Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137382e302f32342d3234203d3e20313939373037.roa
File: 3231372e3231362e3137382e302f32342d3234203d3e20313939373037.roa (raw, json)
Hash identifier: ISU5xLy5y5/3wrhIuHioktQNYD9TE7k032/QlmGweHU=
Subject key identifier: 46:44:F3:1E:DA:67:3C:0A:24:D9:54:38:06:53:21:2B:EF:58:A3:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B15DA42D9F157DC52803D2D047A32C24F37AB6C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137382e302f32342d3234203d3e20313939373037.roa
Signing time: Mon 28 Sep 2026 07:36:49 +0000
ROA not before: Mon 28 Sep 2026 07:31:49 +0000
ROA not after: Mon 27 Sep 2027 07:36:49 +0000
asID: 199707
IP address blocks: 217.216.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:15:da:42:d9:f1:57:dc:52:80:3d:2d:04:7a:32:c2:4f:37:ab:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 07:31:49 2026 GMT
Not After : Sep 27 07:36:49 2027 GMT
Subject: CN=4644F31EDA673C0A24D954380653212BEF58A30A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:3a:af:18:b8:26:ec:97:b1:df:3a:e9:9a:
44:7a:0a:b3:d7:bc:3f:61:15:24:b9:2f:2f:9f:c8:
c4:a0:0f:82:70:15:c6:4f:e8:3d:2f:1c:1d:c0:c7:
e0:cf:c5:48:18:5e:e1:81:bf:a2:d4:e7:45:cc:9b:
cd:6c:18:7d:55:8c:84:ae:85:2e:66:df:be:0a:32:
fb:4a:b0:45:86:5c:92:a4:ab:39:22:bd:f3:dd:d5:
24:da:df:2a:18:5a:0b:89:fc:83:8d:50:80:b8:a9:
1a:94:04:20:08:54:d0:5b:8a:8a:fa:18:7a:9e:b9:
e2:dc:30:ce:65:af:de:98:04:5a:72:fe:d7:45:14:
fe:41:66:8a:2d:66:83:05:06:4a:b9:3d:f7:e0:7b:
70:b5:c2:f8:5c:9f:67:f1:f1:f8:6e:e4:fe:d2:cb:
7d:f6:48:c6:07:3a:68:d5:4c:98:bd:23:18:43:10:
46:fa:8b:bb:11:6f:ee:53:1a:f9:90:c9:ce:b9:7e:
92:57:09:2c:70:40:b2:23:57:c1:2f:a1:47:dc:91:
1a:9f:db:c2:de:b8:bb:02:6d:c6:b2:01:fe:f1:46:
4f:d4:21:03:d3:58:22:f0:78:9f:ba:9f:27:81:2d:
96:13:3e:5d:74:81:74:4f:5e:48:a9:0f:ea:9e:6e:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:44:F3:1E:DA:67:3C:0A:24:D9:54:38:06:53:21:2B:EF:58:A3:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137382e302f32342d3234203d3e20313939373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.178.0/24
Signature Algorithm: sha256WithRSAEncryption
46:73:30:ab:fb:40:75:bf:72:4a:eb:08:a3:52:f1:32:30:66:
a6:48:fc:8e:5a:42:b0:6a:9b:e3:00:a7:eb:de:9c:3f:94:3a:
65:c9:41:3a:e7:40:21:31:76:51:c9:df:cf:f3:db:f4:07:a6:
24:e1:5b:c4:48:ea:6c:b2:4d:0b:73:d4:2e:c8:0d:0e:22:e3:
63:f8:ad:ec:da:84:16:66:f2:12:95:e0:0a:7a:12:da:f6:56:
d8:40:8f:cc:0c:3e:26:88:eb:d6:28:49:3a:70:81:43:3f:c7:
92:23:b1:c8:5d:cc:68:2e:fc:3f:74:48:55:34:d5:f3:02:fe:
25:aa:d2:8d:40:57:85:b6:55:cf:83:45:fe:d3:c5:19:e9:d0:
47:6f:db:55:03:b1:0e:22:5f:3e:af:c8:4b:12:31:f3:4f:54:
cf:a2:f5:0c:57:2f:3d:e6:b2:80:11:9f:11:2f:7e:38:3e:25:
3b:ed:c9:a3:9b:f2:82:eb:28:4d:2d:0b:7d:27:96:d5:3b:6a:
4f:8f:2b:2d:22:b0:99:8a:55:58:e0:ac:71:87:19:e4:e3:26:
3d:cc:82:dc:83:1c:ee:d9:0e:4c:97:f4:1b:9e:e3:58:c0:05:
aa:dc:a8:12:a4:23:c8:2a:f8:00:99:26:d6:ec:70:c6:60:4d:
74:7a:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:30:42 2026 by rpki-client