Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134332e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3134332e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: lRfFYaktcXsP1pRl+JbIehmELVwQLkU4q1GK+Edvg3A=
Subject key identifier: 13:F1:1A:3C:25:AA:3C:A7:AB:3B:77:AD:AD:DA:7F:D8:52:27:08:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35D4CC2AD81EEDE6F84784F7C41074E0D347E7C5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134332e302f32342d3234203d3e20323139303735.roa
Signing time: Mon 28 Sep 2026 10:37:38 +0000
ROA not before: Mon 28 Sep 2026 10:32:38 +0000
ROA not after: Mon 27 Sep 2027 10:37:38 +0000
asID: 219075
IP address blocks: 217.216.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d4:cc:2a:d8:1e:ed:e6:f8:47:84:f7:c4:10:74:e0:d3:47:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 10:32:38 2026 GMT
Not After : Sep 27 10:37:38 2027 GMT
Subject: CN=13F11A3C25AA3CA7AB3B77ADADDA7FD8522708B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:ce:c9:ec:f2:45:d6:3c:fb:cc:6e:bd:fc:
35:e1:8f:a7:11:9e:cf:d2:cb:99:2a:c1:61:d8:d8:
c9:e9:e2:37:14:27:a2:51:a4:1e:ba:c1:a0:f9:37:
ca:68:23:0b:07:ea:2d:6a:f2:84:3b:e2:0e:57:b4:
d5:d5:79:5b:b0:33:b2:e3:8d:21:5e:c1:c2:d9:83:
26:30:01:2b:d9:e0:62:5a:0b:37:72:4b:5e:25:a3:
43:bc:be:3c:d8:2a:31:a3:69:49:73:6e:9f:aa:a1:
10:e3:7d:fe:ea:80:15:db:37:18:70:e1:92:dc:74:
1d:9d:d8:71:60:99:63:83:86:86:ec:92:74:59:01:
a1:88:65:55:d1:bb:62:61:af:d9:14:fc:bb:02:b9:
2c:ec:a8:1b:40:e3:45:2b:12:07:07:14:0b:69:f7:
62:fc:1d:08:c9:58:29:be:fb:94:01:3e:33:c4:cf:
f3:ed:91:4a:14:ed:11:20:62:b8:09:a2:fe:a5:f6:
2f:03:e3:c1:d0:19:a6:c8:b2:4a:63:e7:0f:24:c4:
e6:dd:07:f5:2c:ff:fb:2a:06:01:e0:3a:a0:74:a5:
f5:d3:b0:44:27:17:5e:27:4f:b5:d3:49:7e:6f:b4:
6b:fb:60:4e:9a:79:16:d6:11:b4:d4:35:ea:77:83:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:1A:3C:25:AA:3C:A7:AB:3B:77:AD:AD:DA:7F:D8:52:27:08:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134332e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.143.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4c:46:0d:12:07:ba:a4:e9:e5:de:22:9b:be:04:75:1d:6d:
a6:6f:59:3b:35:9a:65:f3:ee:fa:3f:a2:85:0b:92:59:8f:83:
62:fa:db:af:18:9a:01:68:97:27:11:e8:19:fa:4b:66:39:1b:
8d:e0:11:8c:43:b3:74:b0:70:5f:3b:ca:06:19:b4:af:d7:4a:
f5:1e:30:f1:02:3d:f4:a3:55:07:1a:7e:a3:e2:1c:0c:c3:a1:
9d:69:93:0c:52:ea:67:90:ec:25:71:b3:7e:d6:7e:7a:b7:4d:
7d:15:1e:fa:36:7f:b1:92:16:ae:79:70:db:ba:2a:45:23:05:
3f:28:1d:e7:b3:b3:07:0f:b9:74:d1:1b:71:aa:9c:ea:3c:b1:
e6:17:a3:37:bd:c0:9e:8c:85:90:c4:b9:bb:1d:78:40:9d:19:
55:2b:18:9f:95:29:09:e1:d9:33:27:7f:37:c8:1e:6e:b8:f2:
da:3d:74:33:bf:be:e7:d7:6d:a4:2d:e9:ca:b6:4c:ea:4b:f9:
43:0b:ed:77:06:9d:f9:87:a9:16:e0:46:c7:55:56:16:5e:7e:
b5:82:80:eb:21:36:30:f9:08:08:ff:a3:c0:fa:b2:b7:88:90:
0c:5e:0a:b5:50:13:42:ca:c9:1a:e6:b9:42:40:6d:ca:a0:8a:
16:da:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:46 2026 by rpki-client