Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139312e302f32342d3234203d3e203439343533.roa
File: 3231372e3231362e3139312e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: tm6FwuWlWflfg/415FnpqyNLsUvIoKnPpgLTCTK/6yc=
Subject key identifier: 69:65:57:EF:E6:BC:D8:28:62:60:B8:40:16:9C:15:90:3C:F9:E7:52
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E072015375852CFB006F256BCB71D84D7C8DD55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139312e302f32342d3234203d3e203439343533.roa
Signing time: Wed 07 Oct 2026 11:17:28 +0000
ROA not before: Wed 07 Oct 2026 11:12:28 +0000
ROA not after: Wed 06 Oct 2027 11:17:28 +0000
asID: 49453
IP address blocks: 217.216.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:07:20:15:37:58:52:cf:b0:06:f2:56:bc:b7:1d:84:d7:c8:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 7 11:12:28 2026 GMT
Not After : Oct 6 11:17:28 2027 GMT
Subject: CN=696557EFE6BCD8286260B840169C15903CF9E752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:de:db:7f:ec:5c:21:04:fa:9d:c2:a4:e3:
c9:9f:bb:13:e9:f8:bd:a3:15:e3:f9:04:a1:ef:8f:
35:3a:05:7d:c1:bd:53:70:45:f3:1d:21:f2:1a:84:
0c:be:bb:98:e1:a5:e7:72:69:33:58:dc:91:65:54:
7a:1e:bc:9f:cf:fd:57:9a:d7:c8:6c:5e:bc:3d:f4:
1d:ee:e6:dd:a9:34:d2:b3:6d:73:a9:77:3e:eb:29:
30:75:4f:06:df:db:57:39:15:5e:cb:8a:35:9e:b1:
57:c3:cf:4c:96:6c:0f:3b:78:e2:88:9c:d6:8a:3a:
be:f9:b4:9e:8d:d6:8a:5f:9b:92:de:4d:5b:5b:2a:
51:89:f8:4d:2f:54:87:78:6d:c1:e1:ff:97:e3:5c:
12:93:cc:2a:1e:b0:47:ea:52:9a:32:b7:4d:35:95:
5b:e0:b1:d2:ab:0c:c4:a0:9f:8c:08:92:33:73:fb:
4b:be:89:dc:d7:4c:8a:7c:da:18:f2:db:1a:82:3a:
0d:59:26:a4:88:17:78:af:86:cd:65:68:bc:63:2b:
d2:36:1f:d5:56:11:76:83:16:38:5c:6e:c3:70:1a:
9b:4a:4a:f2:52:dd:29:9b:24:3b:24:72:ba:b1:3f:
83:33:7c:0e:c5:d5:5d:12:e2:9e:4c:92:41:06:e4:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:57:EF:E6:BC:D8:28:62:60:B8:40:16:9C:15:90:3C:F9:E7:52
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139312e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3d:48:ee:61:49:84:25:48:06:d8:79:ba:a7:81:64:39:91:
3d:6f:f8:27:a4:cd:de:a6:87:a8:de:b6:23:7e:bf:47:8a:b5:
46:50:86:f1:46:1f:d4:bf:be:6f:df:4f:0e:3e:74:4d:be:7e:
6c:7e:17:22:32:d7:4c:72:a6:4d:73:a4:2b:17:48:1c:49:e8:
f4:d2:9b:ff:7a:cb:25:16:f6:a6:5e:b8:23:85:e0:a6:03:bc:
6b:d4:a0:ef:33:1d:8d:7a:47:c4:e5:f4:08:2e:0f:9d:09:c4:
b3:1b:48:ee:46:38:68:9c:4c:52:0c:99:e0:2c:4a:de:46:34:
26:5f:40:cd:22:89:76:cb:04:66:e3:cb:9e:39:df:9a:8c:38:
f5:57:11:63:30:55:aa:32:a7:49:ec:58:7b:99:9c:f8:fb:99:
6a:e9:9c:5a:79:c6:d8:10:d8:25:c9:2e:aa:13:c4:53:92:70:
71:7a:2a:2f:a9:c9:e4:27:1f:62:57:31:40:b3:57:8b:82:51:
71:a5:29:97:ba:e8:3a:3b:02:08:d4:b1:fd:76:e9:3a:68:0b:
28:e1:40:18:dd:f9:5c:27:bc:9b:d3:ae:8b:59:13:c1:94:09:
fe:db:72:6d:1c:0a:a4:3f:df:22:1c:c9:08:10:48:ae:ba:3a:
b5:a0:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:23 2026 by rpki-client