Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132332e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3132332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +fuijSFxxzL22s2cIcfM6jT5ftU8OK6/njp0xAFfrA8=
Subject key identifier: 7C:AE:56:27:26:D5:09:51:24:5B:99:BE:0F:AD:56:D3:63:14:4C:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F051A75E9E979D0285F8A69692F97991EE0B19D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:47 +0000
ROA not before: Thu 10 Sep 2026 13:23:47 +0000
ROA not after: Thu 09 Sep 2027 13:28:47 +0000
asID: 136787
IP address blocks: 217.216.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:05:1a:75:e9:e9:79:d0:28:5f:8a:69:69:2f:97:99:1e:e0:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:47 2026 GMT
Not After : Sep 9 13:28:47 2027 GMT
Subject: CN=7CAE562726D50951245B99BE0FAD56D363144C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:ba:67:90:f4:c7:f5:fb:13:b9:7a:64:95:
64:3d:55:30:18:a4:ef:5b:08:79:89:01:0c:f2:b3:
de:8b:bb:f7:8b:ae:a4:99:83:97:ca:69:13:a3:35:
88:a3:07:90:b6:20:fe:74:7f:20:f8:b9:94:47:5a:
7b:8c:29:7f:ae:3c:39:1c:37:97:16:f3:6c:29:e8:
5b:49:c1:08:3a:37:ce:3e:5f:8b:9e:1d:67:bb:de:
f6:7a:f7:45:9d:05:62:66:b4:16:32:89:ec:0d:d6:
d0:86:7c:9a:5a:d8:97:48:6f:64:1e:3a:a0:0a:1b:
57:9b:4c:b2:13:23:39:63:c1:4c:92:1c:e9:bc:b3:
d2:db:35:7d:ed:2a:e8:66:c3:80:66:b7:65:ac:a7:
bb:08:ba:b4:7e:9e:ce:a8:bb:10:1b:76:ca:bd:06:
cf:35:60:3a:07:2b:17:b7:50:ab:a3:15:a8:93:b1:
e4:61:ac:81:e5:cc:71:74:1e:37:b9:a9:a4:ca:d1:
96:c1:b1:5d:6b:ab:77:51:2c:42:92:6e:58:6e:cf:
88:ce:29:a5:2e:a0:b8:82:c5:34:89:6d:17:16:35:
c6:c9:0b:95:27:73:22:4d:62:93:ad:00:95:92:76:
22:61:36:d6:06:7d:52:a4:83:bc:7e:9d:e1:b4:58:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:56:27:26:D5:09:51:24:5B:99:BE:0F:AD:56:D3:63:14:4C:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:67:bb:51:8d:80:7c:02:c7:85:a1:1b:6a:78:92:79:cf:
b5:3a:f2:2f:9c:6d:e3:1d:f3:e2:ea:65:3f:cd:88:3e:85:65:
7e:6c:b5:fb:54:91:47:4d:4c:2e:64:0c:5e:72:6d:fb:ac:0c:
03:6e:68:f1:d9:fa:30:24:b2:f2:07:eb:4c:99:5a:6a:1d:36:
61:8d:65:a4:18:87:15:01:29:5b:11:9c:69:14:fb:e3:75:7e:
1d:99:4b:ff:47:e2:92:27:11:c9:83:95:a9:1e:2a:e3:d7:a1:
0c:df:66:97:b9:ba:7c:82:4c:02:21:5d:f4:98:ff:e8:c4:43:
23:f4:25:c1:e8:3a:63:b8:2b:90:9b:73:dc:3d:f0:3d:47:ca:
51:a3:12:48:7f:3c:31:86:ad:34:96:73:00:78:ef:cd:16:04:
11:1f:f4:72:b9:41:ec:38:4a:38:16:d8:d2:7a:f7:a7:68:0d:
c5:f0:eb:15:b2:82:af:d0:ae:1f:f3:99:cd:7e:b2:19:7a:3d:
22:8b:98:67:ae:aa:0c:f2:62:2d:e0:3e:27:d6:24:fc:71:01:
6d:fa:51:94:6a:22:05:6e:ab:c8:4d:8b:08:1c:cc:68:f5:f6:
33:6b:24:37:5c:f7:0a:75:55:8a:30:71:90:02:b1:c6:b3:da:
c6:2a:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:51:25 2026 by rpki-client