Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133312e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: 0UmRlQUVUhHqw8pvvYLzuL9E/dz+KP7LplA7KO6aWOk=
Subject key identifier: 84:C3:89:69:09:A1:07:DF:FC:EE:7C:49:19:01:C5:4E:4C:7A:92:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 656ED321193B38080A2CB156FECC03664B06DC03
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323138373937.roa
Signing time: Tue 29 Sep 2026 07:29:27 +0000
ROA not before: Tue 29 Sep 2026 07:24:27 +0000
ROA not after: Tue 28 Sep 2027 07:29:27 +0000
asID: 218797
IP address blocks: 217.216.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6e:d3:21:19:3b:38:08:0a:2c:b1:56:fe:cc:03:66:4b:06:dc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:27 2026 GMT
Not After : Sep 28 07:29:27 2027 GMT
Subject: CN=84C3896909A107DFFCEE7C491901C54E4C7A9224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:6e:f7:1f:39:69:f8:76:37:8f:53:2b:dc:
36:69:af:26:c5:14:67:33:14:f1:dc:f8:c2:1a:00:
8b:da:7f:60:1e:59:26:31:3c:49:d6:2c:73:ff:03:
bf:f9:bf:22:89:55:bc:4c:24:50:1f:c8:32:f5:60:
a9:33:e3:82:67:f9:d6:ba:f1:42:e1:53:b0:1e:87:
9f:c4:84:9d:65:a7:22:9f:f5:f0:eb:39:be:34:07:
c1:4a:ee:fc:3b:0c:22:2a:9b:60:32:4b:16:3a:42:
9d:e4:43:d4:ff:dc:75:81:b0:d9:f3:78:c9:96:a0:
05:45:5e:78:63:71:fa:10:b0:54:6a:b9:32:22:e1:
17:0b:1c:2f:5a:17:f1:07:70:2c:2f:69:1a:0b:54:
bf:f3:20:0c:f8:3e:fa:0f:3f:8d:08:c4:59:e4:f9:
45:94:1d:64:e2:dc:7e:25:80:63:51:75:89:2b:45:
53:69:4e:24:0d:b1:21:8e:ed:9a:18:ff:21:da:3b:
9d:b4:53:74:8e:4a:0e:89:6f:78:3f:91:1c:05:06:
1d:48:58:0b:de:64:85:f7:ef:1b:cf:93:69:4e:a5:
24:7b:86:69:c5:3b:58:30:54:cb:19:59:82:b4:57:
30:b0:47:43:6b:3f:af:36:15:2f:cf:2a:bb:95:4c:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:89:69:09:A1:07:DF:FC:EE:7C:49:19:01:C5:4E:4C:7A:92:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
87:41:83:d4:69:75:ca:92:e1:dd:d7:c0:89:8e:6d:03:bc:fe:
63:f3:3a:89:71:35:e5:b6:eb:09:75:73:b4:64:db:a1:5a:70:
c6:e3:3b:5f:05:57:c8:28:3d:4f:49:c8:40:bd:9d:32:c8:6b:
0d:4f:21:a9:29:f0:b6:7a:8d:5b:10:b7:3a:0c:0a:16:55:8c:
04:4f:c0:34:07:08:c6:2f:c3:e4:2d:b4:21:80:69:e7:ea:59:
a0:00:9d:07:d0:89:68:2f:2f:2b:5e:d4:04:85:39:25:92:3a:
28:d3:d0:90:c5:17:0a:19:3c:69:83:4b:fb:77:ea:81:68:42:
e3:8f:dc:fb:f3:27:80:6d:93:83:b2:3c:b8:ee:56:6a:5e:16:
f2:82:10:e6:64:7b:d4:81:e5:28:68:a6:1b:b2:6e:8f:13:9c:
a4:7e:14:42:01:91:d2:79:e9:6c:a1:60:a5:ef:d2:b7:c6:22:
42:d4:24:30:ea:72:7b:2e:0e:5c:ec:90:90:0e:d2:23:73:ca:
ac:d6:dc:06:73:64:13:7c:09:03:0c:e0:af:ec:2a:27:1f:c5:
a2:00:19:68:94:c5:ba:a5:b4:78:5f:14:86:b7:22:09:8a:78:
b1:2a:78:86:ef:20:2f:75:6c:51:d8:8f:00:91:02:d8:15:04:
49:64:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:29:20 2026 by rpki-client