Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e31362e302f32312d3234203d3e203437353833.roa
File: 3231322e38352e31362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: /y/XnFrn+KGEMigQWMH6ObwIx2/NmXBz4ysX9q6n1Jg=
Subject key identifier: 78:2E:BC:E9:22:A3:65:31:91:C9:E6:0A:70:B7:67:B9:EB:27:7E:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5114223588CD11222C017F5CEC8607B1928EA916
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e31362e302f32312d3234203d3e203437353833.roa
Signing time: Fri 30 Jan 2026 12:23:12 +0000
ROA not before: Fri 30 Jan 2026 12:18:12 +0000
ROA not after: Fri 29 Jan 2027 12:23:12 +0000
asID: 47583
IP address blocks: 212.85.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:14:22:35:88:cd:11:22:2c:01:7f:5c:ec:86:07:b1:92:8e:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 30 12:18:12 2026 GMT
Not After : Jan 29 12:23:12 2027 GMT
Subject: CN=782EBCE922A3653191C9E60A70B767B9EB277E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:a9:77:3f:c1:9f:a4:5c:c6:8e:cb:a6:c8:
86:7e:29:80:a8:cf:7b:65:61:1e:ec:14:0e:c2:2d:
41:9a:e2:ea:d0:31:93:36:6f:88:0f:f0:3d:73:cf:
03:c2:da:a0:13:de:f0:db:93:ad:cc:b7:2d:6b:7c:
db:00:a2:07:d1:b9:9e:9c:67:f5:12:85:d3:17:66:
d6:b6:c8:d2:26:9a:0f:14:d3:85:4d:f7:41:0b:ad:
23:52:36:cc:aa:c2:78:11:3e:aa:58:07:3e:bf:82:
1e:d2:ee:da:28:bd:76:91:ff:d9:e7:40:06:3c:7f:
ff:7b:0c:8a:8f:9e:8a:be:0f:22:05:d9:be:4e:38:
0b:a6:e4:28:00:55:81:0f:38:26:16:1f:15:d9:b2:
9a:9e:4e:34:80:08:8d:84:4a:f7:b8:4c:24:27:ee:
b4:5b:41:5b:20:f4:6c:6e:07:55:f5:51:f8:bc:96:
df:00:ad:30:ee:57:28:e7:a0:2b:71:f6:50:6d:2a:
d3:35:20:5e:03:0e:28:ed:88:22:55:81:f9:11:2a:
86:30:39:2d:e5:37:48:b0:cc:b1:f7:e2:c5:cd:9f:
08:60:2a:c4:15:5c:06:72:de:74:79:c6:1b:81:a5:
ed:98:6f:5c:b6:30:57:b3:36:fa:cb:a2:cd:03:25:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:BC:E9:22:A3:65:31:91:C9:E6:0A:70:B7:67:B9:EB:27:7E:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e31362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:7a:c9:c5:13:fa:07:a5:3f:9e:82:9c:20:1c:72:6a:f6:57:
cd:cb:9d:f2:14:d7:fe:1e:88:b5:67:66:b1:05:33:8c:cc:c1:
89:de:75:3a:1d:5d:48:fd:ce:63:98:a5:0e:8b:c6:80:48:24:
c2:e2:44:af:4c:12:cc:13:21:ac:13:e7:6a:09:98:7e:1c:3f:
c8:f6:81:1c:01:0d:43:44:4f:4a:72:5e:74:ea:9d:7c:34:23:
4d:c5:56:e7:a6:1f:39:00:18:d1:63:78:af:cc:0d:63:d7:49:
42:a5:51:2f:13:a3:61:49:3b:00:b1:fc:ab:cb:99:25:70:41:
ab:6e:2a:6b:cf:2a:bf:9f:f3:16:35:e7:53:c6:8f:c2:d0:9c:
b8:dd:80:cb:63:ff:b8:d3:78:a5:01:94:b5:44:8e:84:5e:14:
d4:5f:da:a1:54:e6:bb:80:3b:3e:01:38:31:44:f7:20:5a:a7:
0c:e6:01:07:05:e6:ad:f2:76:84:21:59:f3:38:7b:8b:cd:6a:
3a:02:fa:e2:8e:f1:ee:95:37:d7:81:cf:4e:81:25:94:50:dc:
fc:ba:01:b8:2a:36:1a:e0:99:2d:a3:8b:5b:10:2e:20:7d:10:
10:b7:34:3e:10:29:75:34:e2:fc:cb:1f:65:34:ab:59:a7:fd:
23:40:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:30 2026 by rpki-client