3d:63:6e:15:3c:57:02:e1:51:f9:8a:5c:47:a6:
a4:d3:60:65:73:92:82:75:51:8e:a8:39:5f:04:9c:74:99:44:
66:68:c3:98:67:6e:ed:64:63:9e:7b:36:f4:4e:16:70:51:8b:
26:ef:65:3f:97:dd:9d:32:8d:2d:ae:f8:b7:3a:14:df:70:6f:
63:9e:35:b8:c4:66:a9:bd:bc:8c:ef:62:85:0a:a7:ea:c1:b5:
95:c7:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:08:07 2026 by rpki-client