Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e302e302f32312d3234203d3e203437353833.roa
File: 3231322e38352e302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: GvNNJw5jB+3X1Hz3fEbMVVVgwl5BInz57NhiDfvyK58=
Subject key identifier: C4:86:2D:2E:72:ED:FB:77:9F:0B:88:55:56:DD:15:AE:79:A5:B0:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2EB445792FC4088B5CF26F21E4EDCB57A09C4397
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e302e302f32312d3234203d3e203437353833.roa
Signing time: Fri 30 Jan 2026 12:23:12 +0000
ROA not before: Fri 30 Jan 2026 12:18:12 +0000
ROA not after: Fri 29 Jan 2027 12:23:12 +0000
asID: 47583
IP address blocks: 212.85.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b4:45:79:2f:c4:08:8b:5c:f2:6f:21:e4:ed:cb:57:a0:9c:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 30 12:18:12 2026 GMT
Not After : Jan 29 12:23:12 2027 GMT
Subject: CN=C4862D2E72EDFB779F0B885556DD15AE79A5B051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:d3:ba:ae:0d:47:0c:50:31:bd:96:2b:23:
f9:ed:c8:0f:9c:a4:69:f4:00:0b:f3:0f:0a:38:e4:
b9:1b:1b:a4:2e:27:6b:9e:72:17:e3:69:85:2a:48:
9a:1f:d5:36:d3:df:4a:49:78:9c:b2:1b:95:2b:d5:
30:5d:31:67:c9:44:fe:ea:51:60:7a:98:69:cc:d0:
23:02:47:35:ef:1d:00:19:91:db:27:33:c6:65:79:
c4:6c:a6:72:f9:d7:b4:ad:e4:aa:96:fd:43:5e:5e:
6f:bf:94:15:a9:eb:f2:6f:b3:d9:3c:0d:c0:61:fd:
e3:9f:82:ac:73:2d:73:81:60:f7:32:f6:cb:58:b0:
00:8d:05:db:fc:55:21:21:65:cd:9c:cc:77:9f:17:
5e:73:be:e0:61:79:76:68:12:f1:c6:b9:18:67:23:
fb:67:88:cd:a8:e4:79:d1:73:1c:5c:f0:15:e6:a2:
c1:f6:eb:5e:59:61:d8:f8:4c:c4:25:81:0c:cd:2f:
49:f5:53:c1:c6:fb:db:c8:72:3f:bd:04:7a:45:6e:
27:97:9f:05:15:cd:21:2a:f5:e2:6b:1f:6d:56:31:
ac:8d:07:fc:ae:49:a3:c0:2f:b5:b2:63:e0:a4:72:
ff:35:3e:02:c9:40:ca:0f:6f:ac:1a:f7:58:a7:f0:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:2D:2E:72:ED:FB:77:9F:0B:88:55:56:DD:15:AE:79:A5:B0:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.0.0/21
Signature Algorithm: sha256WithRSAEncryption
21:13:29:ca:85:88:18:dc:e9:ca:82:d6:79:14:0e:83:67:70:
c1:04:1a:72:a5:ac:94:2c:0a:79:81:04:95:91:60:5c:d7:69:
e6:51:ab:4c:c3:f5:83:f2:ae:40:bf:49:43:91:4b:55:3b:56:
d9:69:0c:92:46:f5:c0:2a:95:f4:56:79:1d:bf:08:25:21:9d:
62:fd:fc:45:00:84:93:41:1b:b2:df:9c:e7:0d:aa:a5:81:a8:
e2:70:76:e5:9d:5a:38:12:9e:8c:e5:2d:af:69:4b:ab:be:17:
de:22:39:d1:df:92:9e:ed:44:22:f0:2f:6a:44:dc:78:b8:f5:
f9:cc:fe:9f:1b:89:52:a0:17:1b:6e:fd:de:60:25:68:38:57:
d6:17:b1:93:ac:2b:0c:23:2d:3e:bd:0c:75:ac:2c:fc:82:47:
66:6c:83:b7:9d:36:e0:2a:fb:1c:32:03:46:17:7b:f8:75:fe:
4a:bd:88:af:c7:68:e8:78:cd:11:3c:3a:97:05:6d:86:f8:67:
cc:28:de:0d:9b:8b:5c:f3:51:39:bf:42:9a:c7:2f:5a:7a:9c:
e3:10:84:56:bf:c3:20:6a:6b:bb:2e:1b:84:a1:2b:f3:ee:90:
e7:2e:17:21:97:26:9f:37:59:e7:7b:fb:8e:ac:fd:23:4d:40:
f7:55:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:03 2026 by rpki-client