Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135302e302f32342d3234203d3e203330303432.roa
File: 3231372e3231362e3135302e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: QfvL7Z0XNYYGxkY/WV6wJQquURaGk2914eHUDvonciY=
Subject key identifier: 73:29:34:E7:44:DC:05:E2:DE:05:67:43:50:CF:D7:26:59:E1:09:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18A46B3B5F5DD1466DC8EE1C21F0A8CAEB04B7A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135302e302f32342d3234203d3e203330303432.roa
Signing time: Mon 05 Oct 2026 09:25:49 +0000
ROA not before: Mon 05 Oct 2026 09:20:49 +0000
ROA not after: Mon 04 Oct 2027 09:25:49 +0000
asID: 30042
IP address blocks: 217.216.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a4:6b:3b:5f:5d:d1:46:6d:c8:ee:1c:21:f0:a8:ca:eb:04:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:49 2026 GMT
Not After : Oct 4 09:25:49 2027 GMT
Subject: CN=732934E744DC05E2DE05674350CFD72659E109B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:9c:b5:03:67:17:96:d2:a0:cc:da:26:1a:
f0:96:27:bd:96:2f:3f:cc:2a:35:dd:d8:47:28:55:
71:e2:62:3e:75:de:3b:15:2b:0f:c8:f5:cc:67:ca:
ca:1a:23:b5:a3:93:b6:9d:c9:db:08:1f:5a:12:6b:
6a:24:de:59:7b:25:7e:08:3d:da:60:74:a3:e8:4b:
be:65:f1:3e:61:e3:8e:e3:7a:a9:7f:2f:29:4f:3e:
bb:5e:cf:33:66:43:91:f0:28:44:a1:3f:f4:7b:56:
f5:29:2d:e4:98:e4:a7:74:02:88:88:53:85:8e:68:
aa:a4:a3:b4:10:bb:ea:f0:ea:c7:14:35:7e:c0:a1:
e6:a8:ca:ca:f6:08:36:83:df:ed:eb:87:ac:00:47:
13:5a:2b:42:d5:df:81:8c:52:0e:11:42:4d:79:9a:
5d:7e:c2:ce:7d:07:6d:91:91:14:76:93:c4:56:f6:
35:0c:4e:0e:68:48:f2:8e:76:32:dd:1b:05:12:ea:
61:b7:cf:7d:1c:70:d2:8d:70:0b:2d:5a:4f:0f:4a:
ed:eb:9f:b5:a8:90:c4:d7:af:b2:42:71:56:0c:c9:
4d:a3:42:6e:8a:93:69:24:a6:8c:22:c3:68:b0:a7:
f1:6d:7e:78:01:27:7a:9f:36:22:e1:2a:20:f0:11:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:34:E7:44:DC:05:E2:DE:05:67:43:50:CF:D7:26:59:E1:09:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135302e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.150.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e8:a0:b3:1c:af:6f:94:87:b3:c9:0f:73:e4:8f:d3:2d:29:
c0:7f:5b:3c:34:d1:5c:ed:47:b4:32:c1:31:5a:63:4f:a5:26:
94:73:67:2e:bd:64:bd:12:16:21:94:17:5f:0e:8d:42:b8:ea:
3b:2e:5d:4b:9a:2e:71:ac:06:23:19:88:9b:08:03:76:b3:3a:
f3:80:4f:e0:c3:82:ef:8e:92:2e:9e:3e:6b:64:81:35:e1:18:
f4:81:45:90:f2:fa:13:10:60:93:a8:cf:2e:1c:49:1f:ae:f5:
c7:be:ef:df:bc:58:41:33:a9:21:80:65:45:74:98:5c:07:19:
f8:1e:1e:7a:4f:22:c6:a8:35:04:fc:e8:c0:0d:2b:40:e7:70:
99:e4:46:a4:dd:65:14:d4:de:be:03:d6:6d:19:e8:23:9a:a0:
f9:86:bb:5e:1a:c3:b5:a3:f7:d7:4a:fc:a1:d8:2a:93:b3:34:
f7:5a:a8:be:38:2e:9c:19:95:c8:1a:1d:39:e1:00:00:99:79:
5e:95:35:32:18:69:0c:70:34:35:d0:01:bb:6d:e0:c9:a3:7a:
79:76:25:12:2e:94:e4:0c:c3:4a:7c:c8:3a:08:ac:f4:06:b6:
1e:2c:b9:a7:37:9a:c1:39:5b:2b:5f:75:4e:fe:a6:d7:ae:07:
9b:fd:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:35:04 2026 by rpki-client