Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137342e302f32342d3234203d3e20313432343832.roa
File: 3231372e3231362e3137342e302f32342d3234203d3e20313432343832.roa (raw, json)
Hash identifier: PSvdwVvF0hPboRUAZZ+kQSdTMUN0DOlVdpxMwuWo/U8=
Subject key identifier: 45:3D:8B:28:E7:03:78:FC:49:1F:15:C5:4E:4A:71:72:30:46:1B:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19693926EED0D4ED558ED4CE2B3D27A178B83E89
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137342e302f32342d3234203d3e20313432343832.roa
Signing time: Thu 15 Oct 2026 12:34:33 +0000
ROA not before: Thu 15 Oct 2026 12:29:33 +0000
ROA not after: Thu 14 Oct 2027 12:34:33 +0000
asID: 142482
IP address blocks: 217.216.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:69:39:26:ee:d0:d4:ed:55:8e:d4:ce:2b:3d:27:a1:78:b8:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 12:29:33 2026 GMT
Not After : Oct 14 12:34:33 2027 GMT
Subject: CN=453D8B28E70378FC491F15C54E4A717230461B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:37:44:d8:75:4d:9a:ba:e2:fe:5f:b7:22:
b0:46:dc:c3:c8:1d:e9:04:40:a9:a3:9d:9b:cc:9e:
d7:c9:63:71:af:ea:74:ce:06:3c:10:a2:fe:30:8f:
77:6e:ce:79:30:9c:f4:ab:42:d0:db:14:ac:52:d9:
4c:5b:dd:3e:bf:83:68:36:2a:27:45:f2:84:7b:3f:
7e:8b:4e:59:bf:09:ad:bb:8f:ce:6b:52:dd:0c:75:
6c:b9:69:3a:25:52:ab:40:39:e0:a8:f1:5f:6c:fc:
9b:5f:09:58:30:81:7e:f5:98:13:e8:f0:6a:24:aa:
10:87:ca:50:a1:b6:72:f9:9b:9a:f2:48:96:ce:b5:
ac:a3:cb:1c:e0:4a:13:df:4b:87:91:f6:24:29:09:
67:1a:ca:6a:f6:1f:b9:8d:d3:69:1c:4b:0e:0d:65:
fe:77:c5:31:09:8a:8a:37:2a:2a:36:e1:69:e8:41:
b8:71:75:ee:85:65:e5:08:34:a3:a5:2b:dd:bb:47:
d2:97:5d:35:f4:94:a3:9f:4c:40:0c:94:e8:3a:28:
1c:f8:32:f4:b7:ad:27:71:72:05:63:11:63:d4:b0:
8f:f5:5c:c0:33:77:c5:5d:12:d5:2a:2c:45:d7:11:
3c:0d:50:98:3b:22:b6:37:e7:1d:70:44:69:e6:d3:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3D:8B:28:E7:03:78:FC:49:1F:15:C5:4E:4A:71:72:30:46:1B:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137342e302f32342d3234203d3e20313432343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:46:47:ac:4d:cb:1b:fb:41:ad:e8:4c:21:cb:76:4e:3e:90:
5d:d5:a0:e8:8b:76:23:25:ad:89:4d:c6:94:82:83:fb:7c:a4:
7d:70:4c:bf:aa:10:ad:87:ac:3b:0c:78:1c:59:41:df:35:d9:
09:d4:a7:ba:7f:07:b6:9a:0d:41:de:9b:11:f6:32:62:04:aa:
f4:fe:cd:3a:e1:47:cb:e6:48:c4:45:b4:f6:6c:b5:1a:8f:c4:
30:72:20:84:cd:79:99:66:cf:27:e8:1d:6e:80:59:d7:f0:53:
32:73:47:fc:2c:4f:11:c9:3b:bf:53:bc:fe:46:eb:78:48:50:
82:53:71:4e:b9:65:2d:91:fc:d1:68:34:d9:b6:0d:90:74:1c:
4c:38:c9:79:32:af:ca:d7:d6:aa:2f:15:8f:69:0c:9c:a2:60:
f3:44:ec:44:74:b8:b1:a8:69:66:18:a0:9e:01:f7:65:83:95:
8c:14:cb:89:c2:2a:0d:1c:05:09:c5:64:25:71:fd:f0:0e:56:
7a:c6:d7:ff:ae:f9:02:79:ff:7f:91:e4:35:ba:b1:9a:06:50:
73:0e:b7:50:c1:f8:24:3b:0f:b6:ca:ad:7f:75:4a:18:31:d2:
ee:83:4f:e0:71:85:ff:7f:93:c3:c6:f2:39:67:17:fe:b6:a2:
56:a7:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:19 2026 by rpki-client