Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3133362e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: bj9VnQsO2zIMmwXKPOlZkVmnuRLebsr9DlwC5RYTy2g=
Subject key identifier: A5:0A:A6:01:1F:D9:68:5A:F6:8A:3C:19:55:46:55:34:BA:DD:0E:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F840A5B9F9205F430AB23A288FD5A3106B81037
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138393130.roa
Signing time: Wed 30 Sep 2026 10:20:56 +0000
ROA not before: Wed 30 Sep 2026 10:15:56 +0000
ROA not after: Wed 29 Sep 2027 10:20:56 +0000
asID: 218910
IP address blocks: 217.216.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:84:0a:5b:9f:92:05:f4:30:ab:23:a2:88:fd:5a:31:06:b8:10:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:56 2026 GMT
Not After : Sep 29 10:20:56 2027 GMT
Subject: CN=A50AA6011FD9685AF68A3C1955465534BADD0EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:58:c0:b5:36:81:92:59:a9:1f:08:9e:6d:
32:93:92:1e:49:63:1a:0f:36:72:c2:04:c1:a6:ca:
78:f8:f5:3e:e7:21:0c:48:cb:20:97:8a:a2:06:d3:
bf:05:5f:13:fa:f7:f6:a5:ed:86:fb:09:f6:8b:6e:
f3:41:3c:c6:20:a3:c3:9e:74:b8:c3:e9:3e:7d:39:
14:7b:52:f3:dd:65:5f:de:9f:27:5a:ac:6e:06:78:
35:ae:bd:e3:d5:00:c6:5c:c2:33:b7:8b:89:95:28:
22:23:4f:72:57:25:f9:5c:09:01:96:a9:f4:b8:46:
47:06:2e:0b:8c:2f:e6:94:96:1e:b6:84:2e:50:11:
ba:3c:10:12:b5:af:79:6f:e5:0c:e5:4f:8a:19:e8:
10:58:a3:00:8d:9c:ef:46:12:d0:04:34:e7:94:8e:
eb:1d:d0:27:f9:96:d3:94:f3:2c:b6:5c:6b:b6:3f:
2f:e4:bd:6b:7b:2f:50:1b:4e:1b:d7:19:73:0c:bf:
8b:9d:73:88:e2:b0:ef:70:63:f4:72:89:af:3b:c5:
cc:69:5e:52:63:5a:d2:ff:82:d9:90:14:02:4e:23:
3a:06:43:3b:98:39:1b:59:6e:02:52:4b:81:39:f0:
f5:5a:ba:0b:46:77:20:f0:eb:a5:95:47:d4:a0:9d:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:A6:01:1F:D9:68:5A:F6:8A:3C:19:55:46:55:34:BA:DD:0E:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:af:30:22:c5:ee:ae:ea:5c:17:58:93:6d:c5:da:b9:87:57:
f7:0a:7b:7f:47:ab:34:f1:9c:f3:37:7a:a8:9a:c9:26:a5:ae:
ab:f8:7f:40:50:19:e9:22:96:eb:12:90:2a:b8:93:1b:49:3d:
7e:35:8f:74:25:5d:84:bb:a1:c8:20:2e:0f:f4:88:f8:37:10:
f4:b8:ba:f7:4a:f9:cb:5d:6b:34:cc:ef:ad:87:6f:cd:52:50:
29:04:0a:40:5e:06:e7:e1:09:fb:4f:d9:4b:db:7d:51:73:49:
9b:4b:0d:c0:d4:72:36:1b:e4:85:f0:21:2c:51:9a:95:fc:1d:
76:c9:8d:32:9e:51:8b:31:ff:19:d1:ae:40:59:39:36:cb:a5:
21:77:8b:a3:b7:76:dd:c1:56:28:97:73:e7:9d:b7:a7:4a:01:
73:30:c8:d2:e7:17:dd:15:0a:64:32:22:2d:f4:45:f8:5b:3b:
a1:4d:ff:d7:bd:3c:f1:5e:ef:9a:d7:19:28:8c:7c:18:bc:03:
22:66:4a:95:61:c1:7f:6f:ed:af:2f:9a:f4:0d:ab:d1:08:bb:
e2:4e:d5:bf:65:f9:8d:ad:3c:35:73:11:90:00:9c:e4:af:77:
73:5a:46:17:15:54:7c:6e:8b:cf:4d:9d:27:ee:1e:cb:a0:eb:
03:58:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:07 2026 by rpki-client