Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32342d3234203d3e20323138353433.roa
File: 3231372e3231362e3134382e302f32342d3234203d3e20323138353433.roa (raw, json)
Hash identifier: 0yGovOyLAsZuS+SnhyVIFYU2tGZPl01AHA3Shj27kuI=
Subject key identifier: 48:E6:93:9C:2F:D3:D3:AD:2E:EA:53:D4:EF:25:62:9C:77:66:83:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 269A79CD0BE995FF6B616A624E891EEFF583B607
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32342d3234203d3e20323138353433.roa
Signing time: Thu 01 Oct 2026 19:56:42 +0000
ROA not before: Thu 01 Oct 2026 19:51:42 +0000
ROA not after: Thu 30 Sep 2027 19:56:42 +0000
asID: 218543
IP address blocks: 217.216.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9a:79:cd:0b:e9:95:ff:6b:61:6a:62:4e:89:1e:ef:f5:83:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 1 19:51:42 2026 GMT
Not After : Sep 30 19:56:42 2027 GMT
Subject: CN=48E6939C2FD3D3AD2EEA53D4EF25629C7766836D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:d6:5c:35:f2:38:ca:03:63:cc:16:0c:f6:
51:7f:84:9f:df:59:77:da:ad:ba:a6:25:f4:5b:5a:
f8:14:6d:f0:a5:35:32:0b:4c:74:6e:00:a4:e2:00:
76:95:27:4e:51:35:82:c0:86:8e:fa:ce:e4:3a:5e:
8d:9b:ee:e4:be:87:69:0f:38:0b:05:48:41:89:df:
fd:d3:f4:e5:34:74:46:83:65:f8:a2:9b:76:49:7d:
af:91:42:1d:fe:6a:de:a3:b4:28:e5:65:cd:00:42:
87:c3:5d:01:43:83:1b:8a:5e:45:ca:2b:05:81:b9:
15:36:2f:43:78:be:82:a7:41:3c:29:2d:6c:2e:4d:
e2:40:8d:08:52:90:f5:39:ed:5a:b4:61:24:ff:5a:
55:73:4a:f3:02:b1:f0:d5:49:a2:fa:ad:98:9d:22:
fc:f2:7e:29:2e:bf:f6:6a:ce:2b:b0:b9:a3:45:87:
35:d6:f0:dd:bf:57:71:0a:a2:3c:13:fc:1c:f9:a4:
44:0d:d1:44:4f:fd:74:f4:e7:9b:1c:a7:1a:8e:3d:
98:55:44:90:21:0e:6a:2b:f1:b9:2c:e0:8d:82:94:
20:fb:07:4d:65:26:95:f2:30:2e:e3:2c:1f:6e:81:
bc:3d:1f:1d:fc:74:1c:e6:b4:f3:12:c4:c5:c9:65:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E6:93:9C:2F:D3:D3:AD:2E:EA:53:D4:EF:25:62:9C:77:66:83:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32342d3234203d3e20323138353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:06:56:e3:23:64:ed:88:72:7a:d4:91:92:8e:fc:18:94:82:
3a:b4:ad:dd:54:0b:20:e1:74:33:91:9f:2e:ed:bc:8e:af:d9:
34:98:9a:b9:6c:43:61:c2:0a:81:a9:b1:cb:9d:44:39:51:ca:
60:35:85:21:57:df:ca:95:61:e9:c5:57:ad:0b:a2:43:d1:a4:
ec:08:ee:56:4e:56:36:c5:6f:dd:37:1b:24:16:6e:c6:63:17:
09:62:6d:e1:b7:5d:29:a2:4a:9f:16:47:a8:84:1f:c3:05:2c:
44:29:e8:5f:b5:52:c7:ab:6d:35:98:24:5c:a5:f1:22:fd:fc:
55:ec:70:9a:19:e7:f4:8e:b7:47:95:9d:0a:10:35:8c:66:1f:
67:8f:ff:22:9f:66:e7:23:fb:fd:bb:77:e1:7d:81:e5:95:2a:
20:1e:39:82:b8:39:c0:80:ba:18:82:17:08:c1:55:3a:04:70:
ea:50:00:4f:ba:48:6a:c6:c5:86:d9:09:64:f3:08:06:ae:3a:
c2:37:02:43:7c:b5:3c:89:8f:cc:4c:f8:bd:82:11:d6:2f:b3:
67:6e:3f:87:9c:0c:00:95:16:39:19:a4:22:32:bf:be:c9:7d:
50:05:32:7f:77:1b:29:a5:5a:91:94:22:b0:49:d8:19:01:66:
17:82:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:10 2026 by rpki-client