Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3138342e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: KDTJ4BTo0aiaiivknaJ5UH7ITPSP5dUwohEvseXMQy4=
Subject key identifier: 59:A1:6A:6A:6C:CF:44:0F:02:79:5D:6B:89:99:A0:AA:6B:DD:BC:E3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26F836A68B487BB41DBD176A6486DB82D5041ACD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32342d3234203d3e20323138393130.roa
Signing time: Tue 06 Oct 2026 12:09:03 +0000
ROA not before: Tue 06 Oct 2026 12:04:03 +0000
ROA not after: Tue 05 Oct 2027 12:09:03 +0000
asID: 218910
IP address blocks: 217.216.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f8:36:a6:8b:48:7b:b4:1d:bd:17:6a:64:86:db:82:d5:04:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 12:04:03 2026 GMT
Not After : Oct 5 12:09:03 2027 GMT
Subject: CN=59A16A6A6CCF440F02795D6B8999A0AA6BDDBCE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:03:de:ac:e9:66:96:6a:a6:fd:94:f0:6c:
06:0a:40:10:c6:19:39:f7:53:b4:71:91:53:b9:e1:
16:56:42:84:84:55:ad:58:c1:17:30:ce:8f:14:07:
9c:41:14:eb:40:0e:08:1a:26:f3:74:79:41:31:80:
5d:96:13:bf:7b:a2:5e:cc:77:14:0e:aa:22:90:69:
cd:4b:8c:b4:61:50:ae:33:68:9d:94:9e:0f:7d:4b:
7e:30:05:be:80:36:64:35:68:76:10:c1:7e:c9:db:
3b:e8:98:fd:0c:84:9a:75:ec:24:db:a1:b3:a4:6c:
17:b6:2a:62:e9:69:28:54:32:54:0e:79:46:25:39:
09:2c:ca:00:0a:d3:3f:15:84:23:64:86:2c:42:d6:
ad:6d:86:1f:f5:2b:c8:78:39:29:06:c9:56:1c:85:
40:e0:5e:f5:33:44:dc:7a:eb:22:82:29:44:87:cb:
d6:b0:c4:84:3e:d6:6b:5d:ab:33:37:8a:97:0c:4d:
b6:05:c8:bb:cb:37:60:b5:b4:fd:6e:f0:6b:52:42:
39:98:de:cf:20:94:3d:be:9b:cf:a6:e3:39:02:e6:
c5:ee:c1:8e:47:69:9c:d8:2f:b8:e7:41:dd:04:39:
d4:05:ea:10:cf:3b:aa:f1:eb:34:85:99:c0:83:af:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:6A:6A:6C:CF:44:0F:02:79:5D:6B:89:99:A0:AA:6B:DD:BC:E3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
82:12:e8:b2:cd:eb:48:a7:4c:cb:c5:24:5c:0f:6b:09:f8:9b:
5a:cf:a8:d0:f7:2b:dd:69:eb:8b:a5:e4:98:ed:c4:f1:ba:6c:
5b:5b:f7:09:38:b0:95:f1:92:c6:50:78:8a:fc:1a:81:5b:b8:
0a:a1:99:99:52:d9:45:29:7a:4d:fd:98:45:d9:59:37:be:d9:
5b:4a:b3:5a:84:7a:6c:35:38:66:10:8a:8e:fd:51:f7:ba:0e:
ce:ee:58:d9:ee:b7:22:38:2d:2e:ad:32:e4:49:9b:45:af:dc:
da:ed:93:a2:df:cc:e9:af:f9:f4:7d:05:7e:d4:46:b6:c9:07:
40:ef:99:70:62:bc:9d:12:d1:c2:46:2d:12:50:d9:3f:55:7a:
20:46:13:b7:8e:e5:6f:aa:b3:25:5b:d0:fd:0c:9b:52:93:2d:
72:b9:3c:0a:01:94:94:88:bd:56:b9:d9:65:c7:fc:f5:cb:fd:
f8:56:3a:cf:04:9a:06:33:38:69:cb:13:f1:e8:a7:dd:7e:4f:
f8:4b:41:4b:57:0c:43:19:e4:a1:65:c6:29:c5:94:89:e7:98:
d9:40:89:c2:52:7b:7a:02:76:0b:56:37:1b:3b:ad:d5:42:9f:
dd:0c:be:07:e2:99:a8:a2:70:6e:cc:54:10:91:ca:05:7b:a3:
47:f8:f4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:48:32 2026 by rpki-client