Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e203132303833.roa
File: 3231372e3231362e3135322e302f32312d3234203d3e203132303833.roa (raw, json)
Hash identifier: ew4pIjG+nf4pvSYafurNbzZW0l74tT8rAWScaaEN53M=
Subject key identifier: D1:16:DA:2B:DB:62:AC:8A:25:00:39:42:72:C6:0A:BF:15:E4:BE:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D111F15793BB22DE1D359F852AFB7A022AC9F8C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:48:09 +0000
ROA not before: Fri 10 Jul 2026 22:43:09 +0000
ROA not after: Fri 09 Jul 2027 22:48:09 +0000
asID: 12083
IP address blocks: 217.216.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:11:1f:15:79:3b:b2:2d:e1:d3:59:f8:52:af:b7:a0:22:ac:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:43:09 2026 GMT
Not After : Jul 9 22:48:09 2027 GMT
Subject: CN=D116DA2BDB62AC8A2500394272C60ABF15E4BECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:ef:7b:f0:1a:d6:fb:63:d2:6f:39:a3:27:
d7:78:0f:47:c5:99:b7:bc:23:22:cd:86:62:a5:cb:
fd:09:13:b2:da:8d:29:70:12:00:7d:da:ca:d4:69:
84:6e:02:5c:3c:18:7c:e2:3f:d6:9b:6e:07:d9:68:
24:94:c5:71:52:54:24:ef:ad:47:82:86:1b:ae:87:
7f:99:06:2f:8a:6a:9c:b9:0a:f0:48:21:2c:39:62:
bb:4d:46:79:f4:4a:01:5e:8b:dd:66:20:04:67:75:
6c:47:30:2f:2e:2a:35:b5:5f:87:4f:2b:37:3f:34:
0c:98:ba:18:84:7e:5a:d1:52:bd:fe:1e:3c:d5:a0:
54:3d:04:30:96:6e:04:82:cf:7d:f0:51:01:73:fd:
35:cb:ba:14:7d:32:41:5b:3f:fd:ec:59:d2:66:c1:
cd:87:2b:b4:f9:d4:4f:95:91:0c:7c:16:0a:37:d4:
0a:b2:8e:f3:05:57:6a:f9:2d:1d:4e:a1:24:e5:5d:
21:01:c2:e9:f3:42:8c:85:4f:2a:a7:96:1e:bf:c9:
e3:7c:cc:c0:ea:98:79:c3:ce:b8:f7:0c:10:fb:b9:
29:1c:b3:b2:f1:29:fb:20:da:b9:17:1b:1a:2c:c8:
5d:a0:63:07:d1:73:37:e8:0b:6e:40:a3:0a:36:18:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:DA:2B:DB:62:AC:8A:25:00:39:42:72:C6:0A:BF:15:E4:BE:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.152.0/21
Signature Algorithm: sha256WithRSAEncryption
39:d7:7a:a4:7b:24:5a:f2:84:62:73:d3:e5:9f:ee:ac:e9:b5:
36:da:09:43:2e:95:ab:2c:36:82:42:ff:8f:25:97:99:68:24:
40:23:76:7a:94:2d:c0:47:32:54:bc:07:00:e0:fe:20:5e:58:
1d:0a:d7:83:b5:29:cd:db:02:cd:00:53:da:d6:c0:6f:cc:5e:
f5:20:22:84:b8:9a:f9:6f:74:f7:17:bd:25:5a:b1:92:29:6e:
fd:0c:84:94:89:09:25:03:57:d5:0e:9e:08:21:f2:96:3e:84:
c3:27:18:bd:9e:72:a0:94:48:60:db:16:a9:28:f0:fa:e2:1f:
ba:77:9c:ba:73:18:91:1f:e9:d6:8a:e5:d5:75:d4:3e:2f:58:
fe:a0:4a:17:92:54:e6:e2:d5:90:eb:a8:b6:79:4c:d3:ec:64:
2c:22:eb:5c:80:5a:b0:80:bb:93:29:8a:b8:3c:b5:28:bf:ae:
96:98:f2:77:13:29:96:1e:d9:0c:bd:44:8e:52:5b:cb:7a:21:
da:b2:0f:cd:e7:7d:01:62:d3:bb:fe:45:32:3c:ed:15:a5:13:
5a:6d:c0:f9:47:95:43:a1:72:87:22:e6:cb:4f:52:33:da:5f:
70:57:11:ff:bf:42:b1:fb:cd:a0:76:37:65:09:aa:d5:0b:bb:
b7:1d:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client