Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133332e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: qiWF91s5PJk5qzcz15nQ18FYuyhCPm1PO/CAtsWZua4=
Subject key identifier: 2F:E3:B4:DF:7B:9E:4A:17:8F:75:19:A1:98:20:C9:F2:5B:2E:11:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6745AB1D1A89377B3A66AC8F376BD2A3539C3B58
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138373937.roa
Signing time: Tue 29 Sep 2026 20:30:33 +0000
ROA not before: Tue 29 Sep 2026 20:25:33 +0000
ROA not after: Tue 28 Sep 2027 20:30:33 +0000
asID: 218797
IP address blocks: 217.216.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:45:ab:1d:1a:89:37:7b:3a:66:ac:8f:37:6b:d2:a3:53:9c:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:33 2026 GMT
Not After : Sep 28 20:30:33 2027 GMT
Subject: CN=2FE3B4DF7B9E4A178F7519A19820C9F25B2E1149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:6b:c4:0a:f0:0a:5d:5d:73:04:5a:1a:b7:
e5:6b:ac:fb:49:ad:4d:fe:5c:f4:5e:99:14:8b:79:
03:e7:47:0d:10:7f:d1:cc:c0:41:8c:e7:21:24:ae:
8b:c3:cd:07:f0:7c:fb:a7:75:3c:a4:86:4f:bc:d9:
f9:24:7c:1b:e6:78:df:ae:df:11:f3:ae:54:78:12:
67:15:83:40:81:df:7b:0b:e5:2c:99:7d:d5:cc:c7:
6b:94:e8:4b:95:cd:80:fa:06:dc:ff:b4:53:9f:21:
27:49:65:e8:68:61:28:b1:84:9b:73:e7:e9:9f:94:
80:90:33:82:37:79:37:9d:11:6a:25:89:6c:42:c9:
b1:59:41:e9:f0:54:f4:84:87:38:db:ac:e0:2b:24:
17:72:20:c7:c2:73:18:f6:33:ea:e9:9b:56:46:56:
00:22:d5:ee:c4:e4:f8:8b:9d:9c:a9:f6:e4:a2:32:
8e:58:7f:af:96:03:c7:72:4e:55:f1:db:00:16:04:
f2:09:c8:f9:9c:91:bf:67:c3:71:38:c7:d2:e2:8e:
27:b5:e9:20:de:97:d0:48:0f:70:30:0b:d5:89:b2:
40:08:4e:01:6f:43:0e:ca:f6:eb:64:d8:95:f4:92:
7d:6e:69:63:fe:62:31:6f:22:9d:43:d0:4f:d6:0b:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:B4:DF:7B:9E:4A:17:8F:75:19:A1:98:20:C9:F2:5B:2E:11:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6e:7a:ff:ae:3b:82:b0:1d:51:af:e1:9c:d1:bf:90:af:e3:
46:7d:f0:f3:f6:a2:d8:e2:17:b4:1f:a2:53:bd:12:54:67:99:
aa:bc:39:88:f2:ff:2a:96:11:51:6c:ca:da:56:2f:17:94:84:
2b:c3:a6:8e:3b:ff:1d:a5:11:b2:4d:fe:d2:ee:d7:3f:00:13:
66:86:1b:c1:ae:77:0f:68:bb:33:01:00:ca:51:39:db:6f:23:
72:04:a7:f0:eb:c9:75:fc:ca:a3:94:65:c6:cb:47:fc:ba:f2:
65:8a:f4:24:35:a2:b5:7a:e1:9f:5f:01:3b:9a:d2:24:ff:54:
db:55:f0:6f:c9:a6:99:0a:df:35:65:d9:a3:ff:a6:41:5a:62:
8d:41:38:5b:a3:9b:07:64:fd:2e:ca:60:da:c0:f9:95:93:62:
9b:a1:0b:a5:d5:85:c5:a1:ad:bd:a5:15:00:c4:b3:62:05:f9:
0b:1a:e2:d2:81:52:2d:8d:0d:e0:f4:e3:ea:33:1b:20:0b:18:
d1:c0:39:94:4e:6d:ab:e1:27:76:f3:af:71:80:6c:b0:9f:54:
05:4c:32:6a:c0:46:68:40:be:da:7d:17:3b:97:81:9a:81:8f:
b6:88:80:b3:4f:e6:fb:cd:52:34:64:a7:02:7d:4c:2a:34:be:
61:1b:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:36 2026 by rpki-client