Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: 4oaxQtol45bYT499Rxs+YIY6HRbgjkt/nKkbhPwWVZg=
Subject key identifier: 8F:90:21:24:F0:76:24:E3:CB:9E:BD:AF:1F:40:27:EC:1F:D3:78:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 754A3283FB293258F5DC7906964B8B29F743D922
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323138393131.roa
Signing time: Wed 30 Sep 2026 10:20:54 +0000
ROA not before: Wed 30 Sep 2026 10:15:54 +0000
ROA not after: Wed 29 Sep 2027 10:20:54 +0000
asID: 218911
IP address blocks: 217.216.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4a:32:83:fb:29:32:58:f5:dc:79:06:96:4b:8b:29:f7:43:d9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:54 2026 GMT
Not After : Sep 29 10:20:54 2027 GMT
Subject: CN=8F902124F07624E3CB9EBDAF1F4027EC1FD378EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:a5:c4:52:b2:81:d9:5b:9f:5d:2d:05:c9:
4e:38:a0:50:0e:11:9a:d8:5a:ab:16:63:40:3b:88:
70:54:0e:8b:a1:76:3a:af:fc:c1:1c:41:6a:3f:fc:
b2:87:d0:3f:bf:8e:92:db:65:a7:ab:e2:fc:35:b9:
7b:fc:ed:7b:9d:c1:34:e9:0a:de:da:cd:d1:3d:9d:
dc:6b:bf:d0:48:57:63:ca:51:8f:ee:23:e8:53:6c:
97:cc:2c:e0:bd:b2:55:5a:e6:db:e9:b5:7d:fb:ce:
50:cc:eb:05:98:54:c1:28:23:26:fa:f1:ca:9f:c3:
7e:68:4e:fc:ee:23:bd:78:0f:52:c1:b6:a8:b5:46:
73:24:64:50:21:f6:5a:40:c4:5a:c6:5b:04:0d:80:
9f:c2:aa:9d:03:69:1b:ff:3a:fa:19:71:e2:ae:c1:
47:23:e4:c9:50:a0:6d:41:5d:0c:76:62:f3:83:54:
36:21:c1:ad:92:07:2b:71:7f:6d:2b:a9:15:21:75:
74:a7:5c:68:65:cd:9d:7e:0a:75:e1:93:32:ad:9b:
d3:15:90:10:34:4c:de:d2:68:76:5c:79:42:0b:50:
f5:c1:36:38:e4:e0:1b:04:5f:30:e9:45:8e:7c:d4:
42:a9:71:03:62:38:a9:68:65:ec:9f:11:4f:24:c3:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:21:24:F0:76:24:E3:CB:9E:BD:AF:1F:40:27:EC:1F:D3:78:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.134.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a5:d7:37:33:2a:55:df:3a:82:0f:ef:33:54:8f:9a:1e:19:
ca:8c:c6:22:6a:95:df:3d:21:84:cb:43:f7:f4:25:28:7b:99:
b9:81:79:c7:ed:e7:fc:b3:14:cd:24:1b:c8:b4:78:f4:93:66:
66:7d:83:dd:bc:0a:92:9c:46:7b:7f:b1:76:a1:0b:07:76:30:
5e:36:cf:da:ed:cd:a3:4f:02:74:1f:ad:4f:be:12:cc:0f:d8:
8e:f4:a4:e4:e8:0b:65:ae:bf:fc:f2:84:92:96:4a:7a:5a:a2:
7b:83:4d:cc:53:d2:98:cd:c0:64:db:41:6e:98:2c:17:b8:f3:
69:49:aa:b1:55:4b:5f:52:9f:01:3e:29:1e:f2:31:f9:5e:59:
20:60:11:62:97:d4:74:de:c5:c5:64:7e:0f:5f:e0:8e:01:61:
f9:50:02:52:05:a0:e9:fa:4c:33:b8:47:96:32:f0:1b:94:0b:
8f:cf:15:db:1f:ff:97:23:13:bd:23:b0:f9:3b:13:4c:1a:e4:
6c:54:cd:9c:51:be:bb:06:ac:c3:ab:03:a7:d8:02:24:93:d5:
f1:9f:f9:46:4a:1b:ed:a6:6b:47:27:aa:19:64:8c:98:b1:a6:
0b:c6:64:b9:ff:14:ae:bc:21:46:a2:cb:1d:d6:08:52:98:ee:
aa:cb:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:02 2026 by rpki-client