Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3133332e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: 2INbAXCDkMaCLHHagPDWAw9kKKJANGGbAfn76LHlqn0=
Subject key identifier: 1F:BF:56:E6:66:BB:CA:F2:6F:8C:FC:79:45:60:50:EF:FF:72:D6:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24F730C32F7509392FD94B012EAFDA5CE55E12B0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 29 Sep 2026 20:30:30 +0000
ROA not before: Tue 29 Sep 2026 20:25:30 +0000
ROA not after: Tue 28 Sep 2027 20:30:30 +0000
asID: 219075
IP address blocks: 217.216.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f7:30:c3:2f:75:09:39:2f:d9:4b:01:2e:af:da:5c:e5:5e:12:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:30 2026 GMT
Not After : Sep 28 20:30:30 2027 GMT
Subject: CN=1FBF56E666BBCAF26F8CFC79456050EFFF72D6E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:81:0b:d1:ea:94:77:c1:bf:47:02:71:2d:
27:41:52:ab:16:6f:55:a9:82:7f:90:c6:66:f7:d0:
9c:e4:f8:3d:0a:9d:06:5d:5e:d9:4b:b4:30:74:58:
33:3d:6d:76:fd:4e:3e:16:28:35:07:50:90:9e:18:
ba:ce:3a:47:d7:4f:02:2a:6b:14:09:f7:53:38:e6:
44:76:d0:07:a8:63:6e:35:0f:a4:02:da:9b:cd:aa:
1d:74:eb:85:27:05:df:cf:e3:69:e6:99:bd:c3:e6:
b7:19:9e:44:68:8b:ca:44:38:30:80:41:c5:41:87:
a5:d7:15:cb:0d:d5:db:85:5f:af:e9:52:5c:9e:2f:
61:65:46:49:b4:fe:04:8d:12:d9:75:75:9f:63:6b:
15:b8:38:13:d6:65:66:c6:27:fd:df:02:61:c6:e7:
26:c9:e8:b0:77:aa:d9:36:a1:b2:74:14:8d:f6:ad:
07:6e:48:9a:9a:4e:3d:a6:65:8f:36:45:4c:52:37:
7b:2b:22:aa:d8:09:66:43:14:87:a7:87:95:28:7b:
42:8f:8e:bb:b9:39:3c:d6:62:1b:c5:16:42:c7:0e:
ee:f6:73:6f:59:4b:ca:e2:be:10:83:7f:4c:24:c2:
68:7b:9d:26:2a:2c:35:d9:eb:74:8f:55:d0:37:8e:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BF:56:E6:66:BB:CA:F2:6F:8C:FC:79:45:60:50:EF:FF:72:D6:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:10:64:b0:6a:58:17:57:10:17:f5:8b:20:15:fc:c3:71:c2:
59:54:c8:06:cb:48:8d:9d:73:bb:8e:2c:84:bd:62:8b:67:07:
69:61:80:1f:36:71:6b:13:1b:74:1d:ec:e3:c5:a7:6f:21:80:
aa:38:bc:f9:0c:c2:63:23:84:e5:3c:b0:65:fa:f1:e6:a6:73:
0e:81:9f:63:dd:10:18:2f:39:cf:df:3a:4b:ef:a4:ff:cb:fe:
eb:c8:bd:03:e7:54:74:15:9c:02:2b:b2:f8:62:25:6a:78:9e:
d3:66:c0:29:6b:bc:44:f5:d9:4f:e6:e0:9f:8d:bd:b3:6c:e4:
3a:d7:e8:b5:4a:66:e4:69:29:f5:d6:5c:ce:28:96:8f:54:d9:
3c:a3:92:7f:2c:01:62:35:69:20:4c:08:8c:0b:89:23:f7:b0:
0e:41:55:69:4e:42:b3:77:97:84:b2:1a:af:b8:b6:e2:48:79:
fb:64:1a:96:30:76:8e:aa:35:d5:71:76:e2:41:33:6c:f8:0c:
39:4b:0b:fe:d9:69:94:a7:6d:85:23:60:c2:c2:88:7c:60:1a:
eb:a2:fa:93:23:4e:6f:b0:f8:d7:41:18:f0:ed:e2:b0:ae:40:
09:4b:c8:d5:dd:84:e2:e2:66:39:60:d4:03:11:a1:32:fa:94:
cf:bc:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:30:38 2026 by rpki-client