Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20313938303837.roa
File: 3231372e3231362e3231342e302f32342d3234203d3e20313938303837.roa (raw, json)
Hash identifier: KRle0eSi7TXMwCknPvUN81a+ztR8JG44gnlFSELtYLU=
Subject key identifier: E9:B4:15:F6:7B:20:71:84:4A:7A:4F:71:D2:5E:0C:1C:6F:EB:33:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 799FC922A9A814621875317AE73F55F1E1ECD727
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20313938303837.roa
Signing time: Wed 06 May 2026 11:13:42 +0000
ROA not before: Wed 06 May 2026 11:08:42 +0000
ROA not after: Wed 05 May 2027 11:13:42 +0000
asID: 198087
IP address blocks: 217.216.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 13:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9f:c9:22:a9:a8:14:62:18:75:31:7a:e7:3f:55:f1:e1:ec:d7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 6 11:08:42 2026 GMT
Not After : May 5 11:13:42 2027 GMT
Subject: CN=E9B415F67B2071844A7A4F71D25E0C1C6FEB33AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:5e:f1:86:dd:27:24:39:6b:e9:c0:a5:95:
22:d8:98:bb:31:f5:be:e1:37:8a:f5:1d:cf:9b:37:
b1:de:49:2d:90:1e:86:66:38:3f:e0:ae:34:06:b2:
40:dd:a8:41:2e:d6:27:a4:2e:58:89:f4:8a:b6:1e:
69:c8:ec:65:de:53:d7:84:d2:f6:37:b2:ba:14:6b:
c6:08:a5:5a:42:16:46:20:cd:38:c3:69:34:e2:15:
42:b8:40:37:49:6e:ab:31:b4:cd:45:8a:b3:10:c0:
3d:35:c7:2d:0b:e3:f0:19:61:f4:f7:0c:a5:4a:9f:
00:43:1b:a1:0d:ef:f7:fb:54:43:a5:c3:75:0f:b6:
c3:07:72:c7:82:18:cd:3b:eb:50:8d:da:19:77:ad:
a7:36:bf:ea:7b:a2:6c:58:13:0d:f1:26:a9:3c:43:
6e:78:41:84:9f:d8:5d:d0:82:be:bf:54:2a:60:64:
d6:06:54:27:98:2f:c1:eb:f8:8b:7d:25:da:af:aa:
a3:12:64:3a:b7:55:58:5e:89:7e:a1:06:7d:5a:3e:
1b:8c:64:8b:5c:01:f4:c6:4d:bc:f7:b2:be:d1:1b:
93:cc:b2:83:56:bd:3d:d2:2d:9c:ba:a7:a4:1d:e8:
79:e5:cc:c2:ce:c3:3b:c6:ed:2d:42:ef:44:15:97:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:15:F6:7B:20:71:84:4A:7A:4F:71:D2:5E:0C:1C:6F:EB:33:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20313938303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
88:97:27:8c:a7:dc:07:4b:6d:18:c1:71:c8:d5:3f:72:10:16:
68:b0:ce:38:e4:07:33:ba:e8:51:67:28:ac:5f:93:f8:07:88:
ff:5f:51:e1:7c:9f:39:61:b1:2e:8e:df:de:28:14:17:35:66:
e9:2f:43:6e:18:04:22:c8:60:9a:ff:ee:df:91:69:71:99:db:
da:11:4a:05:5a:7f:86:79:7e:ea:c9:e3:1e:4a:cd:a0:85:44:
3e:64:ae:d0:df:1b:fb:68:ab:04:d8:a9:29:31:0b:d7:8d:50:
78:71:92:6e:f1:18:46:04:a8:e2:9b:af:ff:03:a0:5e:89:af:
78:f2:02:95:e7:8a:de:89:d4:b1:9f:8f:b3:bb:06:49:ea:ff:
4c:98:86:39:49:2a:1f:3a:81:62:9b:d9:b6:c7:57:23:d0:5e:
63:45:98:01:0a:1e:b0:03:08:cc:71:ee:99:7b:68:be:a7:b1:
b2:bb:5f:a0:4a:2e:ea:f9:c5:d8:63:af:7f:d7:00:f2:37:a2:
eb:ac:17:42:b6:01:f7:1d:8d:39:c2:99:01:78:b3:04:b6:97:
79:fc:e3:93:aa:58:18:5b:1c:5a:96:bb:58:02:20:8b:e2:da:
e1:92:c9:78:02:28:92:ef:4c:f9:ad:50:45:3b:b9:85:c0:97:
bd:ef:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:37:56 2026 by rpki-client