Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133372e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3133372e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: QyJDI3ggqOWD6HDWrDrtimZQhPJlB0VRt4qKIFHteHM=
Subject key identifier: 5C:E1:5D:E7:11:6D:1A:FB:47:16:94:1B:BF:3A:40:01:1F:BE:4C:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35E1A654784A5F6DD5F22C1168CA6308C8EDEF92
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133372e302f32342d3234203d3e20323138393130.roa
Signing time: Wed 30 Sep 2026 10:21:07 +0000
ROA not before: Wed 30 Sep 2026 10:16:07 +0000
ROA not after: Wed 29 Sep 2027 10:21:07 +0000
asID: 218910
IP address blocks: 217.216.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e1:a6:54:78:4a:5f:6d:d5:f2:2c:11:68:ca:63:08:c8:ed:ef:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:16:07 2026 GMT
Not After : Sep 29 10:21:07 2027 GMT
Subject: CN=5CE15DE7116D1AFB4716941BBF3A40011FBE4CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:88:da:28:41:0b:7a:d4:eb:50:56:da:b3:
a9:a1:61:a8:10:ef:ba:ab:85:83:d7:24:74:c1:a3:
1e:64:40:44:94:d5:a2:53:f0:7a:86:c1:e5:f4:73:
af:fc:a4:24:ae:9d:69:63:81:85:15:1c:99:38:6e:
f0:c9:0a:c3:48:f4:4b:15:ef:18:f0:87:82:33:36:
2d:ce:5f:31:44:85:cb:25:f9:c1:82:d0:a7:ae:6f:
65:9d:07:9d:82:74:39:85:80:3a:9d:57:9e:46:d3:
08:69:e0:0b:a7:79:5a:5f:99:0b:d0:cb:c1:8b:68:
b7:a7:ff:2f:ef:42:83:dc:fa:37:5a:a7:90:81:a6:
d3:4d:20:32:53:e8:e8:48:5a:bb:9d:d3:60:33:60:
03:1c:85:40:20:43:df:16:53:f6:4c:23:0e:3a:af:
9e:c4:ed:d4:75:0d:fa:d4:49:14:16:dd:d7:d8:fb:
40:71:0e:52:66:69:05:63:a9:01:f0:1f:56:e9:1f:
bb:93:ac:63:5e:9c:b9:be:b4:de:8a:67:9c:f3:90:
bc:98:4b:53:03:2d:da:c9:cf:ca:3b:04:c3:67:3d:
9f:2a:5e:8b:5e:bd:11:06:9c:a4:21:b8:06:27:0a:
e3:33:bc:73:8d:d7:f2:59:23:87:11:98:96:da:d6:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:5D:E7:11:6D:1A:FB:47:16:94:1B:BF:3A:40:01:1F:BE:4C:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133372e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.137.0/24
Signature Algorithm: sha256WithRSAEncryption
66:90:d7:ed:02:74:2b:90:76:35:18:13:c1:71:54:83:c4:f0:
8e:b0:3f:e5:98:7a:b5:e8:d9:8a:eb:89:a6:40:da:38:ad:ec:
2c:48:41:7b:95:d3:45:ea:07:53:14:d4:3c:fa:c4:28:51:0c:
6e:bb:46:06:43:15:3a:a9:d3:0d:1b:23:71:e3:8e:f5:78:92:
fc:77:d3:f8:3b:11:2b:fa:7f:a4:d1:24:17:9e:b3:3d:f9:d6:
bd:54:30:f6:bb:a0:22:09:9e:b8:c9:4e:2f:ae:dc:bc:0a:36:
a8:09:3d:99:95:c1:4d:84:e3:70:d6:db:89:d6:03:fc:52:e7:
30:d2:00:48:5b:e5:b9:b2:a8:74:36:72:34:3b:fa:8a:4e:f8:
d6:93:de:f9:ed:75:bd:bf:82:21:26:3e:17:73:e9:ff:9d:60:
aa:12:2c:f4:3f:3e:6d:03:69:fc:ce:db:67:5c:fc:55:0e:b1:
64:f4:67:dd:fc:c1:0b:97:98:91:a8:7e:80:21:28:08:55:cd:
df:c4:2b:72:c9:19:38:d3:bb:14:71:8e:9a:af:90:c6:05:74:
70:0b:80:65:3c:41:72:dd:83:ff:21:ef:f2:37:72:f6:65:af:
50:2b:9e:36:98:a0:2f:c1:97:6b:1c:4f:fc:69:69:ae:2a:98:
ca:ad:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:33 2026 by rpki-client