Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133352e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133352e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: aP32FxkNRpLj5kLelqUAR7SNUF5ncx74bPsbJdw37sM=
Subject key identifier: A0:D1:6A:99:7D:59:1B:0B:34:06:5E:8A:7E:06:62:25:4D:27:19:35
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FA7EBE30A4FAF176FD120B592F87B8CC963E274
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133352e302f32342d3234203d3e20323138393131.roa
Signing time: Wed 30 Sep 2026 10:21:04 +0000
ROA not before: Wed 30 Sep 2026 10:16:04 +0000
ROA not after: Wed 29 Sep 2027 10:21:04 +0000
asID: 218911
IP address blocks: 217.216.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a7:eb:e3:0a:4f:af:17:6f:d1:20:b5:92:f8:7b:8c:c9:63:e2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:16:04 2026 GMT
Not After : Sep 29 10:21:04 2027 GMT
Subject: CN=A0D16A997D591B0B34065E8A7E0662254D271935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:1f:54:71:6d:ca:7f:1c:66:f1:1e:4e:3a:
64:7d:2e:a0:35:a7:3f:7b:48:de:e4:8b:e8:79:5c:
0e:e0:6b:0f:ee:86:4f:15:d4:7e:00:5f:c5:8f:01:
68:d1:5c:f7:96:53:93:73:76:34:32:42:75:83:11:
31:3a:69:ce:a0:84:c1:c1:b2:8e:84:c8:92:2c:5e:
d1:1f:34:6e:b3:e5:ef:69:2b:c3:59:42:ee:02:6e:
f1:23:59:0a:e4:9e:81:f1:a2:eb:c2:ac:fa:a1:43:
16:64:5c:a5:c1:cc:7d:fe:96:c3:83:4b:26:8a:60:
02:ed:cd:ef:e4:e4:ac:9a:fc:0b:55:c7:d2:0c:46:
9e:83:8c:b6:ea:08:22:93:9f:0d:69:4c:ff:02:fc:
6c:f7:10:dc:28:51:d3:4b:35:e6:96:33:be:4c:be:
55:9e:b7:31:98:f3:8e:0a:52:06:e7:42:e1:53:4e:
8f:ca:85:4c:12:ba:1c:22:1e:3c:11:5c:b2:86:15:
d8:01:d5:df:83:64:4a:35:64:e2:5f:cf:24:c3:11:
ff:40:1b:d1:8c:3c:30:5b:7c:3e:20:66:5f:0c:56:
24:8e:0d:a3:d2:83:86:58:90:3f:7a:6f:2d:44:6a:
0a:f2:31:ef:6a:69:0d:d3:d4:8c:b4:71:b8:de:6d:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:6A:99:7D:59:1B:0B:34:06:5E:8A:7E:06:62:25:4D:27:19:35
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133352e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5e:5b:a8:14:e0:47:19:e8:ea:50:2b:03:85:0f:a1:b9:ea:
8e:6f:02:a8:f3:8a:ef:bc:38:13:91:75:82:89:35:48:11:83:
0d:43:bf:af:67:13:2d:e2:82:8e:c0:ef:1e:c9:93:8c:3d:05:
f3:ba:39:37:0d:91:6e:3d:e2:8a:71:15:80:57:22:95:ce:51:
65:38:7d:09:84:e3:1e:23:48:67:7e:54:00:c9:7e:6a:1b:d6:
cd:a5:b0:26:15:9f:00:c6:d3:8b:3e:c2:d0:56:0d:7f:27:17:
e3:1d:a2:6c:3e:a4:15:da:b9:5e:6a:a0:e6:21:77:c3:bf:de:
ae:c9:4b:4a:d1:d5:12:f4:41:ab:08:7a:2e:88:82:b1:c8:0e:
17:92:36:27:bc:27:aa:2a:b6:1b:64:6e:52:14:38:1f:fe:4a:
54:37:b3:c5:df:d7:19:9f:2a:7e:c8:ae:de:1c:13:e0:eb:3a:
8b:b3:2e:ef:79:36:b5:b1:4a:ae:45:15:48:f3:6f:b8:c4:b0:
9f:4f:49:50:e9:67:52:ea:9f:77:73:99:4c:d8:03:75:e4:c0:
e6:9e:99:bd:75:0a:7b:e8:3d:d8:97:3b:1a:15:88:b1:ae:b0:
27:b1:b6:09:e3:e5:34:f8:d8:9d:cb:d3:50:fd:fa:3c:63:e4:
ba:fe:ab:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:23:01 2026 by rpki-client