Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3133342e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: aHbaKLtv1wyfbxDaa/qxYtlpkG2ATuOqYLZ6SFnzwdg=
Subject key identifier: A3:A8:DB:D0:1F:CC:47:CD:7E:B9:42:91:7D:DF:3F:69:8A:FB:D2:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 318184F9AB04437FAE527C8AD9E3B3D736CA5457
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323139303735.roa
Signing time: Wed 30 Sep 2026 10:20:52 +0000
ROA not before: Wed 30 Sep 2026 10:15:52 +0000
ROA not after: Wed 29 Sep 2027 10:20:52 +0000
asID: 219075
IP address blocks: 217.216.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:81:84:f9:ab:04:43:7f:ae:52:7c:8a:d9:e3:b3:d7:36:ca:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:52 2026 GMT
Not After : Sep 29 10:20:52 2027 GMT
Subject: CN=A3A8DBD01FCC47CD7EB942917DDF3F698AFBD2A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:8b:9c:07:88:92:f9:a3:5f:57:56:65:39:
26:ab:50:52:1b:db:f6:1f:f2:8e:c8:d0:66:5b:11:
4c:73:90:b9:74:c2:72:98:9b:be:14:1d:8c:ef:88:
90:f8:7b:4f:2b:74:e0:31:8a:ea:f5:64:f1:4f:8b:
7a:d4:9b:16:a5:46:91:6f:ea:ea:44:b5:de:8e:b3:
5d:a2:bb:f5:3a:75:3c:2e:d4:2a:15:63:ba:aa:30:
a9:44:28:e6:a2:18:f9:6a:31:2f:15:0c:3a:28:51:
90:82:e6:7c:66:ff:99:81:b5:93:f5:6f:d2:45:ac:
dd:65:07:8a:28:6a:a3:55:81:57:78:23:d6:3c:da:
60:99:ec:34:45:1d:aa:06:9b:59:b5:73:f9:2b:a2:
79:46:dc:f5:9a:1f:2c:c7:96:d8:d4:b5:75:bf:d6:
91:f4:f2:67:e3:3c:b4:1d:93:4f:92:b4:32:16:77:
de:a3:45:3d:70:3d:16:5a:5f:a5:1e:2d:aa:83:f9:
96:a8:07:d3:f1:6a:d1:13:ec:a8:06:d6:e8:87:9a:
8e:fa:21:81:aa:ab:ff:bf:e9:fd:d9:30:08:3a:35:
74:30:4f:7f:0f:93:ae:d8:b0:10:3c:e2:ed:14:f0:
73:27:db:c8:a1:c4:74:a5:bb:4c:bf:ab:3c:0a:03:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:DB:D0:1F:CC:47:CD:7E:B9:42:91:7D:DF:3F:69:8A:FB:D2:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.134.0/24
Signature Algorithm: sha256WithRSAEncryption
58:37:5a:36:fc:64:40:74:2c:dc:c4:0b:7d:e9:c8:a6:83:a2:
67:3c:6c:3b:be:4f:9c:ce:7c:48:32:1c:81:21:3a:76:d4:71:
fd:1c:90:fd:2e:64:23:34:37:d5:af:4d:eb:cc:13:f3:94:04:
8c:0d:40:56:4d:f4:ae:fd:0c:f1:d6:91:df:86:58:d3:26:50:
27:67:49:a9:5d:77:48:87:76:af:cf:98:54:28:0d:6d:ea:44:
54:84:33:c6:7a:ab:3a:88:35:9d:02:0a:c9:16:61:52:84:82:
62:62:22:dc:6c:4a:72:b8:5b:4b:3d:fa:f1:d6:0f:6a:68:29:
32:d5:b6:78:43:8e:71:bf:43:df:9d:fb:ee:91:bd:d1:e0:65:
17:b9:24:51:b9:16:ef:52:34:fe:07:26:ab:5e:09:67:63:74:
26:0a:fb:40:f8:72:72:2b:e6:81:ff:df:d9:63:a7:33:53:02:
be:53:2b:fc:88:b0:00:b6:86:a2:3c:5f:0b:2b:4b:83:cb:12:
c2:76:13:d0:94:62:7b:b3:52:3d:d7:5c:fc:c8:f3:38:02:72:
4c:c7:3e:00:9f:c9:5e:1e:a7:14:1b:e1:82:ec:b0:b7:07:eb:
92:1b:23:47:88:8d:92:86:e4:98:d7:02:cf:1a:76:b7:16:13:
71:fe:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:35 2026 by rpki-client