Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137342e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4uWa4hc0lxLm4edR4bycM7mlD4ILHS9HcF0fafX/SnA=
Subject key identifier: B7:AA:9F:B9:4D:A5:49:03:78:C1:FB:FB:B5:9A:38:76:60:A3:14:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 638C88812A3D44AB41623000466D5AA3707E3948
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137342e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:40:46 +0000
ROA not before: Sat 14 Nov 2026 18:35:46 +0000
ROA not after: Sat 13 Nov 2027 18:40:46 +0000
asID: 834
IP address blocks: 217.216.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8c:88:81:2a:3d:44:ab:41:62:30:00:46:6d:5a:a3:70:7e:39:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 18:35:46 2026 GMT
Not After : Nov 13 18:40:46 2027 GMT
Subject: CN=B7AA9FB94DA5490378C1FBFBB59A387660A31489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:91:53:bf:54:9a:21:01:d9:f5:63:31:85:
0e:af:fe:2c:d0:3e:ad:97:b3:56:a4:dc:fe:87:5c:
6b:ec:f7:2c:bc:38:1f:39:a9:63:37:c3:38:87:51:
f8:dd:75:c6:5a:bd:d0:75:d9:f5:d4:d5:62:c9:01:
01:0d:ea:93:26:c5:53:07:04:1f:19:63:9d:ce:4d:
17:51:ff:9d:6a:f8:03:53:7b:6f:20:fc:61:3f:3c:
dc:5d:90:17:56:c3:13:93:e6:ef:44:4a:55:72:db:
f6:bd:ec:b1:26:48:f3:f5:1f:e0:f4:57:70:10:56:
37:9d:b8:3a:bb:17:88:91:c3:31:b1:37:68:f1:df:
c2:84:bf:e0:b2:26:f4:ed:d1:97:f9:2d:2f:d2:d9:
8e:4a:60:93:17:f0:a2:28:2a:b1:4f:56:58:86:8d:
4d:b9:03:94:fe:74:34:ba:7e:7c:eb:ec:44:b2:e5:
57:af:49:db:f4:38:df:09:54:af:bd:ac:6d:da:3b:
5e:51:be:d6:c4:63:b2:b1:6e:a3:d9:44:ec:48:fe:
79:78:12:09:6f:1a:35:d3:31:fa:c5:60:8f:cd:85:
9a:ad:48:1d:c1:dd:f4:e0:ce:4a:2c:b1:06:af:27:
a6:45:de:b4:dc:ac:22:39:1d:7d:32:ec:21:a3:3c:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AA:9F:B9:4D:A5:49:03:78:C1:FB:FB:B5:9A:38:76:60:A3:14:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7c:a3:78:6b:7c:12:98:ae:b7:d1:16:33:1b:12:18:18:f6:
c3:a8:05:1b:6e:7a:41:db:8b:5c:1d:9d:11:eb:19:84:c6:98:
a6:fb:60:81:e0:1f:84:7e:3e:31:78:0b:78:12:85:53:fc:97:
9c:82:f1:66:73:82:ca:5b:92:64:27:05:8d:2d:87:e2:73:bd:
92:e0:e9:66:11:26:51:2f:b1:69:ce:c1:8a:7c:b7:c6:c2:45:
0d:50:64:29:10:bd:cb:58:60:46:89:53:c0:dd:52:be:d2:94:
08:df:f4:9b:93:92:a7:f8:91:d6:8b:d6:ed:63:37:d0:3f:ca:
58:b6:db:f5:0e:ad:0c:8c:ab:c4:68:55:de:77:73:e6:7c:e9:
ab:b6:43:bf:08:fb:e8:ac:bf:e0:78:cd:98:ce:30:b9:f7:82:
7a:a3:f4:77:88:8a:4c:61:af:fa:13:96:14:b7:70:9d:26:7c:
6a:11:3f:75:2a:02:76:99:3b:6e:bd:d5:b7:34:24:58:22:5a:
24:8d:c3:1b:86:78:90:b0:8b:36:cf:ac:81:59:5d:2b:8b:66:
3d:7a:cf:43:77:b4:af:5a:b4:e6:f9:fa:96:0f:2a:92:6f:3d:
41:c5:81:6a:2c:6f:16:f7:fa:b2:8c:58:d3:68:72:7a:11:34:
e7:9e:9c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:50:04 2026 by rpki-client