Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e2035363530.roa
File: 3231372e3231362e3135322e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: 93UJM7L25DN7aD8noUQfUzd5glMx4F720boZ5aa7ipk=
Subject key identifier: 02:1D:5D:ED:48:6E:05:0A:32:DC:15:12:11:35:FC:18:AE:A1:DF:90
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A67E3B573AE6724588F0FC6266972E5E9443BE3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e2035363530.roa
Signing time: Sat 11 Jul 2026 09:09:57 +0000
ROA not before: Sat 11 Jul 2026 09:04:57 +0000
ROA not after: Sat 10 Jul 2027 09:09:57 +0000
asID: 5650
IP address blocks: 217.216.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:67:e3:b5:73:ae:67:24:58:8f:0f:c6:26:69:72:e5:e9:44:3b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:04:57 2026 GMT
Not After : Jul 10 09:09:57 2027 GMT
Subject: CN=021D5DED486E050A32DC15121135FC18AEA1DF90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:f1:71:d9:71:3a:03:30:fc:94:3a:ca:2d:
9d:8b:ed:58:b5:3e:74:c5:5b:7c:c4:6f:fe:4c:f7:
50:d0:3d:a6:9a:4d:94:bd:be:d2:ea:c0:6d:47:0a:
3d:7c:71:22:42:36:02:ae:ed:63:bf:7f:43:73:b0:
18:f3:7f:e6:e5:d3:91:b1:b5:17:1b:16:5b:30:3b:
0c:23:e2:1c:01:42:0e:cd:5e:03:20:37:25:ba:aa:
d1:29:03:0c:4e:35:f5:e2:59:51:4f:e3:a6:31:1e:
87:4d:f4:16:54:e6:82:62:70:c5:7c:c8:d5:34:85:
3a:70:5a:a9:09:15:de:9a:69:10:ce:7c:0b:ab:0a:
b4:b7:58:6a:12:62:8b:cd:0a:e5:fb:7a:5a:5e:fb:
c3:85:47:88:60:3b:30:4d:d8:cd:a3:01:83:70:9e:
9f:51:d1:e4:4b:a4:5a:3f:83:2f:1f:e8:2e:05:5d:
21:14:89:73:45:08:07:0a:c1:87:ee:85:d4:72:c3:
28:98:4f:2f:69:e5:36:49:b3:b0:47:c5:05:31:c5:
69:1e:e3:9d:a8:21:5a:56:56:51:b9:21:e9:ad:dc:
e0:65:d7:c3:41:b3:c5:0c:fa:1b:a1:6d:fe:0b:48:
85:98:2b:a5:52:e9:65:71:95:86:2e:e1:99:d0:7d:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:5D:ED:48:6E:05:0A:32:DC:15:12:11:35:FC:18:AE:A1:DF:90
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.152.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:82:c3:1e:41:4b:b6:61:19:a0:64:4d:0d:81:45:e2:75:a1:
c7:05:4b:3a:d8:6d:94:60:13:9f:a2:d4:0c:4e:37:83:c5:99:
cb:ce:a2:fc:59:24:5a:ce:65:c4:9d:f5:0e:e2:b7:6f:9c:8c:
73:76:58:64:bc:61:b8:ad:5f:33:31:f4:72:6a:41:ce:0a:54:
7b:f3:b2:fd:ed:29:b2:ad:3d:4b:05:3b:b2:bb:13:49:94:f6:
81:4b:35:04:2e:c5:35:c1:de:63:f0:a3:99:e2:13:6b:06:ff:
8f:56:e0:ca:b0:1e:0d:47:c1:55:f1:c2:f8:96:43:e9:e2:0f:
df:59:e5:1e:e1:f3:d3:a7:38:28:1c:50:d9:ed:8b:69:9f:48:
16:19:53:2d:8f:e9:e5:64:94:92:76:ec:2f:f0:7e:2e:ba:91:
ab:3e:1d:06:d4:76:ab:c0:86:6d:5f:db:67:e1:96:09:53:c9:
2e:05:89:2e:bd:47:5c:a7:97:f1:7f:b5:7e:95:72:0a:30:2a:
b1:30:5c:49:2b:b4:03:c5:64:28:7f:f8:23:1a:6b:53:7c:27:
08:b7:5a:ba:39:2c:7e:38:a4:9c:89:ae:7e:97:12:ef:90:7c:
bb:15:19:6e:23:ca:7d:62:1c:30:e7:49:6e:6e:43:d7:34:95:
1a:49:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:49 2026 by rpki-client