Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133302e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3133302e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: IO43vijFkJBYlI+eRHT02PlGvN9sQX5f7y/MyBMvLF8=
Subject key identifier: 85:1A:84:F1:71:1E:37:EF:07:03:22:43:C3:5B:EC:09:AA:F9:4B:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 30776C86842484BD5082DF10BF6F79A2583E2AD7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133302e302f32342d3234203d3e20323138393130.roa
Signing time: Wed 30 Sep 2026 10:20:46 +0000
ROA not before: Wed 30 Sep 2026 10:15:46 +0000
ROA not after: Wed 29 Sep 2027 10:20:46 +0000
asID: 218910
IP address blocks: 217.216.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:77:6c:86:84:24:84:bd:50:82:df:10:bf:6f:79:a2:58:3e:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:46 2026 GMT
Not After : Sep 29 10:20:46 2027 GMT
Subject: CN=851A84F1711E37EF07032243C35BEC09AAF94B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:59:ab:09:b3:a3:36:89:d5:df:fa:5e:c4:
55:e4:b1:04:fb:fe:55:88:d6:29:74:97:7b:c2:fc:
d5:8f:97:c9:a8:16:f6:7c:9d:60:ee:b5:95:1b:9c:
19:74:da:10:e3:82:9d:08:93:52:94:d2:7f:2e:cc:
af:d3:1c:7e:30:4e:be:9b:02:51:f6:0b:da:e8:ad:
b8:3a:f8:db:ef:61:75:a1:30:2d:f7:f2:c0:a6:7a:
26:da:e6:3d:88:28:fa:e8:d1:31:3e:3c:a5:22:b7:
ee:2a:f4:2d:d7:ec:8f:2c:40:75:e3:2d:80:96:6a:
3b:8d:79:b9:9f:e5:83:d0:ed:06:f5:36:3f:3d:8e:
16:6a:17:b6:b7:25:2f:88:a9:e2:33:41:67:82:cb:
35:00:c8:b8:02:6c:51:f9:fb:b4:9b:99:42:15:e1:
91:21:c8:67:a1:8f:bf:76:a1:f9:06:ac:3c:f7:c7:
2b:52:02:5e:f6:c9:51:8f:d9:54:5c:d5:e9:da:87:
82:16:1b:9f:ab:c9:25:5e:99:25:7b:6c:d0:89:b0:
73:df:6c:08:6b:6d:ae:d0:dd:b3:f2:c5:97:5e:4d:
c3:25:02:27:bd:d4:1d:c2:ee:99:fa:94:55:3d:13:
d0:0e:2c:bc:ab:cf:5e:66:2b:cb:d2:b3:ec:a6:89:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:84:F1:71:1E:37:EF:07:03:22:43:C3:5B:EC:09:AA:F9:4B:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133302e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bb:08:75:12:fb:cc:7a:84:65:fb:83:23:08:2a:e8:8c:46:
b1:e3:6e:2b:7b:b2:e8:8e:00:be:a9:17:0f:2d:fa:47:b3:53:
7b:bc:0e:f2:1f:b9:61:71:61:40:ca:10:2b:f1:39:75:b7:3a:
6a:72:b6:ab:26:ba:3e:33:5b:51:ed:55:08:32:da:e5:2b:fa:
f7:8d:fb:9f:4d:6c:c6:39:bb:e8:30:52:aa:02:23:79:b5:8b:
89:41:ad:e9:65:14:69:60:0c:c5:78:a1:b6:75:96:04:56:2e:
25:29:a4:21:d8:a1:21:0f:4c:52:ab:e2:bf:20:49:de:a4:81:
62:db:fd:d8:30:16:3e:6d:21:e8:2c:84:ad:7f:3d:b7:04:1d:
e2:7c:79:d8:c9:fc:de:55:35:84:99:b6:5f:27:b9:00:1e:9d:
d6:40:cd:a6:09:9e:45:bb:e1:85:60:ee:fe:25:53:27:49:1a:
db:e8:88:83:8f:6c:80:a0:a6:bb:7f:c1:96:3c:1a:f1:81:50:
5a:dc:aa:bd:07:39:49:59:12:80:9e:09:1b:21:5a:5a:5e:fb:
cc:c2:b7:c3:d9:30:96:fd:d9:17:eb:b8:e8:9c:4b:2f:bd:c3:
5f:b8:1f:b2:3e:18:f1:1b:06:59:c6:46:08:88:a5:14:4c:71:
bc:aa:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:58 2026 by rpki-client