Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sbXPIadX9BDLN/05WgFbWPcWarzMVgRjXKka3bpvuqM=
Subject key identifier: 2E:7F:F5:F7:4E:1C:67:64:37:6B:8A:A9:03:F7:97:A3:86:0E:87:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10C633135237A00D4553B0F3E0B5947F13352CE2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e20383334.roa
Signing time: Sat 17 Oct 2026 11:36:57 +0000
ROA not before: Sat 17 Oct 2026 11:31:57 +0000
ROA not after: Sat 16 Oct 2027 11:36:57 +0000
asID: 834
IP address blocks: 217.216.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c6:33:13:52:37:a0:0d:45:53:b0:f3:e0:b5:94:7f:13:35:2c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 11:31:57 2026 GMT
Not After : Oct 16 11:36:57 2027 GMT
Subject: CN=2E7FF5F74E1C6764376B8AA903F797A3860E872D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:0b:b3:cb:58:b3:ae:c3:bb:ae:41:31:58:
c9:59:a4:6e:c4:da:41:d4:f1:1f:70:37:e2:b5:cb:
c9:62:48:9d:20:b3:1a:66:73:41:ff:e6:7b:7a:9c:
52:e7:c3:91:ed:27:27:59:82:f5:fd:0b:60:2d:53:
d6:55:81:9e:87:81:49:75:0a:da:49:48:a9:f7:ad:
fe:2e:ca:42:f8:34:0e:27:6b:71:f4:87:8e:3a:4e:
83:f2:c7:3a:92:27:d4:97:a9:09:ff:8a:5b:e7:fc:
b6:05:16:e6:78:44:0c:45:20:f9:d8:29:b7:68:c4:
90:9d:c6:d2:90:b6:5e:25:d9:e9:c0:64:15:3b:56:
7e:1d:80:36:14:43:88:c2:34:68:20:bb:29:51:14:
50:7e:4f:1b:80:f6:e2:f7:4e:ee:16:36:33:52:ee:
76:2a:38:fa:71:75:e3:69:30:b9:88:60:bc:e4:fc:
2a:96:ef:15:e6:59:f1:a3:1b:be:f2:46:18:13:34:
90:bd:61:7f:12:40:dd:30:8b:49:c1:95:37:a2:5c:
e0:2c:09:51:d4:54:3a:0f:38:dc:15:28:2e:92:0d:
c4:a9:cf:f8:a4:c0:4d:50:32:b7:b2:98:39:a4:b1:
e0:ff:08:8d:63:2b:98:87:06:31:ea:cc:44:03:cd:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:F5:F7:4E:1C:67:64:37:6B:8A:A9:03:F7:97:A3:86:0E:87:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:25:ff:2b:16:b3:1d:9e:b1:e4:bb:f7:a7:5a:cd:0a:40:4f:
6e:08:6e:a2:b0:6d:4b:27:a7:9c:5b:1d:a7:5c:ba:aa:7d:12:
ca:8b:1e:88:0f:7d:e5:52:9a:7c:d8:67:ae:86:c0:29:2b:5f:
30:e5:12:ec:a4:8b:82:ab:be:fd:3f:73:65:39:18:48:16:eb:
e6:12:02:0d:ff:1d:58:14:e2:62:0c:c6:63:67:ef:f7:4f:60:
21:f2:7d:8b:e9:c6:08:b0:bf:fe:16:31:54:55:eb:0a:3a:15:
47:12:bd:cf:3d:05:a6:db:e8:bb:90:84:7d:8a:f6:77:4f:89:
3c:4c:b7:f5:4c:e6:c1:0c:4f:1d:3f:39:95:a8:aa:f8:c8:ef:
09:45:e0:3d:a2:87:fe:f4:c9:e8:c5:24:1e:32:b6:3e:a2:f3:
81:64:82:73:ac:1d:8c:fb:e4:c8:70:6c:8b:6a:49:ef:dd:91:
9d:5c:da:91:02:80:08:bc:6d:c9:06:7a:3e:27:32:55:a2:b8:
d3:87:4f:a2:78:02:ea:4e:b8:bc:3e:60:5c:4d:61:59:90:07:
9f:a5:35:1d:c5:9a:f9:52:2b:06:8a:6b:03:e6:6a:c4:39:f1:
ab:a2:1a:0f:6f:b4:97:cf:c9:a1:e6:64:da:8d:64:dd:be:eb:
5e:3e:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:11:59 2026 by rpki-client