Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133302e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133302e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: 8dtThjxA45UvOGhbEYGYbAxgiz5JI6E+SRdnp96uTxw=
Subject key identifier: E6:45:2F:93:E3:5D:CA:DF:21:EF:0E:4F:79:98:CE:2E:A5:1A:D1:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 471DC846022B96813D9C8A7039CA0583E7318366
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133302e302f32342d3234203d3e20323138393131.roa
Signing time: Wed 30 Sep 2026 10:20:49 +0000
ROA not before: Wed 30 Sep 2026 10:15:49 +0000
ROA not after: Wed 29 Sep 2027 10:20:49 +0000
asID: 218911
IP address blocks: 217.216.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1d:c8:46:02:2b:96:81:3d:9c:8a:70:39:ca:05:83:e7:31:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:49 2026 GMT
Not After : Sep 29 10:20:49 2027 GMT
Subject: CN=E6452F93E35DCADF21EF0E4F7998CE2EA51AD1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:55:98:3c:9c:9c:31:91:83:a1:19:01:c7:
3d:93:18:17:a3:41:2a:3d:a7:31:8a:c9:74:78:3c:
1d:71:ec:f0:72:56:43:5e:2a:4e:93:4d:20:3b:ba:
9a:41:95:7a:d9:51:29:2a:27:95:3b:59:ea:69:cb:
b3:00:1d:f7:13:3a:aa:3c:0f:b0:a4:dc:b8:6a:d2:
71:3a:cb:46:49:99:98:fe:b9:36:d1:c1:f5:0a:68:
82:8e:ac:5e:3d:7c:62:c1:d8:08:5c:29:d0:a5:79:
5a:8f:f3:ef:12:c0:76:3a:ab:a4:31:2d:e0:32:fd:
7f:a3:57:e8:75:94:b0:70:55:d6:fa:97:8a:77:b2:
20:d2:69:de:db:15:60:33:15:65:2b:31:4f:4a:eb:
d3:f7:3a:3d:99:9c:17:8f:07:c0:39:2c:de:55:c2:
cc:5a:64:ef:7c:a6:c9:47:e4:30:78:3b:4e:73:52:
9b:59:d6:ea:52:81:41:5a:68:52:f7:8a:e1:b4:79:
19:64:d0:0f:ce:49:bc:0c:7f:7d:b1:df:19:f9:29:
b1:e7:a1:03:a0:84:3f:96:e8:3e:92:2b:f3:17:01:
2c:cf:30:7d:fe:f0:04:97:8e:c8:c2:c5:5d:b5:32:
ba:f2:05:ed:b5:ff:f4:59:e7:3f:6f:9c:47:d5:cc:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:2F:93:E3:5D:CA:DF:21:EF:0E:4F:79:98:CE:2E:A5:1A:D1:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133302e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cf:92:10:76:5d:db:73:67:0b:ca:25:a6:7f:9b:65:b3:1b:
b1:eb:12:e0:54:51:ca:69:8f:23:a4:aa:f8:45:52:5f:d2:59:
e5:7a:ad:5d:1e:c2:8a:58:97:69:9d:50:82:13:d9:57:dd:ce:
35:69:55:49:2e:d7:6f:72:f0:d9:27:f7:a7:59:24:e4:7d:b0:
37:43:b0:78:b1:d4:00:79:ea:8f:b2:b4:12:10:cb:97:2d:53:
91:a4:6f:28:b3:59:69:88:b9:0e:9d:4e:2e:a8:9b:f5:5e:21:
2f:5f:1a:b6:eb:66:ae:b3:ee:45:31:72:a4:0f:70:0b:72:79:
60:cc:3b:f7:dd:a4:93:9d:18:4b:cd:98:d0:bd:17:04:3a:f4:
55:ba:16:5b:c6:60:f6:ea:bc:1d:87:d7:f1:84:6a:ef:bc:ff:
aa:9e:85:5b:da:6d:63:0d:67:ae:b3:d4:ae:aa:5e:e2:df:2a:
dc:79:95:b2:ff:f8:b1:9c:b3:a6:3a:07:86:2c:f5:12:2d:b1:
4b:13:18:98:84:87:a9:bc:e8:0f:43:28:16:0b:11:43:ec:f3:
48:11:09:69:47:f5:ca:2c:dd:c6:aa:a1:0d:92:3b:77:6c:69:
12:7b:da:6e:26:90:a0:1e:b8:0e:af:58:0f:e1:32:4c:ca:77:
37:ec:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:46 2026 by rpki-client