Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20313334343934.roa
File: 3231372e3231362e3231362e302f32342d3234203d3e20313334343934.roa (raw, json)
Hash identifier: wMIfvQT2hO/E8f21c/DcoWdeevKVvakYFiV2SBhX/bk=
Subject key identifier: 54:CA:1B:58:B2:C7:F9:FF:3A:D4:D0:DB:8F:17:59:BA:B9:23:4A:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B6FD850CC0AA37967E0BE34D3B38BE08FF07757
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20313334343934.roa
Signing time: Fri 07 Aug 2026 09:16:05 +0000
ROA not before: Fri 07 Aug 2026 09:11:05 +0000
ROA not after: Fri 06 Aug 2027 09:16:05 +0000
asID: 134494
IP address blocks: 217.216.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6f:d8:50:cc:0a:a3:79:67:e0:be:34:d3:b3:8b:e0:8f:f0:77:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 7 09:11:05 2026 GMT
Not After : Aug 6 09:16:05 2027 GMT
Subject: CN=54CA1B58B2C7F9FF3AD4D0DB8F1759BAB9234A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:33:3d:4d:20:4d:e5:68:05:7e:d5:5b:fe:
27:4e:87:1e:64:03:52:c3:b9:52:a5:20:97:a6:25:
44:82:6b:31:11:c6:c1:b5:27:83:63:7c:b3:5d:fb:
2d:49:f6:9f:d0:72:a4:ae:53:94:1b:2d:39:9c:71:
23:c0:1a:51:c4:ac:3c:dd:19:93:e3:e4:63:a4:39:
68:3c:7d:54:c9:12:17:92:a3:4a:ef:72:c4:5a:3c:
1a:be:92:6e:ca:c5:b6:fa:d1:0a:ae:d6:f5:3b:54:
de:a9:4e:fa:66:02:72:c8:70:bd:cf:a6:61:c3:2b:
b7:bd:cd:9a:d8:8a:04:a0:c8:02:6f:1f:c5:bc:a3:
cf:c4:45:1a:5c:c4:53:d5:ad:0f:ca:d8:f1:73:69:
86:f5:25:5f:bf:1f:24:fa:6d:7b:9a:2d:b0:b7:10:
c7:69:84:31:47:7c:37:fc:98:45:52:8a:c4:6e:bc:
9a:66:6c:e2:ba:60:e0:d3:46:84:f9:9d:ef:90:40:
82:8d:f3:03:a5:07:76:11:fa:f3:ea:98:94:b0:b0:
c1:c1:81:ec:7f:2e:81:e6:23:a3:a9:9a:8a:ed:c7:
73:b0:25:c4:f7:98:52:99:c6:bb:0d:ce:6d:1d:56:
e7:4c:be:3c:2e:b7:96:ed:a6:b4:95:6f:31:7d:b0:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:1B:58:B2:C7:F9:FF:3A:D4:D0:DB:8F:17:59:BA:B9:23:4A:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20313334343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.216.0/24
Signature Algorithm: sha256WithRSAEncryption
28:18:ac:12:c9:2c:8e:ce:4a:d7:8b:2d:c3:74:dc:dc:2d:24:
2e:21:d6:aa:74:ca:86:3e:cc:7f:12:d1:65:8a:3b:6a:b3:6d:
d5:33:26:02:65:21:aa:16:ef:24:25:10:8d:c5:d2:ed:31:3b:
fe:cc:2a:78:57:22:c9:7a:4c:ad:92:b4:bb:d9:7c:99:5e:0c:
11:ed:84:6d:5a:e4:7e:36:6d:bb:dc:42:96:47:d0:1d:bf:82:
bc:86:b4:89:7e:f6:61:ad:9b:77:79:84:f2:7c:66:b8:3c:d9:
51:d0:20:3d:c5:62:dd:ab:a4:0d:59:d9:5e:07:33:17:13:76:
d0:3a:a7:04:e5:43:16:20:e6:2b:9f:84:29:f3:41:9a:cc:a0:
51:3f:7c:cc:01:cf:da:76:29:b8:1f:7d:12:ef:b1:a0:92:26:
29:73:90:2a:9b:36:c0:95:44:7e:17:30:75:0b:12:26:60:6b:
c3:56:d0:69:ff:6c:d5:d3:4c:1d:9e:34:9a:d0:3d:39:f2:5a:
f4:06:23:24:04:43:b1:a0:0e:c7:e8:ce:89:cc:f9:8d:c3:7a:
44:88:a4:4e:f2:10:a7:9d:7a:56:67:ee:63:24:a5:79:7d:c8:
6d:b7:b5:97:b4:35:e2:06:4c:37:9e:19:59:10:c0:55:23:47:
9f:ea:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:11 2026 by rpki-client