Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ULxCTVLfXIds3TD3W1C0jk0OlYuLDMcnWzijk6lxYpY=
Subject key identifier: 1A:0D:88:4A:52:1D:9C:66:03:ED:D6:2D:78:79:CE:1B:C2:72:C8:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 537A4520036F99D46851238B4EF8DE965BE2D70B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20383334.roa
Signing time: Tue 30 Jun 2026 10:54:42 +0000
ROA not before: Tue 30 Jun 2026 10:49:42 +0000
ROA not after: Tue 29 Jun 2027 10:54:42 +0000
asID: 834
IP address blocks: 217.216.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7a:45:20:03:6f:99:d4:68:51:23:8b:4e:f8:de:96:5b:e2:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 10:49:42 2026 GMT
Not After : Jun 29 10:54:42 2027 GMT
Subject: CN=1A0D884A521D9C6603EDD62D7879CE1BC272C8DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:61:27:f1:9d:e1:8d:28:9d:2a:21:20:cb:
0e:b0:ab:68:d2:d6:47:c6:d1:4d:6b:25:70:52:67:
6d:01:ba:04:77:07:c2:1b:b2:41:7a:65:e6:6d:60:
0a:81:55:03:74:dd:0a:84:4a:f6:60:1c:d0:21:17:
52:e2:74:10:12:c1:d3:72:f5:ad:b9:5d:63:e0:c4:
1e:93:86:8c:b4:54:68:0a:ca:ca:48:7f:9d:26:e7:
4f:ad:d8:42:95:a6:9c:82:23:d9:df:3a:fe:32:59:
c8:d8:ce:ad:bc:63:bd:19:66:94:15:ea:28:ff:33:
eb:cf:bd:e7:fd:66:c5:9d:12:f1:64:3e:1b:2b:7d:
f2:18:bf:36:ad:81:62:cc:42:85:be:7a:e1:dc:3a:
92:b1:0e:b8:ff:34:73:05:fc:82:15:bd:2f:3f:c4:
46:e4:17:8f:08:50:a5:01:31:4c:43:20:fd:4b:df:
dc:1e:25:89:6d:a1:d3:94:25:8c:5b:81:ef:82:74:
bd:76:6d:e3:88:16:ca:ce:97:2a:18:85:c0:8b:23:
d1:76:32:9a:37:ff:b9:4c:a8:f9:c1:45:02:8b:bc:
3a:23:be:da:6f:df:c4:b0:a1:44:24:9b:3a:d3:65:
cf:6d:af:e6:89:1c:0d:16:c7:96:c1:1a:e8:34:16:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:88:4A:52:1D:9C:66:03:ED:D6:2D:78:79:CE:1B:C2:72:C8:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:df:ad:b6:f9:20:86:2b:23:a6:f9:64:53:59:84:6e:e3:a4:
81:eb:b9:70:4e:69:9a:38:f8:aa:3f:41:fc:4d:b9:c0:47:5e:
ad:d5:a5:42:30:29:78:35:4d:c4:0c:a7:a7:2f:e2:af:dd:2f:
06:6c:59:53:e4:d3:46:d7:06:f0:12:0f:30:54:10:4e:75:91:
f1:8a:3f:7e:1e:bc:1b:22:ce:52:a4:ae:6f:ef:ec:fe:63:16:
62:3e:1f:28:7a:a4:05:3a:dc:f6:b8:74:57:9c:19:40:1e:6f:
cc:2d:de:58:f7:b0:32:f7:3d:d5:9e:0b:06:ab:9f:dc:72:eb:
28:ac:86:16:4b:32:bc:b5:e6:10:d2:3a:51:e5:6e:07:c2:71:
1c:a4:aa:3a:42:88:f0:fd:b7:ac:02:0f:ca:dc:55:a6:9a:24:
de:11:c6:63:09:37:61:05:f4:fd:9c:d9:17:99:10:3e:99:55:
1b:34:9f:f1:16:f6:f7:ba:e5:e9:3d:f5:f4:09:6e:f7:55:94:
14:75:e6:93:67:57:32:1a:d6:11:f8:30:e6:41:e0:56:58:b1:
48:a3:19:86:8b:2f:1b:b8:3f:fa:18:0d:44:80:a1:7e:01:b1:
e7:74:7c:81:9d:0d:9a:8c:87:dc:68:06:23:30:51:65:bf:c7:
e4:0c:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:52 2026 by rpki-client