Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232312e302f32342d3234203d3e20323134343833.roa
File: 3231372e3231362e3232312e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: KlQz8RCLlz3nzg13YCuYtFGSwunlYHX92zamLDRHDpw=
Subject key identifier: F8:ED:9B:FE:68:8C:00:AE:AE:6F:38:78:45:CA:A2:1C:FA:B2:13:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6923B9D7FA2B166EA6AEA1AF38AF9D3C2BACDF4F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232312e302f32342d3234203d3e20323134343833.roa
Signing time: Fri 28 Aug 2026 19:26:53 +0000
ROA not before: Fri 28 Aug 2026 19:21:53 +0000
ROA not after: Fri 27 Aug 2027 19:26:53 +0000
asID: 214483
IP address blocks: 217.216.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:23:b9:d7:fa:2b:16:6e:a6:ae:a1:af:38:af:9d:3c:2b:ac:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 19:21:53 2026 GMT
Not After : Aug 27 19:26:53 2027 GMT
Subject: CN=F8ED9BFE688C00AEAE6F387845CAA21CFAB2134B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:c8:61:c9:1e:ae:4a:8a:0b:5c:e0:64:23:
81:f7:f4:bf:a5:3f:19:8a:8b:76:3d:37:b0:21:2c:
e4:c8:6c:d2:66:dc:c4:f5:9b:b5:5b:99:be:45:59:
a9:6d:77:e1:55:e8:09:42:90:e4:86:d2:7a:0b:99:
06:df:dc:39:ff:44:70:43:78:ff:58:1a:40:78:94:
62:b2:8c:21:b0:3c:e1:b5:20:b6:a6:58:6f:f4:f8:
77:07:6d:ba:20:ca:ca:98:3f:60:46:08:21:38:07:
b3:d9:2a:9e:2f:5d:4f:81:fa:6c:b2:9e:37:0d:d7:
af:71:ed:79:b5:26:f7:a0:49:40:7c:5f:c1:8c:ef:
4e:05:f0:dd:57:84:3f:04:92:05:69:31:1d:3d:66:
54:b3:de:ec:27:ee:ce:31:f1:87:ce:23:bd:89:01:
14:c6:5b:bb:23:12:c6:49:8d:5e:c6:7f:60:f4:90:
2c:3b:57:9a:2e:21:45:cd:19:ee:53:ca:81:45:a7:
2a:54:ff:21:85:cf:8c:b1:9b:95:b1:20:ca:82:a4:
bf:90:a1:bd:11:9b:c5:89:84:42:95:44:84:17:12:
94:d1:c8:34:95:46:6f:27:35:d2:8c:5e:b1:8d:39:
32:19:4d:be:12:b4:9b:83:c3:d4:14:96:f6:05:ff:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:9B:FE:68:8C:00:AE:AE:6F:38:78:45:CA:A2:1C:FA:B2:13:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232312e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3c:78:dc:d4:16:03:5c:d7:5b:0d:75:0a:bf:5d:48:26:aa:
e3:8b:45:c3:cc:cf:bc:eb:b8:4b:ec:61:4c:7b:8c:75:04:7e:
be:71:6c:74:da:8f:55:cc:79:19:e2:34:7a:5c:94:e3:bc:82:
76:4a:b4:ec:c1:09:e2:1c:fa:de:5a:d5:18:50:da:a4:ba:f5:
a9:e3:c6:91:2c:d3:47:f8:f5:2e:15:00:8b:4e:27:1a:a8:63:
8d:72:fc:f9:57:03:ff:7a:79:45:d9:c8:0d:a2:2f:5c:4f:ea:
10:56:cf:ce:9f:52:d4:29:53:b3:d6:1f:03:8d:d6:da:98:5c:
dd:f6:0b:75:ba:f8:20:2a:12:7d:da:cd:20:f8:f2:cc:da:d4:
0c:d0:4d:e8:4a:61:17:73:9a:d6:4e:27:9b:cf:3c:1b:70:f6:
04:cf:4a:51:98:30:b3:e5:83:66:e3:78:47:83:25:02:26:b9:
12:3e:90:94:83:1e:52:aa:8a:28:7a:ed:6a:07:93:33:c5:9a:
9d:c1:ee:44:ab:b8:d9:96:de:d1:b8:42:4d:ac:e5:ce:92:ee:
83:ff:99:75:b7:8e:47:56:11:3d:8d:a8:23:83:03:1c:cb:08:
35:c6:c0:8e:97:5d:99:38:f7:f3:7b:4d:56:34:c6:c6:2e:78:
e8:24:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:17 2026 by rpki-client