Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137312e302f32342d3234203d3e203133333335.roa
File: 3231372e3231362e3137312e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: O6OFJzfVWCjY2Qn1qNCkKnij5ElzyzQrNXYDzdsBjsQ=
Subject key identifier: A2:06:16:3D:B7:AC:E5:CB:54:83:FA:9F:1B:EE:F0:62:F1:82:7C:A4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4779693834E064C4EB92FA2A4DD91FA0AC58CA02
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137312e302f32342d3234203d3e203133333335.roa
Signing time: Mon 05 Oct 2026 10:41:55 +0000
ROA not before: Mon 05 Oct 2026 10:36:55 +0000
ROA not after: Mon 04 Oct 2027 10:41:55 +0000
asID: 13335
IP address blocks: 217.216.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:79:69:38:34:e0:64:c4:eb:92:fa:2a:4d:d9:1f:a0:ac:58:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 10:36:55 2026 GMT
Not After : Oct 4 10:41:55 2027 GMT
Subject: CN=A206163DB7ACE5CB5483FA9F1BEEF062F1827CA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:c3:6c:38:c2:48:7a:65:e8:bd:9c:0c:85:
57:d9:bc:dd:11:89:d9:aa:11:0c:1c:00:18:79:56:
45:19:63:08:f8:ed:78:5d:5c:2d:64:d2:61:90:58:
09:a0:bf:41:a3:13:05:4a:56:f9:d6:11:72:dc:7e:
4c:62:39:df:9c:be:5e:81:ea:de:79:37:76:8f:4b:
1d:ad:34:99:4f:2f:55:21:72:64:9d:2b:f1:0c:85:
df:fa:8f:ca:bb:a3:70:8d:38:f5:9c:90:72:6b:8c:
4a:79:14:d3:d6:20:47:cd:75:1c:61:e6:90:af:3a:
1b:e1:b4:03:b4:2e:70:a7:52:81:b4:56:34:e3:bd:
82:7e:96:d0:d2:01:f7:e5:dc:c8:29:44:57:d4:fc:
e0:2a:01:1f:bf:1f:e8:76:3f:5f:4d:75:b5:57:6a:
f8:73:b4:7e:f3:17:5b:f6:c1:84:65:68:7b:dd:ec:
f4:09:d2:64:a8:26:1b:0a:be:fc:46:1b:9c:63:01:
d0:07:a8:50:14:fa:ba:85:62:a3:31:90:f3:76:ea:
05:1a:c0:fd:04:33:3f:6f:80:b0:2a:7e:56:20:ec:
68:16:19:35:d8:c1:ec:42:64:02:1c:4e:98:2c:cc:
36:d8:c4:08:84:6c:d6:2a:e6:e7:a6:7b:02:66:0a:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:16:3D:B7:AC:E5:CB:54:83:FA:9F:1B:EE:F0:62:F1:82:7C:A4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137312e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.171.0/24
Signature Algorithm: sha256WithRSAEncryption
38:19:34:91:77:15:42:d2:9c:31:90:a4:3d:62:e4:6d:90:63:
29:51:ca:b5:02:67:3b:a6:4b:f2:68:45:41:9b:6e:f8:7a:59:
ba:e5:c8:bc:cb:4e:b6:f8:28:6c:2a:0b:9a:87:72:a7:d8:3e:
7c:07:5e:31:a5:43:c5:cf:4b:42:b7:22:4d:50:d6:c4:eb:f8:
51:ca:a9:b1:8b:08:07:d1:e7:23:32:dc:f0:46:0b:0f:68:4b:
a7:55:51:ca:6c:1b:6b:c7:87:e4:fe:f9:c3:19:c1:98:c8:d5:
9a:f8:0c:fa:df:6d:1e:ad:74:ed:13:3c:02:5b:c8:4a:96:49:
0f:48:b0:db:0b:5c:8e:35:47:b8:ba:c7:68:34:68:fe:f6:89:
5d:27:73:ec:29:17:ac:95:3f:68:5d:3d:ed:75:e6:f4:10:6e:
1e:f4:95:3a:ee:b6:61:66:61:55:4b:fd:0e:09:39:73:89:4f:
d1:c1:35:9d:2a:82:24:6d:30:e9:5e:af:ae:f7:b2:00:8b:44:
04:3c:6f:ac:22:dd:37:2c:e0:5c:bd:38:a0:10:49:c3:86:7b:
be:4c:98:af:df:22:b1:d5:ce:5c:98:7c:2c:ef:f6:ae:37:7d:
a5:95:9e:fe:f1:77:83:c8:66:48:cf:0e:28:1f:f3:1c:b6:df:
19:66:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:54:54 2026 by rpki-client