Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137332e302f32342d3234203d3e20333939343836.roa
File: 3231372e3231362e3137332e302f32342d3234203d3e20333939343836.roa (raw, json)
Hash identifier: KfqMpUUWRvyr/7OmwYoJIxdjkM9Gk8s+OfU70XlNV/s=
Subject key identifier: C5:62:91:DC:25:46:64:EC:A3:63:99:58:29:62:FE:B7:6C:A9:06:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 711B5E6615F5773DC20A7BAB40ADED5D64C01CBE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137332e302f32342d3234203d3e20333939343836.roa
Signing time: Fri 09 Oct 2026 08:32:17 +0000
ROA not before: Fri 09 Oct 2026 08:27:17 +0000
ROA not after: Fri 08 Oct 2027 08:32:17 +0000
asID: 399486
IP address blocks: 217.216.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1b:5e:66:15:f5:77:3d:c2:0a:7b:ab:40:ad:ed:5d:64:c0:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 08:27:17 2026 GMT
Not After : Oct 8 08:32:17 2027 GMT
Subject: CN=C56291DC254664ECA36399582962FEB76CA9069A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:a4:e1:58:6e:33:ed:0f:77:bd:56:25:5d:
a5:17:37:0d:df:02:0b:48:af:fc:03:ad:c3:e1:58:
e0:9d:c0:4b:91:95:bb:ed:fa:ad:19:80:31:03:a1:
c2:ed:61:d1:51:bf:84:2f:75:76:3b:7c:da:7c:62:
c8:8a:ce:56:12:26:a9:94:49:bd:1a:16:38:72:cf:
d5:2e:06:c1:60:87:47:f3:ed:41:af:eb:80:16:9e:
4e:49:85:a6:2d:b5:77:66:9b:9b:94:ab:ba:a1:2c:
67:e4:44:34:1d:fc:4d:c5:76:5a:2e:b4:30:6c:51:
46:cb:72:16:20:ed:fc:90:bd:32:da:15:60:02:a7:
23:9c:2a:ee:54:46:04:00:c8:a8:37:03:95:e0:52:
b6:58:17:09:88:92:08:b1:8b:57:5e:8a:cf:d9:db:
fa:bc:52:5e:a2:47:dd:5a:06:94:f5:f3:af:dc:e3:
79:55:66:46:ce:8a:c7:d5:23:0c:e0:ef:0f:02:74:
28:51:e1:1f:ce:23:3e:43:d5:19:1c:e9:b2:e5:4f:
c8:2e:0f:43:b4:73:df:4a:47:82:4e:72:22:30:52:
52:43:52:af:3c:c1:d7:b5:f5:32:79:77:da:98:48:
7d:b0:14:87:db:7e:ff:33:af:3c:de:cd:fb:11:6a:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:91:DC:25:46:64:EC:A3:63:99:58:29:62:FE:B7:6C:A9:06:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137332e302f32342d3234203d3e20333939343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.173.0/24
Signature Algorithm: sha256WithRSAEncryption
76:20:90:d7:c2:73:29:7c:d7:cb:2f:82:0b:dd:d8:2c:95:47:
ed:e4:f4:87:b9:ff:bc:13:b6:76:00:a9:8b:6b:7f:59:02:7e:
6b:77:61:1a:46:e9:0a:4d:ba:d8:ca:37:da:7b:53:3b:bf:2d:
18:50:b6:04:56:8c:4c:99:08:bf:28:02:b7:47:3b:91:c8:62:
fd:7b:c1:81:a2:85:8d:0f:de:5f:b6:80:c3:4b:9b:a4:8d:b1:
db:04:fe:e9:ab:cb:c3:64:7d:7d:0a:e9:46:b9:f1:ae:fb:43:
21:d4:94:5f:5c:d7:8d:92:07:e6:89:d1:da:cf:54:de:30:ae:
ef:92:3f:9c:c7:47:f8:a8:18:16:e3:fd:a2:ab:be:d2:06:45:
6f:03:ba:79:1c:5f:7d:ff:07:68:ee:6c:fa:fc:38:a8:3d:fd:
1f:b1:c7:f0:89:bb:5e:17:0f:0b:b9:54:35:7f:89:0c:57:eb:
c5:ac:4a:71:90:04:83:2a:ab:56:21:cb:8c:97:6d:55:e8:5d:
9e:df:59:e0:a8:14:23:d7:4b:8c:81:25:16:91:15:d8:71:d2:
26:05:d7:9f:b0:8d:0f:85:6e:5f:7b:4d:6b:76:d9:ce:97:be:
2d:8f:89:80:54:31:aa:8d:15:f9:02:38:41:73:48:72:09:8f:
cc:8f:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:32 2026 by rpki-client