Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133382e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: WrjxVTt/DZcm5JfhZsJfnDerVEC4aXISERGs+9yKAew=
Subject key identifier: 65:31:A2:98:47:D1:2F:88:FA:90:E4:0B:23:CC:0D:C2:C7:4A:A9:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 364CC6C19D30CE6E62623337BFCD7A132204AD6C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323138373937.roa
Signing time: Tue 29 Sep 2026 20:30:44 +0000
ROA not before: Tue 29 Sep 2026 20:25:44 +0000
ROA not after: Tue 28 Sep 2027 20:30:44 +0000
asID: 218797
IP address blocks: 217.216.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4c:c6:c1:9d:30:ce:6e:62:62:33:37:bf:cd:7a:13:22:04:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:44 2026 GMT
Not After : Sep 28 20:30:44 2027 GMT
Subject: CN=6531A29847D12F88FA90E40B23CC0DC2C74AA91D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:1e:68:48:ea:65:e1:f1:de:5a:92:07:ba:
17:64:4b:37:79:82:a6:cb:91:7c:d8:c3:66:c7:40:
70:2a:b6:4b:45:e3:ed:db:3e:8d:99:1a:42:7e:a5:
de:21:ee:33:c1:9b:43:47:83:dd:2c:71:09:4b:b3:
66:13:02:50:78:cc:0d:da:17:41:56:b7:94:c6:14:
72:8c:3a:53:12:8f:cb:a9:e7:0f:c6:0c:f8:68:aa:
8e:23:92:b9:a3:bd:c2:20:67:5d:7f:e1:d3:64:6f:
2b:0f:39:aa:d7:30:34:28:ab:67:14:e0:d7:a4:24:
63:5b:4c:1a:f7:35:7b:4c:e4:fa:eb:da:7c:a8:ef:
35:bf:7e:7f:b2:03:73:89:b1:51:3e:bc:b6:71:95:
f3:0c:c3:97:aa:92:e4:2f:5e:0b:7c:5a:d0:ac:0c:
18:50:8d:7e:d0:00:ca:de:30:bf:f0:10:93:20:18:
54:91:d6:69:8e:6f:56:dc:1e:b3:5f:c5:9d:c3:9d:
31:b0:05:2d:00:d7:f6:94:44:9f:d1:85:a2:72:9d:
cf:cd:6f:82:60:8b:34:31:d0:fd:4a:dd:e4:33:eb:
45:4c:51:93:ac:26:6a:ac:ee:81:d5:91:e6:1a:03:
dc:95:66:9d:9f:94:2e:f1:c1:e8:58:c7:33:e1:3f:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:A2:98:47:D1:2F:88:FA:90:E4:0B:23:CC:0D:C2:C7:4A:A9:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.138.0/24
Signature Algorithm: sha256WithRSAEncryption
17:57:a9:f3:0d:4d:dd:12:65:75:e5:60:1e:49:b8:7b:f9:67:
a5:18:1c:61:2b:3e:20:e0:9e:78:47:ec:94:42:a5:58:5f:f1:
35:35:47:aa:46:c5:37:d6:2f:72:4c:6a:0b:1c:d7:dc:02:29:
35:01:1d:3e:d6:9c:f3:ad:07:b4:c3:51:05:a4:a5:b0:f1:53:
67:3c:93:7b:95:93:23:0b:fa:a9:8a:b5:29:7f:66:82:d0:02:
7d:8d:d2:b2:ce:82:6c:ea:0c:ea:6e:19:c0:e5:07:65:73:b0:
59:9e:d8:8e:c7:84:62:e7:24:69:76:60:67:a4:bc:3e:8a:e9:
f8:60:32:0c:8e:b5:6f:d8:ca:9e:66:cc:28:79:3d:86:b0:c1:
46:7d:cc:84:ce:64:f6:86:61:4c:53:cb:0f:62:08:e7:df:94:
7e:e0:00:6a:be:19:a3:7b:35:25:32:16:51:e4:30:04:32:df:
83:64:ac:bd:4a:34:ef:90:a7:35:e0:8b:b9:02:05:13:8a:a9:
d2:1f:9e:38:55:2b:d6:09:fe:c0:4e:a2:ae:a2:c7:b2:76:90:
95:d7:cc:1e:8b:65:03:48:b0:4f:14:bd:23:f0:a5:00:ab:ad:
82:33:6f:61:6a:01:fd:df:f7:e5:bc:6a:85:c8:cc:1f:79:e0:
bd:08:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:42 2026 by rpki-client