Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132352e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3132352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: S53akGvOwtcCN/pjgO+0/yoxCDR2fiCRqqUWoFF1WPA=
Subject key identifier: 4D:53:45:4A:30:4F:8A:22:2C:FA:9A:3A:3D:E6:62:AB:26:84:D0:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F02297F8805BC0853A826B40E660B91C396A9F0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:51 +0000
ROA not before: Thu 10 Sep 2026 13:23:51 +0000
ROA not after: Thu 09 Sep 2027 13:28:51 +0000
asID: 136787
IP address blocks: 217.216.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:02:29:7f:88:05:bc:08:53:a8:26:b4:0e:66:0b:91:c3:96:a9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:51 2026 GMT
Not After : Sep 9 13:28:51 2027 GMT
Subject: CN=4D53454A304F8A222CFA9A3A3DE662AB2684D0AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:b3:69:6f:ca:c8:38:9c:f5:5f:41:6a:74:
0a:35:dd:70:b1:36:9e:b8:b1:9e:d9:5d:a5:af:82:
f2:a0:cc:2b:27:86:a7:11:f6:74:c3:69:d4:a2:43:
f4:24:87:88:67:41:9a:18:fe:d7:f8:81:e5:0a:d4:
f8:fc:c5:a0:1a:ab:4a:70:4b:42:e6:aa:0c:a7:f5:
6d:f4:79:e5:72:36:9c:01:fd:e3:ec:dd:29:23:46:
9c:97:f8:ea:ea:ad:ae:48:f5:a0:03:71:ca:49:38:
f4:3f:b0:8d:84:6c:3a:54:7c:72:90:8c:2f:4b:66:
90:b3:80:24:0c:d1:eb:2a:19:8a:65:e5:c7:a0:5f:
ab:1d:1f:81:65:f1:2f:56:a5:f0:f2:3d:a5:00:c4:
dc:7f:9e:87:ca:7e:91:78:dc:ec:67:64:6a:76:0b:
3e:ab:59:9a:08:21:98:15:33:e1:03:c6:7e:fc:af:
b4:a2:12:4b:26:23:b6:b3:f9:11:d4:d4:69:4e:33:
a0:25:47:fd:3a:4b:27:b8:33:89:b4:a0:3a:f9:03:
7f:de:96:e3:5b:5a:03:00:ae:43:a2:13:fc:11:50:
30:0f:95:e3:11:ed:84:14:23:4f:22:23:ac:27:aa:
7c:c3:11:8d:4b:6c:0f:3c:78:cf:d7:74:90:43:3f:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:45:4A:30:4F:8A:22:2C:FA:9A:3A:3D:E6:62:AB:26:84:D0:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.125.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:ab:ad:56:95:f2:95:43:f1:76:36:77:4f:f2:10:76:dd:
b3:0a:6c:c6:2e:36:89:8e:88:e5:df:b0:cd:c4:f7:b3:80:3b:
ce:52:85:b8:c9:ad:4c:76:ff:c2:b9:f5:9c:86:e0:27:a3:ea:
f6:58:e4:67:42:ad:94:12:2f:af:3b:ff:21:bf:3f:8e:74:80:
99:53:cc:d3:ad:c3:6f:7a:8f:76:3b:78:91:39:27:d9:1e:0a:
bd:0a:9b:10:d4:b8:b5:a4:c3:60:c5:15:66:3c:1a:6d:59:f9:
3c:7d:c9:69:ea:64:94:95:7f:d1:23:d7:f6:f7:70:da:5c:bf:
5e:47:fc:a9:1a:8b:f6:7e:ab:e2:7d:68:27:91:78:c6:d4:61:
46:27:ec:68:68:87:6d:40:27:af:ef:d1:67:90:fd:c6:cf:80:
86:05:eb:69:d0:53:fb:a7:3d:2e:ef:9d:be:da:31:e9:60:15:
7f:0d:1c:ac:c0:af:bd:4c:80:b9:63:d0:94:b8:fc:3e:2c:1d:
07:66:48:77:03:81:91:3c:17:81:9e:36:9c:2b:8b:4a:17:7e:
cb:32:d8:7e:10:54:74:cc:fb:b6:58:c5:47:59:54:93:6d:4f:
99:2a:90:c6:2a:4a:e7:ee:9b:09:63:62:bb:da:0b:b4:41:f9:
88:0f:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:26 2026 by rpki-client