Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3133312e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: hQV4f5tx6IES/gKFOUuwf1xeAXMGvNt1TuHwes9Tk1w=
Subject key identifier: 4E:39:E9:83:E5:AD:0D:6B:62:64:C6:44:8C:1D:EF:4E:1B:8A:D8:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DD6DD95685F6BC91043C9B990369B243F02C249
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 29 Sep 2026 07:29:26 +0000
ROA not before: Tue 29 Sep 2026 07:24:26 +0000
ROA not after: Tue 28 Sep 2027 07:29:26 +0000
asID: 219075
IP address blocks: 217.216.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d6:dd:95:68:5f:6b:c9:10:43:c9:b9:90:36:9b:24:3f:02:c2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:26 2026 GMT
Not After : Sep 28 07:29:26 2027 GMT
Subject: CN=4E39E983E5AD0D6B6264C6448C1DEF4E1B8AD82C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:f3:6b:aa:75:2e:01:c6:5a:d3:a5:54:94:
57:4b:2c:a8:34:7f:52:de:11:91:ee:ac:49:97:1e:
0f:9b:a3:a1:26:45:ad:6e:e8:14:ae:17:09:eb:e5:
a4:50:c4:cd:63:02:72:43:43:05:0b:2d:1d:87:87:
d6:6b:19:8c:77:7c:9b:27:6c:e7:7b:a2:42:48:63:
55:c3:91:05:db:90:42:b4:68:7d:b3:6b:66:ac:99:
6d:fd:75:e5:47:1a:b1:da:e6:df:0b:79:d6:b8:02:
90:33:85:12:7d:95:5d:fb:b0:09:3b:ec:ee:45:31:
12:e7:4e:b1:12:62:23:5f:c1:a0:e2:ea:3f:5a:ef:
6c:1f:c0:b6:37:72:b0:ab:39:24:57:f9:c2:3e:c6:
59:ce:ef:a7:e0:3c:5c:f0:b6:19:cb:a6:a2:fd:05:
c8:84:8b:9f:93:15:3e:60:dc:17:32:48:9d:1e:00:
c6:ea:0b:7f:82:15:97:22:59:2d:ac:89:5a:4a:3d:
07:32:ac:9e:83:73:cf:11:44:29:23:70:12:d7:6e:
53:e2:a3:fb:b1:8d:9a:5c:a7:ee:1f:8d:d1:c8:e1:
64:63:42:4e:3b:b7:6b:56:d1:1b:b4:b2:1a:ed:6b:
36:ad:3e:2c:ae:ce:48:bc:bb:c5:57:c0:18:d2:f5:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:E9:83:E5:AD:0D:6B:62:64:C6:44:8C:1D:EF:4E:1B:8A:D8:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b1:2b:15:6f:c3:ab:91:9b:51:66:7e:05:36:eb:23:6a:a4:
bd:64:1b:49:48:1e:1a:90:11:9a:81:b6:69:73:9c:a0:03:8b:
85:dc:02:ac:a3:65:a0:b3:5a:b0:e4:1c:7c:98:23:e6:7f:a7:
c0:83:83:7d:47:9c:4f:e7:f2:65:54:3c:c7:8e:ad:0d:a2:be:
ca:9c:c8:31:44:1e:63:58:d5:45:56:47:44:f8:39:f1:62:12:
5b:14:57:fa:0a:84:a4:2d:51:65:be:84:7c:b8:dd:be:f1:c4:
52:b6:fe:6c:98:82:9a:c6:c2:3c:c1:a7:c0:1a:93:9c:25:d7:
7a:08:f2:88:fc:82:c7:a5:3d:1d:a2:02:df:9f:ac:f3:52:82:
e3:2b:20:c7:ed:02:30:2c:be:32:75:44:3d:2c:d6:24:92:e5:
18:8d:d9:2e:e7:4f:c7:37:51:69:48:a0:d6:39:c7:16:88:0b:
50:60:33:cb:47:ec:cd:86:42:8e:b9:53:57:b8:2c:1f:00:a4:
15:68:63:40:f4:74:5e:1d:d4:76:c9:6b:09:49:6f:bf:fe:14:
fe:8d:ae:3b:5f:e3:00:67:27:46:26:e8:e0:da:3f:7a:60:f1:
f9:bc:f0:99:26:21:69:cc:b6:a5:9d:73:55:13:d0:ce:72:4a:
b1:ee:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:02:35 2026 by rpki-client