Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138382e302f32332d3234203d3e20313439353133.roa
File: 3231372e3231362e3138382e302f32332d3234203d3e20313439353133.roa (raw, json)
Hash identifier: awX4cjixlArYmprOsEJfeyW+c4l+kvbYe2TVFj6Zifk=
Subject key identifier: 4C:54:DA:75:4E:3E:09:7E:66:54:49:2A:40:29:99:E7:1A:81:D1:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10D05B2BA8249142146415DE07C355E86964B317
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138382e302f32332d3234203d3e20313439353133.roa
Signing time: Mon 12 Oct 2026 09:45:56 +0000
ROA not before: Mon 12 Oct 2026 09:40:56 +0000
ROA not after: Mon 11 Oct 2027 09:45:56 +0000
asID: 149513
IP address blocks: 217.216.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d0:5b:2b:a8:24:91:42:14:64:15:de:07:c3:55:e8:69:64:b3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 12 09:40:56 2026 GMT
Not After : Oct 11 09:45:56 2027 GMT
Subject: CN=4C54DA754E3E097E6654492A402999E71A81D141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:5c:e3:29:a8:1f:a7:f2:21:42:b1:79:84:
a7:34:13:10:ca:d1:cb:15:1f:9f:e0:d1:34:a4:d6:
94:3e:7a:fa:6a:34:77:0f:52:58:6c:d4:21:01:77:
b4:0d:6a:29:86:21:f8:fe:10:59:b2:d6:4f:ba:f4:
50:10:1d:93:3a:e1:d2:9c:d5:6f:34:ac:f7:7c:1f:
74:ea:8e:fd:7a:43:c7:7c:03:4b:ba:97:84:77:1f:
d0:84:ae:b7:3b:6c:f1:69:19:29:7e:b2:45:84:17:
bd:76:b5:bd:08:41:f0:f1:51:f7:b0:ef:0d:6c:d4:
98:67:48:e3:1a:12:87:3b:77:9d:92:13:d5:e0:a8:
82:f8:2d:0c:7a:8e:3f:12:84:90:c9:7b:4c:ef:02:
c3:2a:51:d4:1e:e4:9f:ce:de:ab:0f:67:51:15:12:
a2:1a:ac:5d:80:4d:54:1b:1b:63:5a:db:ba:a8:75:
e5:15:d5:76:f6:bb:9d:52:93:c7:bf:69:8d:73:f1:
18:4e:d1:83:44:24:35:92:90:c9:82:07:2e:d7:bc:
9b:27:22:fb:c8:f0:ae:3e:43:04:79:df:c7:66:ee:
91:a5:e1:d3:79:9d:ca:b5:4c:3c:e0:fd:63:3a:7e:
a3:e9:57:18:71:f7:ae:36:51:b9:96:88:63:d2:f0:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:DA:75:4E:3E:09:7E:66:54:49:2A:40:29:99:E7:1A:81:D1:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138382e302f32332d3234203d3e20313439353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:49:f1:cc:87:40:d6:a9:a6:5b:ef:a9:0b:d1:0d:40:8a:35:
32:d3:f5:ef:3f:41:e3:2d:c1:66:5b:9a:f9:dd:00:17:95:4f:
c3:f3:59:09:ce:d3:c5:6a:6b:83:31:6f:00:da:39:b1:67:6c:
47:6b:49:2b:2b:ac:f4:b2:6c:23:38:89:84:99:89:60:8b:06:
19:c7:c1:66:c3:64:f5:8c:b9:c1:00:0c:2f:a7:16:ef:81:a2:
78:78:2d:4b:c5:2b:cf:59:ae:71:c2:ca:be:a7:4e:3d:c2:df:
a0:4f:39:2c:0c:ff:0a:14:bf:09:88:87:50:a9:c7:88:18:63:
11:8d:39:ff:bd:28:95:83:94:11:92:d6:23:f9:d4:07:49:0e:
2e:8f:46:dc:73:1f:82:20:f6:a0:c7:9a:83:f7:1f:0d:78:1f:
98:95:c6:10:7f:5f:b4:0c:be:57:dd:a9:5f:fd:06:2b:bd:a4:
88:14:68:a8:90:12:23:f2:70:59:45:9e:d9:92:d9:de:2d:be:
f3:e3:2a:3a:f5:c3:7b:e5:1b:ab:f8:52:d5:dd:4a:56:eb:54:
2c:31:fb:00:cb:01:70:b6:d0:f6:1c:45:a2:c9:7a:f4:3d:40:
ad:e7:6a:66:fe:73:84:a5:2a:6e:5e:c8:22:0c:4a:cc:7b:d7:
a5:48:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:48:54 2026 by rpki-client