Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134362e302f32342d3234203d3e20343030343032.roa
File: 3231372e3231362e3134362e302f32342d3234203d3e20343030343032.roa (raw, json)
Hash identifier: apVRLL9FigwmeFrKyrHMxp3V+OmNyVQI8xcCm0XfPoM=
Subject key identifier: 64:68:D8:AE:4F:80:9C:70:16:63:E2:E3:6C:27:77:66:4A:9C:32:42
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 466827154D9CF6309D2740AA7A8E461ED6EC803D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134362e302f32342d3234203d3e20343030343032.roa
Signing time: Wed 30 Sep 2026 20:26:51 +0000
ROA not before: Wed 30 Sep 2026 20:21:51 +0000
ROA not after: Wed 29 Sep 2027 20:26:51 +0000
asID: 400402
IP address blocks: 217.216.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:68:27:15:4d:9c:f6:30:9d:27:40:aa:7a:8e:46:1e:d6:ec:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 20:21:51 2026 GMT
Not After : Sep 29 20:26:51 2027 GMT
Subject: CN=6468D8AE4F809C701663E2E36C2777664A9C3242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:f4:b7:1c:4f:12:01:06:1e:a3:df:ce:4f:
f4:8e:e2:a7:07:54:f1:c3:96:2d:e3:a8:5d:d4:e7:
38:02:0e:52:32:8b:97:aa:74:19:ef:db:85:08:37:
ff:dd:be:9c:ec:08:da:60:57:04:0e:98:62:eb:24:
9b:04:9d:c3:4b:d5:6c:14:d0:b8:a3:b2:06:49:f8:
7e:71:90:06:a3:04:c4:04:b8:76:9e:34:61:b4:1e:
1b:a2:ef:53:b5:1c:0e:84:d6:30:cc:f5:63:ea:a9:
1a:17:6f:88:9b:77:68:8a:d1:f5:e8:01:a0:17:25:
93:c3:1c:00:81:23:d3:a1:92:10:ba:d3:80:eb:93:
6f:c7:70:35:7a:f7:e7:ed:2f:28:f9:36:63:96:d6:
b8:eb:15:dc:8a:f0:07:14:1f:a4:02:e1:fd:76:b5:
ab:a6:a6:89:58:c1:5d:93:62:65:6c:c8:08:a1:0f:
c0:f2:0c:cf:46:1c:ec:85:13:88:5d:5b:d6:58:a9:
61:d0:4f:90:54:7e:31:22:e4:99:af:5e:ec:22:8f:
a2:3a:98:97:b6:77:1e:24:06:be:01:51:48:6c:02:
46:d0:7f:c3:3c:0e:69:9d:b0:5c:2d:43:62:19:c5:
4e:4a:dd:2d:55:3b:f7:64:cc:b9:35:67:76:11:97:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:D8:AE:4F:80:9C:70:16:63:E2:E3:6C:27:77:66:4A:9C:32:42
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134362e302f32342d3234203d3e20343030343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.146.0/24
Signature Algorithm: sha256WithRSAEncryption
65:08:87:c8:b7:b6:79:dc:69:a3:ba:2a:44:a8:f7:41:c4:dc:
23:7c:dd:cf:a3:2e:89:69:f8:4b:b9:fc:be:67:86:24:88:71:
56:95:62:bc:47:9b:33:c1:d1:32:f3:d5:8e:3f:7f:55:28:8d:
07:29:cc:5e:1c:a5:41:9f:4d:48:bb:be:97:89:6e:c8:cd:18:
89:c5:49:38:54:fe:36:0e:25:d7:c9:9d:d5:86:fc:e9:5b:55:
7c:1d:ef:fa:76:e0:ca:c1:31:b5:c4:42:96:60:e2:1b:0f:50:
04:16:84:7e:df:02:86:33:ce:b9:3a:ad:dd:d5:39:28:c1:5d:
ec:54:59:82:15:11:8c:76:8d:85:52:02:c3:8f:7a:56:ec:a9:
17:29:33:3c:9a:e2:f4:10:34:15:fe:6a:69:46:37:35:f5:d2:
88:8f:fd:71:06:45:f0:81:e3:b4:28:dd:32:4e:2b:4d:7d:d0:
86:c8:84:b2:d3:9c:eb:0c:4e:d7:8f:69:1e:fc:5e:54:c7:fc:
73:e3:8f:d6:02:57:0e:65:cb:12:10:24:bc:14:78:62:0a:b6:
fd:d0:f1:99:7d:e5:48:a2:89:55:00:f8:40:64:76:4f:fb:71:
4e:7f:b7:9e:b2:67:ad:52:9a:e2:2b:21:9a:2c:82:f6:0b:c1:
90:a8:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:53:17 2026 by rpki-client