Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20323032373336.roa
File: 3231372e3231362e3230382e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier: A1NYHc6wxzQesyDvHrQA0bTo+vCWFu4wjygVsCRwg6o=
Subject key identifier: 68:CA:91:D8:4D:55:84:DF:69:2A:73:F0:1F:08:8C:FD:C8:BE:0C:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5DA06D18B31D81995EE0CAE48BC34DC69F210ECA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20323032373336.roa
Signing time: Mon 03 Aug 2026 15:07:23 +0000
ROA not before: Mon 03 Aug 2026 15:02:23 +0000
ROA not after: Mon 02 Aug 2027 15:07:23 +0000
asID: 202736
IP address blocks: 217.216.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a0:6d:18:b3:1d:81:99:5e:e0:ca:e4:8b:c3:4d:c6:9f:21:0e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 3 15:02:23 2026 GMT
Not After : Aug 2 15:07:23 2027 GMT
Subject: CN=68CA91D84D5584DF692A73F01F088CFDC8BE0C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:55:58:da:31:e4:07:44:06:73:5e:cb:d2:
2a:99:3d:ae:9d:dd:ec:b0:c7:b1:d5:c0:83:7a:3b:
df:2e:e6:ae:97:18:fc:35:c7:d0:55:21:8f:fa:3a:
5e:bf:4e:4f:58:61:2d:af:8c:2f:2e:81:ad:fc:8c:
07:15:65:d6:08:85:53:ea:60:fd:0c:e1:ec:79:85:
29:d3:05:29:ff:8f:9d:e0:29:76:c2:00:5d:c5:98:
5f:8a:c7:e2:25:b7:aa:c5:91:ac:e2:2f:5d:d5:97:
66:55:b6:29:55:cf:ed:af:98:1f:8e:0c:5d:27:94:
6c:bb:28:67:64:b9:cc:7f:0c:e7:5f:a9:56:8d:ef:
b6:f4:0a:1b:ee:00:bb:ad:04:63:e4:21:71:80:04:
05:a1:92:e4:91:65:0c:f0:31:23:f2:5a:af:d4:0a:
81:9f:ed:22:f6:07:4c:57:27:39:c3:6b:1f:e3:ed:
ef:66:d5:cb:f8:c0:c6:51:c0:ca:13:47:19:aa:fa:
80:05:9b:bc:af:c4:11:24:04:07:52:1d:d7:70:dd:
03:a7:2b:dc:7e:f0:3d:0e:d3:2a:8d:4d:62:8d:8a:
83:ef:04:43:8a:23:05:62:7f:cd:29:9e:ab:f2:2c:
6a:8d:c7:dc:f9:74:b4:91:61:3b:d3:27:56:fd:88:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:91:D8:4D:55:84:DF:69:2A:73:F0:1F:08:8C:FD:C8:BE:0C:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20323032373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2a:9e:b2:61:d5:2e:24:00:d1:07:72:bd:83:d5:18:cc:68:
52:28:e1:67:98:41:ef:60:8a:98:bc:38:49:c9:75:2f:32:45:
1c:b7:8d:3d:79:fd:1b:b9:44:21:4f:76:fe:ec:b1:69:46:64:
ae:88:2a:ab:a7:d4:5f:d3:8f:a7:26:68:51:fb:8d:52:81:b1:
5f:3c:56:17:77:67:40:e8:5d:ce:e5:2a:7a:d4:46:fb:62:83:
f2:b5:9b:70:2e:75:fa:1b:9d:65:60:50:3c:f0:b4:3f:bd:16:
55:4e:cb:fb:3e:e2:f9:52:b4:d8:96:c3:10:b5:b1:c4:9f:10:
cb:3b:84:f5:e6:02:e3:61:b3:e9:db:9c:ea:cb:29:27:81:d5:
5e:ab:f6:81:4a:27:6a:4f:03:9e:3e:09:e7:ab:73:50:c2:8c:
b1:40:35:c4:bd:b3:a3:04:9d:1d:b8:52:35:4e:1d:46:bf:04:
37:62:5c:e8:aa:69:e0:d9:68:33:fe:7d:9d:25:71:f3:4e:e3:
e7:7d:b8:df:dd:05:d9:83:93:ce:0a:1b:02:7b:e6:84:2b:89:
e7:42:54:6d:3e:c3:8d:18:c5:b4:1f:62:8c:4c:a5:cc:71:54:
2c:e7:eb:5a:53:fc:b0:71:82:4d:95:d6:ca:f7:05:d0:b9:8c:
79:d6:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:03:50 2026 by rpki-client