Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: HEdL/93HydtvM9v62ZGOA0ATVKTdiqNe3/qrEQSlboQ=
Subject key identifier: 7F:8D:9C:0F:52:6D:A9:C3:30:B7:07:04:8E:4B:D6:66:3D:00:11:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DC417BCAE387F1D310F3499D0C0458D98334E0B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 14 Oct 2026 16:29:43 +0000
ROA not before: Wed 14 Oct 2026 16:24:43 +0000
ROA not after: Wed 13 Oct 2027 16:29:43 +0000
asID: 136787
IP address blocks: 217.216.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c4:17:bc:ae:38:7f:1d:31:0f:34:99:d0:c0:45:8d:98:33:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 16:24:43 2026 GMT
Not After : Oct 13 16:29:43 2027 GMT
Subject: CN=7F8D9C0F526DA9C330B707048E4BD6663D00114F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:a3:7c:d1:a6:00:a7:20:31:75:b1:42:c5:
31:a7:43:fd:5a:c2:1d:92:2c:b1:2b:bb:e6:9f:80:
79:55:44:2b:64:89:e4:09:48:26:0b:36:2e:d4:14:
6c:5a:96:82:68:e4:ef:1b:97:5b:1a:cd:85:ff:48:
4d:02:ae:64:18:71:28:0c:ba:29:e6:2c:fe:0b:66:
8d:d7:de:7d:e6:8e:97:66:ac:5a:0a:e9:43:c7:7a:
df:52:17:01:fd:62:38:56:d5:7f:38:e4:8a:26:9b:
49:41:24:e9:b7:a8:33:53:22:01:ff:90:54:0e:a0:
1e:9c:30:65:e3:dc:f1:d2:f5:75:c9:21:ff:21:61:
63:cc:78:3c:7d:9e:37:00:8a:97:61:19:79:3e:1d:
a1:65:08:9d:fe:ff:62:3e:d0:2b:3f:b4:11:0c:ee:
fe:fd:58:cc:93:2b:76:d6:de:5b:7e:eb:e3:3f:e0:
4a:41:8d:83:50:45:e6:e3:b4:01:73:02:bb:24:ac:
0b:70:af:14:d1:8a:31:b0:e7:e6:b4:04:37:68:4b:
ee:39:f3:90:7c:c9:44:c8:1f:ec:8e:e2:cd:10:12:
cf:4a:2f:33:16:b0:d2:29:87:99:3a:25:31:0e:cf:
91:95:a7:37:ec:a4:de:01:14:85:aa:b9:ea:2c:84:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:9C:0F:52:6D:A9:C3:30:B7:07:04:8E:4B:D6:66:3D:00:11:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.107.0/24
Signature Algorithm: sha256WithRSAEncryption
62:06:0e:1d:2d:95:80:e5:75:50:83:ef:4f:6d:4e:97:75:ff:
9b:8a:e4:9b:74:bd:bc:18:fd:b9:00:3c:86:bb:67:59:ec:8f:
46:69:ae:5f:d6:b1:da:59:e9:42:4e:76:30:7f:97:4e:04:ad:
67:a7:43:4a:f3:55:7b:59:5e:0d:cb:82:04:06:46:21:ce:e5:
61:9f:88:de:de:b4:86:e1:dc:34:14:5a:f9:f4:c3:0c:6a:86:
b6:09:c8:74:1b:a5:95:df:15:04:8f:3d:68:57:8e:b6:8d:41:
22:ce:76:8f:26:76:02:6d:9e:88:8a:b9:ef:04:ad:fd:ee:bc:
0a:9a:e7:82:fa:16:12:d2:1d:56:3e:0b:8d:e4:77:d7:00:eb:
70:b3:c8:13:fe:5e:44:7e:68:9c:61:fe:16:01:24:18:0f:1d:
be:31:4a:d9:eb:6d:45:b0:5c:88:1a:60:af:8f:57:5d:46:b4:
09:68:39:0b:81:2a:85:c7:fd:82:81:76:72:00:fb:33:b1:8f:
c3:25:b8:40:98:84:ca:79:2d:96:b9:11:ff:43:d3:b9:e4:67:
34:d4:97:f2:16:85:f8:84:75:29:cc:e2:18:65:e4:07:41:11:
db:cc:bf:ae:d2:f2:6e:69:d4:71:c8:48:58:45:4e:2c:b4:6c:
ba:3c:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:24:20 2026 by rpki-client