Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3133332e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: Pd8cjxYW3wTwVb/QYn1lnq0bKfVGz19ybMrGFc7Lhok=
Subject key identifier: E1:67:C5:43:0D:6F:9D:6F:24:90:9B:3B:D3:CA:98:B5:1B:2C:10:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2ADC7A1919110451879E7C9F3400D71CB12536FF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138393130.roa
Signing time: Tue 29 Sep 2026 20:30:29 +0000
ROA not before: Tue 29 Sep 2026 20:25:29 +0000
ROA not after: Tue 28 Sep 2027 20:30:29 +0000
asID: 218910
IP address blocks: 217.216.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 20:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:dc:7a:19:19:11:04:51:87:9e:7c:9f:34:00:d7:1c:b1:25:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:29 2026 GMT
Not After : Sep 28 20:30:29 2027 GMT
Subject: CN=E167C5430D6F9D6F24909B3BD3CA98B51B2C10BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:21:51:8e:ce:05:70:cf:8f:82:d3:ac:f7:
51:96:68:ab:54:12:c6:97:08:66:c3:52:a5:02:db:
9e:84:65:6b:b7:42:ad:13:f4:ac:61:78:38:f6:1c:
07:cd:10:c0:2f:61:49:66:8b:b2:b2:b1:55:96:55:
da:46:df:ad:40:82:da:37:92:a9:44:32:19:bc:3a:
72:cc:3a:b3:c5:14:48:9b:e8:0f:46:6e:42:c3:6f:
4f:9a:90:99:96:82:c3:51:bb:6e:ef:0f:01:29:2d:
c5:9c:22:60:8d:03:d5:74:6e:1e:e0:2b:10:c0:5e:
3d:e3:c1:7f:d6:3a:d1:43:f9:6a:a2:7b:e0:4f:39:
b2:4c:35:9f:bf:ab:f5:97:15:29:41:03:09:cf:4e:
8d:dd:c1:db:a5:2a:57:96:4e:d8:a8:d2:1b:a7:a5:
99:1e:0e:01:fd:13:08:1f:fc:f1:c0:dd:6a:7a:8c:
b9:82:db:2e:d1:b1:8f:3c:d1:62:c5:05:35:2e:a5:
be:f3:8c:ba:de:7a:5b:f4:3c:d6:b8:7b:a5:84:50:
d1:0c:ad:3b:09:54:af:e2:71:ee:f0:66:7f:c6:d6:
e9:85:86:ac:f5:ab:54:71:05:f8:a3:6b:5f:7b:cf:
dc:74:ef:8a:2b:6c:ce:93:47:5f:25:a3:92:24:ae:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:C5:43:0D:6F:9D:6F:24:90:9B:3B:D3:CA:98:B5:1B:2C:10:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2f:ae:2a:e3:70:32:ee:a6:6e:d4:85:f0:06:a0:c4:32:6e:
19:52:2b:c7:33:c6:57:d2:dd:a0:bd:8e:16:56:ea:d9:cc:b5:
60:b6:b6:f6:97:5c:00:87:4a:fe:08:ef:55:8b:ca:3f:31:af:
b0:49:11:01:dc:9f:7a:a0:92:50:7b:d8:ba:65:57:23:a2:0c:
3e:21:48:fd:35:33:e6:57:bd:4c:21:96:02:81:ac:be:cd:c3:
d9:52:30:de:6e:9d:8b:70:a4:61:cb:4d:5c:02:26:45:85:65:
52:f4:6f:d3:c2:ae:27:6c:de:90:06:88:8c:50:cb:61:7a:e5:
a9:1c:cc:b1:af:2a:04:30:f6:e1:28:ed:0f:01:98:b8:d9:ab:
1e:8a:ab:a6:58:19:82:b5:04:e4:82:c3:df:dc:cf:fc:9c:d9:
7c:49:1c:9b:dc:b5:3c:92:9e:17:dc:08:36:bd:a2:73:b3:37:
35:db:1b:70:82:98:6b:7c:b2:6b:37:28:83:fc:86:09:cf:ea:
17:cd:bd:6e:43:a9:18:04:31:e5:08:0c:b1:ad:de:a5:84:f0:
a9:1d:ac:f9:9a:1d:18:1a:12:7f:21:07:ad:51:e9:b9:fd:78:
09:51:08:19:a5:6c:a4:52:9d:e6:b9:86:74:aa:68:e2:16:21:
d4:c0:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:12:45 2026 by rpki-client