Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133392e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133392e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: H/QWdyCC6I5/kd/M6Zy87lzW4LsESoqXGpA4i+YyIEk=
Subject key identifier: BE:37:76:D8:C2:FC:7A:CF:7A:3F:2F:3E:78:C3:FA:70:5D:64:FC:A3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1F1115F9EB98263D2E04799E59B89B049C6B3C94
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133392e302f32342d3234203d3e20323138373937.roa
Signing time: Tue 29 Sep 2026 07:29:24 +0000
ROA not before: Tue 29 Sep 2026 07:24:24 +0000
ROA not after: Tue 28 Sep 2027 07:29:24 +0000
asID: 218797
IP address blocks: 217.216.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:11:15:f9:eb:98:26:3d:2e:04:79:9e:59:b8:9b:04:9c:6b:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:24 2026 GMT
Not After : Sep 28 07:29:24 2027 GMT
Subject: CN=BE3776D8C2FC7ACF7A3F2F3E78C3FA705D64FCA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:f8:d3:5c:e4:73:7d:de:80:83:42:b1:37:
92:66:7b:17:a4:b7:16:9b:95:9b:21:9b:b2:7d:29:
e5:ed:04:9f:66:68:68:83:b1:31:3d:2f:1c:c7:9c:
b1:df:92:4a:2d:e9:ec:b6:fa:c3:58:b6:5f:46:96:
55:85:b0:a0:39:16:fb:14:8b:5e:7b:2d:c8:71:41:
6d:77:83:02:c2:6e:cf:c5:b9:c6:0f:79:f9:48:93:
cd:68:0e:63:38:13:ab:d7:09:f4:1d:ea:8b:84:f4:
b4:1e:27:78:01:ae:4b:84:e1:eb:19:8e:e2:78:3a:
1a:40:8d:8d:72:6c:a4:1f:ac:da:0e:73:3c:83:0b:
19:ac:6f:72:1d:a2:46:ae:69:5d:a3:50:c0:7e:a7:
8d:ba:bd:2f:c0:6c:74:ca:86:a5:1b:fe:9d:6e:61:
38:2b:d6:8d:0f:7b:b0:ef:e3:41:cc:3a:30:92:a6:
af:39:b7:33:42:16:c3:94:13:3b:1a:66:80:4b:15:
fb:c9:f9:26:7b:5a:a4:c1:0c:56:70:94:59:79:e0:
d8:d3:7e:eb:dc:fe:c0:f9:92:e5:09:14:8e:9a:d0:
5c:19:21:65:8b:af:02:8f:1b:c1:bd:f0:cc:4f:44:
d2:81:e0:8e:11:bd:e5:d8:1b:b1:62:bd:39:d8:e4:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:76:D8:C2:FC:7A:CF:7A:3F:2F:3E:78:C3:FA:70:5D:64:FC:A3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133392e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d7:0b:80:92:c0:81:2e:ed:63:52:df:47:41:17:7a:82:20:
5d:98:d2:f6:31:62:ed:1b:a6:8b:33:57:b6:88:df:9c:e5:f3:
8c:9e:74:6d:34:a3:11:5e:7a:22:99:01:48:71:10:77:44:48:
79:ba:83:4a:0a:13:a7:92:e4:d6:69:53:54:10:38:16:55:3d:
ff:7f:70:08:ec:ad:03:32:cc:1b:b4:f3:af:f4:50:49:42:70:
87:3a:88:51:9f:7e:47:d0:89:78:a7:23:ea:01:63:54:6f:86:
b1:e6:c7:21:dc:83:ea:2f:61:0d:97:41:58:83:b7:71:9c:01:
98:99:d3:d2:e6:34:80:91:18:3b:a4:39:73:fa:e1:f8:40:f6:
61:e7:e0:06:d4:03:77:fb:1b:ea:8e:c4:cc:19:41:bb:73:b6:
a0:1c:69:8e:a6:c4:17:5d:28:56:ec:4a:f9:27:a6:8c:4b:ed:
c8:db:c6:ba:fe:58:f7:cc:88:eb:a9:85:20:b7:64:5c:05:da:
ad:1c:90:f6:33:d8:5a:2a:90:93:66:8a:2d:68:e6:59:97:49:
fa:39:8b:53:2b:a1:a6:c9:21:79:12:31:7c:64:5b:e3:04:c7:
71:bf:05:c0:38:0e:64:f1:81:91:7c:b6:4c:4d:a1:80:3a:12:
b5:30:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:27:33 2026 by rpki-client