Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20313939313836.roa
File: 3231372e3231362e3231342e302f32342d3234203d3e20313939313836.roa (raw, json)
Hash identifier: Xc4Wkug1DA6OrMfaYDoBDZl0sBl6WcN+w0dBtQbS4/M=
Subject key identifier: 71:54:63:B5:3C:5F:E9:CF:1D:27:EE:9A:E7:A7:EB:BA:B2:79:6A:B7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B0DCE97F67517FEE1D4407452A98C1A9E8FBD81
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20313939313836.roa
Signing time: Thu 14 May 2026 21:45:01 +0000
ROA not before: Thu 14 May 2026 21:40:01 +0000
ROA not after: Thu 13 May 2027 21:45:01 +0000
asID: 199186
IP address blocks: 217.216.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0d:ce:97:f6:75:17:fe:e1:d4:40:74:52:a9:8c:1a:9e:8f:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 14 21:40:01 2026 GMT
Not After : May 13 21:45:01 2027 GMT
Subject: CN=715463B53C5FE9CF1D27EE9AE7A7EBBAB2796AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:b0:0d:99:35:46:63:b5:29:e0:fe:a2:d5:
12:85:e6:30:73:7a:c1:40:d5:fc:a5:10:fd:9e:ee:
39:5a:d5:77:52:d4:78:a4:d3:44:cf:1d:df:f6:56:
12:bc:81:31:b0:ff:e9:79:94:52:a6:5b:5b:80:07:
72:b0:4f:82:f7:94:a5:0a:03:09:fe:22:e0:35:84:
fd:4c:b2:59:9c:f8:ff:4d:06:79:59:22:8c:e8:61:
de:1a:e1:74:81:4f:9b:ab:1c:1c:49:62:82:45:95:
32:d7:31:17:74:03:26:05:eb:eb:41:00:7f:9d:6a:
d1:e0:79:9f:79:07:73:38:a5:cb:43:b2:05:61:9a:
bf:0f:27:2d:f1:2d:b6:d6:16:7a:61:e1:86:99:d5:
d9:4a:e4:a4:06:f5:37:2f:9c:42:c1:60:1a:16:7e:
bd:b6:eb:a1:5f:35:ef:81:f3:3e:96:98:7a:72:0e:
64:51:97:f4:a0:7f:9c:76:d5:d0:fb:25:04:b4:da:
dc:be:a0:32:b5:eb:21:cf:3b:55:51:bf:83:c1:59:
4f:96:a7:e1:28:d7:ad:8d:ec:29:a1:24:62:f7:65:
18:22:90:6b:d1:9c:21:81:23:39:6d:fe:b4:9c:1d:
89:57:6c:e9:9c:95:b5:85:38:06:f7:21:cf:89:25:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:63:B5:3C:5F:E9:CF:1D:27:EE:9A:E7:A7:EB:BA:B2:79:6A:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20313939313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:18:4f:c3:ab:ea:f0:33:7e:1c:a9:97:91:d7:48:cc:f9:52:
58:bf:96:71:91:b2:f6:fe:b0:c2:c3:37:18:ed:63:7f:cc:01:
bf:6c:40:10:b0:9c:71:3b:b9:a0:94:c5:30:f3:8b:41:f6:4d:
dd:78:52:1b:c8:60:44:51:db:a3:09:36:a3:41:df:93:b5:e5:
f2:ab:5c:e2:f3:0f:2d:55:e6:2d:4c:6b:80:d2:db:32:17:ea:
77:04:e0:a7:ef:c3:8c:22:2d:71:0e:f6:f2:3b:b2:f1:ea:54:
0a:0b:e9:61:52:17:8e:bb:85:bd:26:89:5d:66:68:1e:c2:37:
a9:36:a8:d6:99:c6:2c:f5:cb:08:35:d9:15:0f:3b:a0:80:46:
42:c7:9e:a4:83:20:21:20:e1:80:34:66:3d:3f:bb:9d:a5:ac:
87:5a:4c:cd:26:27:a4:dc:18:5a:6f:88:c9:a8:1c:70:d5:ae:
e4:c0:08:47:08:b3:65:e2:0b:96:2c:11:8b:87:e1:b1:8a:1d:
e1:6b:66:60:55:4d:f5:b8:9c:d5:74:13:67:a7:1d:df:1a:80:
d4:1d:d0:06:d9:27:0b:91:10:b4:bd:96:7e:27:e7:6a:2c:90:
de:cc:41:ce:a2:2a:32:36:a8:dc:42:aa:38:66:8d:bf:e9:36:
02:90:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:59 2026 by rpki-client