Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e2037303239.roa
File: 3231372e3231362e3135322e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: NSxG1cyRbgj+TxOJH9bAYR/nDfhBRg+uGymNifpfxDo=
Subject key identifier: 01:57:30:08:2A:FB:74:81:7B:A9:F9:FB:00:DA:0F:54:46:CB:80:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A7CEF84909D82D5842D99C7FD9536081B2FB3F1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e2037303239.roa
Signing time: Sat 11 Jul 2026 09:08:39 +0000
ROA not before: Sat 11 Jul 2026 09:03:39 +0000
ROA not after: Sat 10 Jul 2027 09:08:39 +0000
asID: 7029
IP address blocks: 217.216.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7c:ef:84:90:9d:82:d5:84:2d:99:c7:fd:95:36:08:1b:2f:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:03:39 2026 GMT
Not After : Jul 10 09:08:39 2027 GMT
Subject: CN=015730082AFB74817BA9F9FB00DA0F5446CB8095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:29:a2:34:ba:9d:a6:3e:ed:cc:c0:99:7e:
39:6f:ee:d3:5b:08:c2:73:39:c2:61:80:b5:ec:1b:
0a:a5:fa:cf:77:65:b1:ec:e9:5e:57:ca:64:76:e8:
e4:4a:a5:cd:4f:db:5a:8b:58:5d:03:85:80:ce:49:
7d:c1:48:8b:3a:da:09:44:24:15:b9:91:ae:15:71:
1c:1d:8b:ca:f3:6f:6d:31:bc:7a:0a:0f:70:09:e4:
74:77:28:f5:c2:9f:a4:78:6a:11:f8:e1:bf:13:29:
22:5b:03:33:e5:54:2c:e3:b1:0a:ca:e8:df:ea:02:
c3:f7:ee:96:08:8c:8c:82:f4:40:66:78:bd:23:ac:
dd:ea:62:57:95:fa:81:d4:25:ca:52:bb:e0:ab:34:
14:86:b6:a9:53:d4:fe:9e:37:d8:83:d6:77:25:e6:
6c:67:17:d8:2b:85:e3:ac:ff:67:97:aa:bf:fb:d9:
8f:5e:ba:fc:70:3e:44:ca:4b:18:e0:c2:d7:82:86:
47:dc:cf:45:40:52:23:1f:40:6f:58:61:d5:ff:ab:
da:8c:78:2c:92:fa:10:71:6c:41:64:a7:0c:ae:2c:
37:5d:74:7d:98:c5:9e:2e:08:a4:dd:71:80:9f:c6:
05:c3:44:7a:61:ff:8d:59:f0:ec:20:c0:6d:86:f4:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:57:30:08:2A:FB:74:81:7B:A9:F9:FB:00:DA:0F:54:46:CB:80:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3135322e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.152.0/21
Signature Algorithm: sha256WithRSAEncryption
88:60:7f:78:07:9b:e6:ef:c9:25:b1:e6:5e:08:f9:45:c6:ba:
ae:55:7f:6e:48:e3:bd:ad:ed:aa:62:5f:7a:c4:cb:cb:ca:a6:
6b:0e:9c:1d:45:5e:6e:a9:26:5d:a0:4f:30:02:10:36:d7:5e:
ad:53:6e:8b:c5:4a:cf:d9:97:5e:a8:a1:8a:1a:c8:13:84:ce:
a3:b6:46:5e:c2:68:38:6b:6d:e1:8d:08:f6:59:70:20:9f:1e:
19:ec:d7:d5:d3:e7:40:67:d5:83:bd:4a:ee:92:27:d2:fe:e2:
29:00:53:1d:0e:dd:8c:82:ee:e5:c9:5c:f9:3d:37:c4:a3:6c:
a1:75:83:54:83:98:dc:7b:87:39:91:bd:65:7a:c4:49:c5:1e:
04:c1:8e:68:96:7f:4e:83:1e:e8:ae:1c:79:15:5d:8e:02:d3:
7e:c8:e0:56:11:47:ca:60:cf:30:f5:11:49:a4:8f:68:8d:b0:
30:c2:b8:58:ba:06:b0:6b:c8:06:55:20:aa:5d:18:5e:2a:06:
33:0e:69:8d:9f:05:a7:56:9e:43:93:fa:41:f1:b4:64:7a:a5:
e4:11:88:f4:f8:a0:03:17:85:16:17:3f:90:3f:cd:af:3e:36:
ed:f6:20:b1:6b:f2:e6:b9:4d:4a:ba:14:8c:88:57:fb:a1:11:
bf:6d:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:31 2026 by rpki-client