Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133322e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133322e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: qcbu2K4SaBiZd1C5toNgE1eZqykTJZRVskJKxvmAjNU=
Subject key identifier: D0:62:44:6F:7D:B5:A0:46:70:CB:D6:EE:54:95:CE:57:34:7A:B8:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3129F323E9C0F138A2DD906A8032E1F5B0A6C7AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133322e302f32342d3234203d3e20323138373937.roa
Signing time: Mon 28 Sep 2026 10:37:39 +0000
ROA not before: Mon 28 Sep 2026 10:32:39 +0000
ROA not after: Mon 27 Sep 2027 10:37:39 +0000
asID: 218797
IP address blocks: 217.216.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:29:f3:23:e9:c0:f1:38:a2:dd:90:6a:80:32:e1:f5:b0:a6:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 10:32:39 2026 GMT
Not After : Sep 27 10:37:39 2027 GMT
Subject: CN=D062446F7DB5A04670CBD6EE5495CE57347AB879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:69:7d:ad:5c:7a:e0:57:96:0b:95:e8:6c:
7c:01:d1:a7:19:4a:5f:59:96:05:37:01:57:96:8c:
bf:10:6e:25:e6:0d:4c:63:bd:c8:22:2d:fa:96:d6:
39:74:f9:07:27:0b:fe:ba:7e:3f:13:03:ba:e1:e0:
81:95:55:86:54:ee:07:25:1a:48:54:9c:c2:aa:3c:
90:2e:78:e9:05:29:8b:a3:aa:08:8f:81:fe:c0:51:
9b:4a:70:e5:32:69:42:13:c1:da:6f:a0:d8:84:fa:
f8:68:1e:58:c7:1a:05:52:32:f7:f5:99:e3:d2:17:
ec:08:db:34:d3:47:a6:7c:e9:03:58:c8:c5:ad:96:
6e:bd:b3:e9:cc:01:68:63:8b:78:44:d7:97:1d:2d:
17:f4:4a:ec:68:99:da:8c:d5:3d:e0:54:f1:9d:8b:
9a:f9:ba:8c:f9:74:2b:78:2f:a7:3e:7a:92:a7:3c:
f5:95:86:84:83:b9:30:59:26:79:14:01:c0:31:02:
be:cf:5e:d3:94:cd:1f:24:21:ec:10:ac:96:38:72:
14:cb:c6:9e:7a:2d:0e:90:34:3b:93:f8:82:0d:0b:
f1:bb:2f:fb:fd:f1:6a:95:eb:00:3f:22:25:05:94:
59:f6:02:36:08:49:92:7c:6f:93:d1:57:32:cd:9b:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:44:6F:7D:B5:A0:46:70:CB:D6:EE:54:95:CE:57:34:7A:B8:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133322e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.132.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:70:eb:92:8e:00:16:88:c1:3a:fe:fa:f6:e5:3f:7a:7c:
4d:b2:17:1f:33:fe:08:d5:03:ce:9c:78:d9:f7:68:fd:8b:ba:
16:c3:19:0b:c1:e7:bf:38:30:7f:c5:2d:b0:af:a9:b1:73:7d:
7c:e3:0c:79:84:04:b0:63:eb:f5:97:64:76:5e:46:06:59:8e:
7b:c3:35:22:f8:a8:72:38:8b:4a:4c:8a:8f:3f:04:fd:3f:74:
3d:01:4f:98:bf:f8:b7:cd:08:04:07:8c:ab:1a:87:7c:71:21:
6a:03:ba:76:28:ef:0d:da:be:f9:4e:5f:ec:2c:c2:49:82:d6:
9c:f8:31:40:da:d2:10:f6:64:bd:cf:e9:76:cf:be:f1:79:56:
1c:2c:78:44:42:6d:26:17:69:e3:75:dd:1e:3b:8f:fa:9a:ac:
8a:55:5c:c9:95:2c:9a:f9:96:b6:62:f5:83:5a:8c:e2:70:a2:
22:56:9d:6e:81:a3:84:95:c8:58:6e:e1:39:a9:45:01:ee:f7:
fb:bd:b2:e4:ac:c5:51:fb:a5:f9:96:9e:2a:f1:31:94:f3:49:
2d:94:e4:6f:fc:75:d3:8f:c9:69:1f:39:ce:a5:61:a0:c3:d5:
01:ef:40:1f:72:80:c8:42:55:6b:92:6e:dd:5f:5a:7f:e0:1b:
c6:18:0a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:41:06 2026 by rpki-client