Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hpGYEmZc1Bvht5FMr1PJqfpUNJmcDUv2+17Ya2ixN2Q=
Subject key identifier: 11:62:32:A4:4B:DF:87:35:C2:3E:FE:12:05:3D:A3:02:AF:A0:EE:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A0AE70C847F64CCCE49323988A75427E0651682
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:47 +0000
ROA not before: Thu 10 Sep 2026 13:23:47 +0000
ROA not after: Thu 09 Sep 2027 13:28:47 +0000
asID: 136787
IP address blocks: 217.216.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:0a:e7:0c:84:7f:64:cc:ce:49:32:39:88:a7:54:27:e0:65:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:47 2026 GMT
Not After : Sep 9 13:28:47 2027 GMT
Subject: CN=116232A44BDF8735C23EFE12053DA302AFA0EEC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:0f:ee:47:96:fe:a9:8b:0c:b5:fc:4a:c4:
f7:60:3f:51:d5:e0:19:21:4e:e1:d8:a6:d2:c6:a7:
b1:9a:8b:86:66:d8:eb:e3:d3:9d:d9:97:ef:6a:44:
4a:f6:26:76:9a:14:0e:49:3e:f4:96:0f:50:0a:af:
ed:ed:60:b8:72:56:10:6a:d6:a7:e3:6a:31:76:2c:
e7:91:a0:9d:21:08:19:e3:38:cf:56:ee:a0:f0:81:
53:de:a3:06:28:23:c0:4c:1a:15:d3:b0:55:01:b5:
be:09:bf:0e:a6:bf:da:e9:0f:af:c2:8c:8b:59:0a:
61:5c:22:a4:da:3b:a1:3e:fa:e1:81:21:99:5b:fa:
e7:8a:5b:04:f5:ef:c7:c0:53:4e:78:2c:13:e8:35:
8b:6e:d6:db:e7:e0:8f:bd:f0:ff:a3:e6:b2:0a:a3:
9e:00:93:50:e4:4b:8f:7a:90:23:19:8c:88:56:fd:
e1:63:1f:f2:b9:f2:56:95:05:74:07:69:9c:2f:00:
f8:dd:97:bd:e6:1b:35:31:f6:a3:50:62:b0:99:8a:
ef:52:09:2b:90:e9:00:7b:28:91:2b:c5:48:29:3d:
31:52:5f:e2:1b:f2:6a:3c:40:d8:4b:db:60:4e:b9:
13:a9:47:6f:2d:f3:44:51:38:fe:59:47:49:3a:2c:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:32:A4:4B:DF:87:35:C2:3E:FE:12:05:3D:A3:02:AF:A0:EE:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0d:03:1f:bf:96:82:7f:b4:b0:06:ba:d4:3d:a4:93:33:d2:
5d:a3:ea:74:0d:8b:d8:90:62:1f:5a:27:68:ff:2e:35:03:30:
64:d8:01:89:18:61:cc:4e:3d:da:7d:fd:a3:dd:b0:20:67:05:
e2:c6:06:75:ef:57:4d:d7:22:20:3d:3d:c4:d6:12:37:60:b4:
3a:8c:50:ed:5a:82:a3:de:5a:01:09:a4:a0:72:ef:51:6c:35:
1c:25:be:5a:c4:6d:e7:bb:11:c3:f7:eb:98:d4:43:f8:d5:1e:
32:0a:1a:a1:dd:6a:8d:dd:88:69:af:09:46:a8:f0:5d:e0:d7:
6c:2d:d7:12:bb:7f:ce:45:3b:4e:9d:21:4e:bc:9b:c3:34:6e:
a8:f3:a3:f2:74:89:8d:58:d8:af:02:9d:cd:36:cd:88:07:2d:
66:20:3c:47:48:e4:02:56:23:d0:24:c9:32:5c:6d:ff:c1:2a:
d9:4c:e1:d6:42:9d:ff:4d:98:f6:8c:21:17:eb:de:17:f9:c5:
4f:71:37:ca:6a:af:03:af:00:b6:3b:cc:79:ff:b5:70:8c:f9:
9b:1a:82:9a:42:1c:6e:63:cf:5d:fd:56:ac:b9:0d:37:cf:43:
76:73:6a:5b:26:f6:ad:95:ec:2f:4b:46:3d:36:36:16:89:0c:
bc:db:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:20 2026 by rpki-client