Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136392e302f32342d3234203d3e203136323736.roa
File: 3231372e3231362e3136392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 7r9U9kmIVu5ZsPAHSB/WErHayzJIcwO2TWICKg25sXQ=
Subject key identifier: 2F:5D:68:CF:A0:EC:D5:10:5C:47:45:75:F0:AC:E3:28:09:03:8C:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7576FDACCB11B0FD6618930BB621347D8AFAB668
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136392e302f32342d3234203d3e203136323736.roa
Signing time: Wed 07 Oct 2026 11:17:30 +0000
ROA not before: Wed 07 Oct 2026 11:12:30 +0000
ROA not after: Wed 06 Oct 2027 11:17:30 +0000
asID: 16276
IP address blocks: 217.216.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:76:fd:ac:cb:11:b0:fd:66:18:93:0b:b6:21:34:7d:8a:fa:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 7 11:12:30 2026 GMT
Not After : Oct 6 11:17:30 2027 GMT
Subject: CN=2F5D68CFA0ECD5105C474575F0ACE32809038CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:46:f0:2b:34:d5:09:a9:35:3b:2a:01:02:
09:43:d9:5d:8b:13:e7:b0:3c:2f:a7:50:af:fa:84:
a9:31:99:24:ca:f6:82:84:de:4d:b9:89:93:11:52:
e3:0a:27:53:21:d1:0c:4e:f2:0e:9c:8d:16:92:13:
d1:19:fd:70:29:d8:05:0f:66:43:08:99:cd:60:8f:
3a:7b:ec:0c:02:b0:e5:06:9a:f4:70:a2:6a:da:b8:
8b:27:c4:9d:6c:07:4b:d8:74:85:29:13:11:4e:9a:
1b:9a:f9:26:9a:f8:b6:d0:28:f1:ed:82:b1:07:8b:
ff:79:ad:2a:0d:e5:50:64:7e:4f:01:17:ee:b8:83:
c7:ab:5a:e6:e6:b0:68:3b:94:09:34:b7:70:bf:eb:
52:58:38:c8:dd:07:fd:3f:c7:c2:9f:35:8b:bd:f6:
f9:bf:1f:50:90:56:d0:34:c2:a6:42:db:24:0f:3e:
43:05:11:7f:98:24:d4:8b:9e:d8:41:d0:10:a2:59:
58:50:b0:ae:15:23:e2:8e:27:1f:4e:1a:2f:b3:fd:
ca:51:5e:f8:40:ea:0b:4e:df:03:22:8d:cc:fa:7f:
e7:88:22:97:73:67:21:85:00:a5:ce:e6:dd:e3:94:
c8:e8:d2:e0:fa:b9:ff:1c:13:52:8f:31:ab:e6:40:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:68:CF:A0:EC:D5:10:5C:47:45:75:F0:AC:E3:28:09:03:8C:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.169.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b8:35:59:63:85:4e:0b:be:84:53:13:2c:33:30:2e:5a:80:
ea:0f:ed:b0:ae:3e:3a:6f:00:5d:13:3a:1e:6d:65:d7:0a:3b:
bf:14:d3:e4:9c:49:10:9f:e1:b4:00:a8:b2:02:f4:7f:38:77:
48:4e:8f:09:22:c9:ac:76:63:03:cb:e2:45:58:bd:fb:d9:60:
12:3c:78:64:af:fd:de:71:a6:44:cf:03:12:d8:34:0d:ff:a5:
9e:49:8b:82:1c:bb:0f:7a:58:77:cb:f2:bc:00:36:94:c1:e2:
73:dd:ef:c8:ba:0f:14:09:ac:42:bc:55:3a:9a:4f:61:e9:34:
f5:2a:b1:ce:46:57:ce:f6:c0:08:a2:36:b3:4a:ab:2b:eb:d9:
64:b5:34:33:4f:cc:ba:b3:17:25:82:ba:1a:df:9b:af:1d:57:
74:60:a4:3c:56:c5:fe:1d:17:45:a5:ad:62:8a:48:25:61:ec:
cc:bc:1d:c0:5d:2c:9e:9f:1d:36:47:ec:64:2f:58:81:4d:c0:
cf:58:ea:15:58:b0:47:33:65:ca:b6:ab:52:e8:5d:ab:ee:38:
79:8b:f7:92:c2:c6:71:cb:10:b9:d6:53:6b:32:cd:2b:64:16:
d0:c0:ab:8b:82:4e:08:a3:90:ae:16:14:2b:8b:f5:c0:58:7e:
f0:35:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:03:48 2026 by rpki-client