Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134352e302f32342d3234203d3e20313939373431.roa
File: 3231372e3231362e3134352e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier: cYhlEmvlcMcke8ctSjUzkfEfwQWdu+PsFWxFCBEKvq8=
Subject key identifier: 34:23:70:F1:2D:0B:33:13:D2:13:67:20:62:58:4C:AB:D1:06:08:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 42F4AF35111B2933BCB9C458A72D51CA4ADAEC23
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134352e302f32342d3234203d3e20313939373431.roa
Signing time: Tue 29 Sep 2026 20:30:46 +0000
ROA not before: Tue 29 Sep 2026 20:25:46 +0000
ROA not after: Tue 28 Sep 2027 20:30:46 +0000
asID: 199741
IP address blocks: 217.216.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f4:af:35:11:1b:29:33:bc:b9:c4:58:a7:2d:51:ca:4a:da:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:46 2026 GMT
Not After : Sep 28 20:30:46 2027 GMT
Subject: CN=342370F12D0B3313D213672062584CABD1060837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:87:55:11:e1:7c:a6:31:7a:f6:1f:74:40:
9e:41:fb:cf:fc:62:2e:fb:7d:41:5e:cc:05:2a:2d:
ea:8a:65:4e:17:1f:ba:70:86:a8:8a:d6:bd:f3:17:
3f:c3:7f:bc:72:2b:f7:9d:12:0f:e6:0d:75:ca:70:
32:6c:fb:3e:5e:45:98:3c:89:db:22:99:1c:3f:af:
1f:94:83:65:a2:bb:11:f6:25:57:66:1d:d2:96:9f:
91:7d:82:0f:82:bc:d2:f1:f8:79:27:6c:4c:7f:27:
56:40:b6:51:8c:e0:d1:85:8c:33:80:7e:e5:2d:14:
04:d0:7d:c0:05:d9:14:d8:a4:1b:ca:0f:5f:aa:95:
60:fc:8e:70:0c:fa:78:ce:62:0c:01:85:6a:75:d7:
59:a3:9c:ed:8a:96:25:1c:b9:d7:36:bd:0b:1b:a8:
29:fa:29:fb:a9:25:60:ab:8a:b5:e0:f8:eb:16:5b:
74:b9:db:eb:c8:ec:ff:2f:a0:4d:62:3d:91:64:fe:
b9:43:ee:ad:7a:75:ab:11:10:7d:28:ef:71:ed:8f:
7e:b2:bd:cb:15:2e:44:04:20:42:86:78:ff:15:b6:
ae:36:d4:d3:21:27:9e:19:ef:4d:dc:fc:b8:92:b8:
db:80:c7:ca:07:ef:5c:da:6e:4f:97:d9:0c:0f:08:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:70:F1:2D:0B:33:13:D2:13:67:20:62:58:4C:AB:D1:06:08:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134352e302f32342d3234203d3e20313939373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2b:4c:8c:9f:c3:7c:2b:07:a2:68:0e:4c:61:d0:57:af:9f:
dd:6b:ea:90:7d:08:a0:ea:3f:e5:0a:54:0d:bb:ea:06:40:4d:
d9:66:74:b6:8b:92:49:62:71:bd:fa:ed:fb:6b:94:47:ba:fe:
bb:41:a5:cb:1c:ad:e0:44:82:a0:89:2c:20:77:7b:25:f1:73:
e6:62:74:4e:fa:53:45:51:d0:d5:26:51:22:9f:11:94:1a:a3:
fa:7b:e2:19:9d:e3:07:e0:b5:30:dc:cc:3c:9f:75:d8:41:ca:
6c:a1:56:94:e1:bc:55:1a:a6:44:b1:82:a3:13:af:73:4e:ed:
0e:12:df:3a:34:97:a8:51:d0:5a:90:df:97:c4:66:01:25:7f:
b0:37:cc:3c:c9:73:00:b6:45:fe:47:1a:a6:9c:1d:b9:0d:9e:
19:bd:9e:01:ad:e4:73:9d:68:21:a3:ca:b4:35:9d:53:d5:b3:
f8:5e:1b:ff:ba:be:33:a9:04:64:4b:1a:90:69:c4:22:aa:9d:
44:68:03:ed:c9:e0:41:8c:f9:8a:95:d9:f9:9f:5a:0a:cb:ff:
98:49:40:a4:4e:2e:99:b9:e4:5d:94:37:4d:88:e3:4c:fa:3b:
58:11:8f:7c:62:8a:ed:cc:de:4c:b8:8d:5d:21:3e:06:e9:79:
c5:a6:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:15:56 2026 by rpki-client