Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e32382e302f32332d3234203d3e203437353833.roa
File: 3231322e38352e32382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: CNIxidcN6lcXd2OOqUXeJkvBDz0zn/5uMFzrNiXRQmc=
Subject key identifier: C8:E7:A4:E6:26:35:6C:31:D8:14:88:E6:1D:07:63:57:D4:31:99:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61097CB699DAE0AD727CDFD21841F43BCF1C5B4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e32382e302f32332d3234203d3e203437353833.roa
Signing time: Mon 09 Feb 2026 16:23:18 +0000
ROA not before: Mon 09 Feb 2026 16:18:18 +0000
ROA not after: Mon 08 Feb 2027 16:23:18 +0000
asID: 47583
IP address blocks: 212.85.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:09:7c:b6:99:da:e0:ad:72:7c:df:d2:18:41:f4:3b:cf:1c:5b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 9 16:18:18 2026 GMT
Not After : Feb 8 16:23:18 2027 GMT
Subject: CN=C8E7A4E626356C31D81488E61D076357D431996C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:0f:6f:13:af:3a:93:f1:81:bc:56:cc:db:
8b:f6:38:62:8c:cf:26:80:de:c4:a4:32:62:1d:e5:
8c:d9:46:ef:35:d1:25:b5:e4:90:75:47:d3:44:ac:
b0:62:3d:01:1e:40:a8:ac:7d:2f:8b:1b:a9:0f:80:
b3:58:1d:aa:da:a9:4b:09:e4:a2:8b:ba:3f:f9:a2:
f1:6b:ea:c0:5e:2d:1b:89:8d:bd:13:03:1e:4c:d1:
05:73:e7:25:9d:27:39:67:4a:06:9a:73:b7:69:f8:
02:5b:08:4b:5b:eb:81:4a:2d:c6:27:0b:67:46:fa:
ec:ac:6b:85:25:36:a7:38:39:d0:4b:4e:a6:c8:d9:
6b:7c:78:39:35:01:50:90:62:ba:60:3b:94:68:2f:
e1:04:c3:5d:be:a4:68:ed:11:8e:24:98:2a:fc:fc:
cd:5c:2e:89:29:36:c5:4f:6a:c0:2c:70:e1:f1:53:
9b:84:ad:ec:f9:53:6f:93:57:87:32:f2:37:6d:0a:
34:a2:da:03:0f:87:9e:04:61:67:0f:31:f2:23:fd:
37:c9:5d:74:5b:88:78:62:08:50:2e:c6:d2:6a:70:
ea:3e:23:68:74:6b:09:a7:23:36:60:8e:b9:01:be:
a4:fc:a1:d3:15:54:35:f6:8d:e3:b1:db:fc:31:e9:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:A4:E6:26:35:6C:31:D8:14:88:E6:1D:07:63:57:D4:31:99:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e32382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:99:98:d2:9f:f5:d0:6e:1f:ab:9d:9d:20:8b:4d:97:71:16:
6c:d2:ab:79:7e:16:3d:7d:04:a4:49:3c:7e:15:fb:7e:20:9c:
2c:7d:7a:42:dc:f4:f4:7f:11:85:84:27:a2:95:53:8b:1c:c3:
95:68:0e:5d:bc:91:18:d3:b4:3c:8b:cd:97:86:0d:09:6a:1a:
f7:e1:37:17:c1:6c:ba:84:b9:c8:81:ac:83:9f:34:e3:25:1f:
ee:4e:85:5c:10:f2:52:f9:af:fb:b7:c3:56:b3:e9:7e:43:84:
83:a6:81:be:3e:58:f7:b5:bb:a4:d7:86:b9:e9:74:69:4c:f8:
df:64:43:a4:5c:84:d4:75:8c:d0:c3:f6:c0:91:94:c9:fa:da:
a1:6b:b4:1e:43:8f:2b:e4:e5:d7:1f:14:81:3a:9b:43:0b:a6:
1c:e8:1a:9a:69:e6:91:0c:5f:e0:01:e3:0e:a3:cb:b7:5f:f3:
5a:21:82:13:e3:9b:7f:e6:cd:bf:28:4e:3e:0f:45:3e:37:5d:
9f:ce:d3:91:4a:f4:6f:90:39:5e:d8:9e:32:6d:f6:62:87:d5:
8f:cb:0a:cd:ee:3a:d6:58:56:1b:cd:2e:27:69:2f:b7:e3:41:
7c:2e:d3:cd:49:74:9b:ea:28:90:13:17:2b:f4:38:ea:f3:4e:
73:fe:a5:60
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYQl8tpna4K1yfN/SGEH0O88cW0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMDkxNjE4MThaFw0yNzAyMDgxNjIzMThaMDMxMTAvBgNV
BAMTKEM4RTdBNEU2MjYzNTZDMzFEODE0ODhFNjFEMDc2MzU3RDQzMTk5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PQ9vE686k/GBvFbM24v2OGKM
zyaA3sSkMmId5YzZRu810SW15JB1R9NErLBiPQEeQKisfS+LG6kPgLNYHaraqUsJ
5KKLuj/5ovFr6sBeLRuJjb0TAx5M0QVz5yWdJzlnSgaac7dp+AJbCEtb64FKLcYn
C2dG+uysa4UlNqc4OdBLTqbI2Wt8eDk1AVCQYrpgO5RoL+EEw12+pGjtEY4kmCr8
/M1cLokpNsVPasAscOHxU5uErez5U2+TV4cy8jdtCjSi2gMPh54EYWcPMfIj/TfJ
XXRbiHhiCFAuxtJqcOo+I2h0awmnIzZgjrkBvqT8odMVVDX2jeOx2/wx6XOHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUyOek5iY1bDHYFIjmHQdjV9QxmWwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzODM1MmUzMjM4
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRV
HDANBgkqhkiG9w0BAQsFAAOCAQEACpmY0p/10G4fq52dIItNl3EWbNKreX4WPX0E
pEk8fhX7fiCcLH16Qtz09H8RhYQnopVTixzDlWgOXbyRGNO0PIvNl4YNCWoa9+E3
F8FsuoS5yIGsg5804yUf7k6FXBDyUvmv+7fDVrPpfkOEg6aBvj5Y97W7pNeGuel0
aUz432RDpFyE1HWM0MP2wJGUyfraoWu0HkOPK+Tl1x8UgTqbQwumHOgammnmkQxf
4AHjDqPLt1/zWiGCE+Obf+bNvyhOPg9FPjddn87TkUr0b5A5XtieMm32YofVj8sK
ze461lhWG80uJ2kvt+NBfC7TzUl0m+ookBMXK/Q46vNOc/6lYA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:44 2026 by rpki-client