Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e203132303833.roa
File: 3231372e3231362e3138342e302f32312d3234203d3e203132303833.roa (raw, json)
Hash identifier: cAhlnFcQRo6J9WX2MFY62r9CqnueDQucG+2IjkdHcb0=
Subject key identifier: 4F:CE:98:93:8A:67:48:55:22:69:60:D1:0A:02:71:E1:9E:31:48:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AC160217263E12B2E9043922D58C4A7D692E19C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:48:46 +0000
ROA not before: Fri 10 Jul 2026 22:43:46 +0000
ROA not after: Fri 09 Jul 2027 22:48:46 +0000
asID: 12083
IP address blocks: 217.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c1:60:21:72:63:e1:2b:2e:90:43:92:2d:58:c4:a7:d6:92:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:43:46 2026 GMT
Not After : Jul 9 22:48:46 2027 GMT
Subject: CN=4FCE98938A674855226960D10A0271E19E3148E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:bd:6a:b5:3a:7d:c7:82:92:42:1e:0d:ea:
03:52:4d:1f:da:4d:b4:f6:05:54:51:3f:e1:8d:82:
ea:a6:1d:af:98:f3:d6:9f:f4:b3:b1:7b:24:cf:3d:
5b:a3:f9:25:7d:b2:02:ba:61:f6:fe:08:2f:f9:f7:
c1:7d:89:f7:c7:9c:58:da:16:7f:c9:c3:e1:fc:f3:
49:47:49:5f:95:e8:d6:e6:48:66:3d:0f:14:8a:ca:
a0:ee:ca:23:45:07:93:64:58:ce:0e:07:e5:1b:01:
0c:ec:30:17:61:cd:78:77:c7:08:3a:da:eb:02:c4:
65:56:62:a6:05:f4:ae:b3:89:aa:9c:5a:a8:e0:0d:
7b:57:cc:63:65:91:44:71:2c:b2:a1:61:e4:44:9d:
07:83:56:70:ff:ad:9a:5b:8e:bf:93:af:89:95:96:
1b:1b:48:c5:f7:3b:3c:60:19:20:56:78:32:58:e1:
a9:5e:9b:ce:92:58:92:4b:89:2b:6f:f1:0f:21:2e:
40:6e:61:49:e4:07:ac:27:8b:d1:91:2e:67:37:e6:
de:e2:aa:7c:f6:87:49:85:28:65:2a:74:3f:46:fc:
19:46:8c:31:94:84:2e:50:38:77:89:18:e9:fa:c7:
0a:e1:80:e1:14:6a:d1:46:12:13:87:2d:03:60:48:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:98:93:8A:67:48:55:22:69:60:D1:0A:02:71:E1:9E:31:48:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
30:36:9e:d5:f1:d9:86:c7:1f:40:53:9f:4e:70:ab:17:75:28:
6f:95:11:5e:3e:f3:93:44:47:38:d9:16:31:76:8d:74:8a:8d:
ee:80:12:d6:80:06:7b:9b:d6:4c:ff:a2:08:a9:c5:69:c6:a5:
6f:56:9c:53:3c:c3:bd:69:e8:07:88:6d:d0:52:87:ac:c5:02:
d0:b3:e9:e8:fe:c0:d9:fa:9b:4d:b0:8c:b0:c8:b3:a8:42:47:
5e:f0:23:a4:99:7e:1d:fb:9a:2e:a7:4a:ef:ee:09:fd:86:05:
76:9f:6c:a0:17:98:a3:2a:82:4a:82:63:9f:20:9e:28:77:c0:
29:93:6a:a5:65:1b:4b:64:b7:5b:19:ce:ac:e5:be:86:8e:aa:
54:e4:ed:da:e0:68:ab:df:35:a6:c9:94:9e:f0:f1:88:1f:43:
ea:10:07:60:03:14:d3:ec:a8:c2:ce:0b:76:fa:3b:74:bc:18:
07:38:11:1a:e5:4d:e2:f0:60:12:b7:1e:af:22:8a:c1:d1:87:
d8:c0:d3:67:f6:ee:3b:61:48:6d:f1:1b:6e:15:08:79:c1:0c:
94:f6:c0:1d:da:d6:22:cd:a7:a1:9b:94:89:1a:29:cf:44:f0:
27:fd:45:73:6b:7e:89:3d:b9:ea:be:cc:cb:be:c4:10:d2:76:
d8:dc:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:47 2026 by rpki-client