Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133352e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3133352e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: yaVp1u+hxtsaLiiIcG5ro/Q8s95cUIRA88R2nDXIbhU=
Subject key identifier: 25:C1:2D:9E:01:27:B9:A8:F5:A3:83:D6:BE:08:99:03:29:CF:F0:BA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2EC982A0E090E7F1D8CFF470D5088A6E1C2618D0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133352e302f32342d3234203d3e20323138393130.roa
Signing time: Wed 30 Sep 2026 10:21:02 +0000
ROA not before: Wed 30 Sep 2026 10:16:02 +0000
ROA not after: Wed 29 Sep 2027 10:21:02 +0000
asID: 218910
IP address blocks: 217.216.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c9:82:a0:e0:90:e7:f1:d8:cf:f4:70:d5:08:8a:6e:1c:26:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:16:02 2026 GMT
Not After : Sep 29 10:21:02 2027 GMT
Subject: CN=25C12D9E0127B9A8F5A383D6BE08990329CFF0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:a9:fa:a5:0d:87:0f:69:8d:88:31:0d:d3:
8c:d2:e6:ea:e8:87:96:a7:7c:fa:15:c9:b1:09:eb:
eb:c4:65:a7:62:cd:ad:7c:e6:c3:e5:46:ae:f4:de:
35:33:07:0b:cb:06:30:5d:04:12:2c:14:ec:e2:62:
05:ba:73:b7:2b:d6:cf:08:5c:64:38:dd:9d:93:03:
e0:27:6d:09:e2:d8:c5:0f:31:33:92:0c:62:39:e6:
a8:85:2b:11:4b:cd:ab:eb:27:e7:bd:75:c3:c1:bf:
b1:52:00:33:e4:79:b7:85:13:2e:58:f2:83:a5:68:
7f:34:1f:90:04:1b:20:06:76:46:1c:db:fb:36:47:
4e:6f:2a:b4:b3:e1:cf:23:b9:99:49:db:2f:9b:f0:
13:fc:b8:2d:d7:32:45:71:c1:88:f4:dc:4f:cf:04:
9f:e3:ae:a6:ba:d6:fd:f0:8f:11:77:2e:40:97:e9:
e0:3f:e7:de:97:30:96:56:92:d6:26:13:45:09:95:
4b:12:b9:e3:de:b3:86:85:7b:51:13:67:52:3e:7e:
19:2f:a6:ea:41:1b:bd:c6:7f:b0:fd:85:04:54:b5:
25:26:a1:27:b8:db:4d:34:34:ae:20:44:1d:d6:69:
5c:30:21:35:bf:30:cb:82:b3:43:43:83:96:e0:f4:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:2D:9E:01:27:B9:A8:F5:A3:83:D6:BE:08:99:03:29:CF:F0:BA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133352e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7e:7c:7f:66:23:9d:91:96:ea:a2:6e:19:2d:36:ed:4e:cb:
d3:f1:cb:56:d3:06:31:fb:89:7d:94:ad:fb:20:7a:02:b0:30:
9f:11:25:54:4a:da:20:c4:d8:90:b3:3e:03:27:ec:aa:10:ce:
04:23:bd:52:0d:32:63:39:a4:b9:26:6c:c2:10:f3:b4:20:09:
2e:9e:a3:7d:c2:58:46:db:6b:e0:5e:5a:46:89:70:d6:e6:00:
44:86:75:e9:8a:ad:21:8e:30:9c:97:4e:c5:37:7b:5a:e0:e3:
87:c9:e1:94:89:52:6a:8b:8a:a2:52:c1:01:40:7e:7d:e7:f1:
1a:de:c3:a1:e5:32:4c:1e:32:41:64:bb:07:86:de:2e:90:58:
db:68:79:48:0d:19:c0:38:3c:5e:31:c2:a7:04:11:91:8b:d5:
f2:e0:6d:36:68:58:39:ed:50:6f:76:64:32:4e:22:ab:c3:8e:
e7:f9:cc:03:63:dc:a1:36:b5:1f:1c:14:1b:2e:04:2a:fb:e1:
6d:56:36:1e:39:85:ee:d1:21:34:e5:36:2a:e1:fe:5f:88:72:
16:6f:6a:c0:75:79:cf:0b:b1:07:a9:a2:7f:8d:82:93:85:ee:
57:23:55:b0:6a:cf:9d:c8:d4:37:70:71:c0:fb:2f:3f:c0:74:
90:26:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:05 2026 by rpki-client