Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3133382e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: KQf74LCvCWzunbeGUfI8b/MBUsHJ/hDoN3DD9i4lfFE=
Subject key identifier: 03:9D:06:E9:F9:31:95:7D:44:CB:36:88:F5:2E:62:77:2D:12:AD:66
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B502DB4D1555334B724D95EC1ABFC09EC78B4AC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 29 Sep 2026 20:30:42 +0000
ROA not before: Tue 29 Sep 2026 20:25:42 +0000
ROA not after: Tue 28 Sep 2027 20:30:42 +0000
asID: 219075
IP address blocks: 217.216.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:50:2d:b4:d1:55:53:34:b7:24:d9:5e:c1:ab:fc:09:ec:78:b4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:42 2026 GMT
Not After : Sep 28 20:30:42 2027 GMT
Subject: CN=039D06E9F931957D44CB3688F52E62772D12AD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:9a:e6:b8:b4:4e:d1:f0:f4:90:c8:b5:7c:
32:09:7f:af:5e:89:0e:8c:e1:bd:61:12:12:f3:a4:
da:c3:58:9e:e1:d1:d3:87:a4:60:15:4a:b1:bb:84:
62:6a:81:96:d5:57:a1:1e:40:df:dd:80:28:b2:30:
8e:3f:95:10:78:e6:3f:4d:c3:41:fc:ae:4c:47:c0:
f3:e4:a1:e3:05:13:9d:99:ce:06:ed:51:a2:8e:20:
9b:32:65:17:54:19:a8:de:b9:4d:24:c5:97:80:f3:
cc:05:d3:f0:e7:a7:2e:0c:8a:ee:c1:a2:7b:65:70:
6d:ae:fc:3c:7e:04:7b:d6:0c:88:7a:68:6b:24:a0:
d7:4d:6e:63:96:d3:c4:9a:cc:48:2f:0a:a2:ce:68:
aa:cb:65:98:d2:ed:25:83:cd:78:41:6d:78:a7:ec:
c1:5d:73:49:45:f0:eb:74:21:ad:d7:cc:c9:9e:a2:
ef:ca:54:98:8e:3e:cb:a1:e8:d2:69:e8:d2:2f:c5:
02:3a:e3:d6:64:9d:96:c5:c7:23:45:a5:3a:cd:3f:
a6:18:ea:48:8c:2a:79:34:3f:e9:41:1e:b3:34:67:
29:02:8c:f7:98:5b:5e:54:00:d5:38:a7:33:34:17:
bb:43:79:c3:0f:c5:3e:7b:c9:22:13:ff:be:92:cf:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:06:E9:F9:31:95:7D:44:CB:36:88:F5:2E:62:77:2D:12:AD:66
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5d:8a:32:da:e5:4a:ce:75:a4:3c:1a:0e:d7:9f:71:95:d7:
30:8e:9e:af:1e:d7:12:56:25:88:c6:1a:a0:81:1d:1d:63:ba:
db:99:3b:b0:98:48:26:8f:eb:10:8b:35:1b:a6:49:ec:df:ef:
26:3c:16:d5:9f:e6:f1:0e:98:ab:92:de:3d:85:ba:56:0c:a5:
fd:98:f8:19:20:ff:34:8c:17:e0:6f:f9:9e:d7:72:7c:6d:36:
b4:47:27:cb:44:f1:85:b7:79:c6:d3:31:e5:ce:23:5b:62:45:
a1:94:b7:5e:07:d4:44:5f:cf:f4:75:63:e0:ea:64:58:b0:ad:
bf:54:9b:09:94:88:73:ff:19:51:36:5f:3f:9c:bd:ce:db:ae:
f4:01:e6:83:0d:41:67:1b:bb:eb:fc:15:1b:fe:a4:eb:00:c9:
f0:d1:b5:b8:0b:c1:d5:3c:4f:01:a4:c2:6d:fe:25:9d:2a:e7:
92:ce:fc:c9:74:fd:9c:ec:12:b9:3e:2d:e6:57:71:f3:46:c6:
fa:89:6d:e1:a2:3e:e9:ab:07:04:c2:f6:96:e1:0c:4c:3f:e6:
e3:e7:a3:15:fa:d3:67:49:ac:bd:37:79:4a:45:9a:f2:96:98:
0c:24:d0:eb:be:6d:20:c3:47:b8:38:c3:46:9e:f3:8c:4d:b7:
cb:da:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:41 2026 by rpki-client