Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134322e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3134322e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: PIJBjkaiauZjNRfbiqSsM3Ir/s3t0EhPyFGIFkil0L4=
Subject key identifier: C8:7C:A2:A1:83:56:C3:97:4F:E2:50:F5:19:98:C3:21:23:7E:2A:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CBC21BBDB794547A967F097B134AEBD6BF696F0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134322e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 29 Sep 2026 20:30:36 +0000
ROA not before: Tue 29 Sep 2026 20:25:36 +0000
ROA not after: Tue 28 Sep 2027 20:30:36 +0000
asID: 219075
IP address blocks: 217.216.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bc:21:bb:db:79:45:47:a9:67:f0:97:b1:34:ae:bd:6b:f6:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:36 2026 GMT
Not After : Sep 28 20:30:36 2027 GMT
Subject: CN=C87CA2A18356C3974FE250F51998C321237E2A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:b0:b0:14:db:cf:4d:d1:a3:41:75:40:f7:
66:6a:cb:84:7c:a0:f5:b6:d3:6c:d0:35:63:a3:5f:
dc:d3:8c:2c:39:1f:4d:c0:cf:f3:ba:0f:81:e2:04:
76:60:12:3d:9c:3d:af:d2:17:47:7f:e1:a0:97:54:
15:6c:18:f6:73:50:48:be:d2:3f:40:e3:26:17:97:
9f:23:ee:48:b2:c2:d8:d3:5a:dc:d9:a1:85:a6:c0:
99:aa:0f:c7:4c:9b:81:aa:4a:8d:98:32:96:19:e7:
79:45:1f:13:ee:a1:a8:96:a3:b4:31:e0:72:fa:18:
a8:f9:64:e4:6e:70:b5:e0:dc:c3:69:4d:5a:6d:2a:
ac:3b:63:6c:f2:2c:b8:9b:e4:a8:90:33:8c:49:53:
b7:3c:e2:5c:e6:03:1b:f1:c5:b6:1b:b7:35:21:61:
31:d1:45:d7:87:36:cb:36:57:27:cd:f1:6d:a3:24:
f8:b2:f7:a0:ab:d0:28:69:df:30:ac:49:db:3c:3e:
8b:bc:bb:61:14:c8:2e:6a:e9:9f:51:12:bc:96:69:
0b:e7:43:d3:11:97:14:9c:e5:77:2b:33:10:f8:66:
ce:01:27:d2:e4:32:f3:77:81:9c:c2:01:c2:96:3f:
8d:74:82:07:99:21:94:ea:e6:58:7c:ba:e1:b5:00:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7C:A2:A1:83:56:C3:97:4F:E2:50:F5:19:98:C3:21:23:7E:2A:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134322e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.142.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c7:ca:a7:ee:ed:37:03:3d:d2:3d:1d:13:41:d4:e9:e6:94:
07:33:a0:41:c8:71:a7:95:59:c7:f2:7c:b0:de:7c:3b:cb:ae:
84:3e:a1:5b:6d:4b:f7:39:d9:bd:9d:7e:6d:b8:88:35:0e:2a:
4b:82:f6:08:a1:50:4d:43:d2:2b:61:4b:38:f3:96:ea:ed:cd:
98:75:4e:d9:f1:64:be:68:5d:b2:d3:11:f7:30:a0:fd:50:73:
c8:4b:e3:17:c2:9e:36:57:0b:13:a4:d0:f0:d5:79:73:3e:66:
5c:7a:d2:6f:c5:98:09:1a:02:f2:9c:66:2c:15:01:36:88:3a:
6b:87:2b:14:e8:5c:ab:bd:36:98:9d:01:0b:91:e0:8f:39:eb:
06:98:d4:b5:0b:e7:0b:90:d1:fd:00:e0:11:09:e3:2d:76:af:
04:e2:0e:e2:b8:08:a7:aa:cb:8d:ce:19:70:9a:d8:94:cf:f6:
e8:e5:81:eb:ff:ff:3f:95:10:f2:f9:c6:b5:97:3f:af:ae:f4:
c9:c7:38:64:9d:5e:d1:fc:eb:8e:94:1a:70:7d:8a:f0:43:7b:
37:9c:b8:14:a4:a4:4a:2a:9e:73:02:cf:8b:b3:43:58:dd:3d:
c8:12:a1:a8:95:f7:7b:3c:5d:13:7a:ac:25:98:27:1b:03:70:
3e:78:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:46:41 2026 by rpki-client