Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137372e302f32342d3234203d3e20323038393439.roa
File: 3231372e3231362e3137372e302f32342d3234203d3e20323038393439.roa (raw, json)
Hash identifier: e7hVPUScvz2yYxETDOvpvbEGcM+ed6O2IWFJhyyOSkw=
Subject key identifier: E0:39:57:35:24:BE:E4:66:CA:C4:B4:31:34:51:68:6C:1C:6A:06:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33A98D8FA98AEF868B8052E453B28E0C870A474B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137372e302f32342d3234203d3e20323038393439.roa
Signing time: Tue 29 Sep 2026 07:29:07 +0000
ROA not before: Tue 29 Sep 2026 07:24:07 +0000
ROA not after: Tue 28 Sep 2027 07:29:07 +0000
asID: 208949
IP address blocks: 217.216.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a9:8d:8f:a9:8a:ef:86:8b:80:52:e4:53:b2:8e:0c:87:0a:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:07 2026 GMT
Not After : Sep 28 07:29:07 2027 GMT
Subject: CN=E039573524BEE466CAC4B4313451686C1C6A0671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:9c:ea:dc:10:e0:4f:cb:7b:52:09:b3:97:
55:af:56:01:fe:c9:aa:5e:47:8b:05:52:cb:93:78:
99:4c:94:57:65:fe:8d:fe:74:45:a6:b0:84:27:84:
aa:f4:62:16:67:11:46:bf:3f:87:2e:e6:76:76:c3:
fc:17:88:c7:e5:d4:dc:62:b5:c0:8b:3d:7c:aa:39:
ec:c9:f4:b0:c7:fc:09:b7:7d:fc:84:90:05:b5:20:
be:0f:41:5e:b9:70:02:aa:ae:7c:dd:3a:6e:3c:8a:
31:a3:57:11:99:64:30:05:20:69:e4:5f:93:87:71:
2e:ac:eb:6d:e1:a7:01:f6:79:2c:6b:35:92:86:9d:
6a:48:c9:81:8a:cb:11:ed:79:89:e1:6a:c9:7d:a4:
c8:02:49:4d:79:80:3c:bf:1e:fd:0f:0d:79:79:c0:
07:7e:70:fc:88:7c:c9:33:9b:7c:93:f8:af:bb:40:
a7:ab:5e:0a:96:5e:fd:67:87:33:af:84:46:b1:fe:
70:b3:6a:00:15:85:9c:a3:fd:2a:c4:e2:c7:08:4f:
e5:59:d5:1e:4a:3d:72:62:a8:ef:2c:b3:24:a9:7d:
3f:fa:75:56:81:d2:4f:95:75:4e:7d:38:54:fe:2f:
b6:d1:2f:e9:75:c6:7b:cb:1c:03:ca:65:8a:d3:8e:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:57:35:24:BE:E4:66:CA:C4:B4:31:34:51:68:6C:1C:6A:06:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137372e302f32342d3234203d3e20323038393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:81:d2:49:47:ef:93:e2:88:28:ab:83:c8:01:97:8c:bb:6e:
21:d6:f4:6c:6d:6d:6e:e6:a1:b9:4f:0c:8a:a0:ff:29:71:61:
68:a8:01:c5:d7:9a:08:c8:67:fb:57:5f:2c:ba:f7:4a:29:eb:
0f:51:0b:0d:4d:c1:49:40:f9:85:c9:a1:e5:eb:59:01:16:7d:
b3:47:c7:3a:b9:0a:40:b3:71:8c:ea:b1:3e:40:d3:60:d3:a8:
9e:c5:70:f5:78:e0:a9:07:5a:30:07:b5:76:d4:2f:3a:3a:1a:
e7:9c:69:22:57:b7:77:9b:0e:68:ae:84:23:d8:3b:af:ef:27:
1b:6f:c8:a2:eb:90:11:6d:8a:72:d5:6e:dd:87:b0:17:c6:d9:
6d:25:c1:a2:93:89:7a:b0:b5:49:8e:b0:40:7f:a5:61:52:2d:
53:fa:7c:9a:78:f8:56:20:ac:b0:71:f8:27:1f:d1:36:6a:74:
4d:d3:ee:c4:2a:6d:6e:9e:38:c4:d4:29:cb:e0:da:c1:cc:b3:
9f:b5:36:74:24:93:e7:05:4e:86:83:df:62:19:f1:3d:13:df:
27:39:fa:61:50:00:1a:9e:bb:80:99:6d:e6:84:64:81:24:a4:
41:ce:08:fe:1c:da:16:50:74:54:57:9c:19:20:46:50:aa:5b:
21:0c:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:19 2026 by rpki-client