Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231352e302f32342d3234203d3e203434353932.roa
File: 3231372e3231362e3231352e302f32342d3234203d3e203434353932.roa (raw, json)
Hash identifier: 2KoIP9gVaiTO2+i2mHddr4T5fKKO4Io4VZA/M2FpDRA=
Subject key identifier: C4:E9:AF:0D:CE:58:D0:80:56:5C:4F:B4:60:D1:ED:43:13:35:47:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 579F52532AE389C781942B4EBCB2B62A66E65B92
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231352e302f32342d3234203d3e203434353932.roa
Signing time: Fri 22 May 2026 08:13:21 +0000
ROA not before: Fri 22 May 2026 08:08:21 +0000
ROA not after: Fri 21 May 2027 08:13:21 +0000
asID: 44592
IP address blocks: 217.216.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9f:52:53:2a:e3:89:c7:81:94:2b:4e:bc:b2:b6:2a:66:e6:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 22 08:08:21 2026 GMT
Not After : May 21 08:13:21 2027 GMT
Subject: CN=C4E9AF0DCE58D080565C4FB460D1ED43133547CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:a5:a9:77:fa:a9:9e:46:0b:d0:02:0b:b1:
22:bb:88:76:c8:54:f0:9e:e4:ff:f2:e0:8b:99:b7:
bc:96:e5:cf:61:ea:00:5b:91:93:85:15:30:59:d1:
ca:db:64:a7:6d:72:d2:1d:78:7b:0e:24:bd:ce:fa:
96:0e:10:da:a6:1c:21:dd:64:6b:68:5b:2c:c8:47:
d3:af:9e:5c:b0:7f:57:41:bd:88:26:86:5f:3a:5c:
e9:7f:10:b7:38:e7:45:8b:21:95:5d:80:18:09:69:
c2:c4:47:34:8a:54:98:69:03:55:06:2f:af:a0:32:
31:75:f8:68:fd:dc:72:81:f5:72:60:4f:af:f9:c3:
8f:70:60:f1:23:d2:2b:09:d2:db:0d:0f:f0:25:a8:
4b:b8:22:fd:7f:a2:89:fd:b7:bc:83:ab:ba:dd:fa:
b5:55:8e:03:94:bd:e0:ce:cb:2a:1d:f1:19:e0:6c:
d3:17:41:83:45:71:4f:a5:13:0c:54:14:fa:31:25:
2b:e1:2c:1a:3f:85:73:75:19:a8:2d:14:00:36:f8:
d5:a5:48:fb:81:9f:74:0e:d2:33:93:a7:6d:bf:33:
d9:aa:66:cd:18:20:7c:02:68:f9:53:17:e9:bf:15:
0b:b5:88:80:d0:3a:4e:7a:53:b6:8a:19:38:c3:36:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:AF:0D:CE:58:D0:80:56:5C:4F:B4:60:D1:ED:43:13:35:47:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231352e302f32342d3234203d3e203434353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b8:e2:eb:55:03:e5:0c:b1:36:14:ab:29:99:5e:57:35:b4:
a3:d8:0f:78:4a:c5:81:7a:76:f8:74:50:8e:e0:25:a8:5e:25:
2c:85:b0:29:76:26:df:fe:b0:12:9f:df:5f:ef:fa:84:4f:74:
61:10:e0:84:50:52:a8:70:d5:57:90:c5:79:3b:24:7a:29:20:
50:3c:96:a3:49:3b:7f:6c:08:2a:cd:38:1f:03:d6:d0:1c:b9:
1f:a6:c3:1e:cb:7c:83:cf:b3:d6:32:38:46:23:ad:1d:b8:92:
cb:4f:f7:60:7b:64:00:f3:e2:19:64:fb:20:7f:eb:69:ac:c6:
b9:2a:87:dd:9d:b7:40:24:39:fc:b9:7f:85:db:2c:13:fd:77:
1d:3d:05:95:98:03:83:3f:ae:cd:d2:a8:88:ca:64:5c:91:f9:
9d:13:b2:52:c8:2d:19:db:b2:30:b9:c3:47:cc:8e:b1:f4:93:
b1:cf:30:f0:5f:44:7c:9e:03:28:ea:37:85:75:c3:58:88:1e:
86:d5:65:44:8e:35:3b:73:76:59:66:a5:80:67:58:27:11:0c:
50:89:e6:08:cf:a4:ea:a6:4f:b7:50:b0:15:bb:8b:8c:e5:07:
24:d2:9a:79:0f:6e:e0:14:7e:81:91:5b:a4:78:89:64:8d:dc:
d1:5e:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:29 2026 by rpki-client