Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232312e302f32342d3234203d3e20343031333632.roa
File: 3231372e3231362e3232312e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: QClNqnZo6QYN/3GgUq3sYrKJrFpdGH078ophn7zH7g4=
Subject key identifier: 5A:17:90:15:DB:3A:66:F7:E9:55:CB:1E:FC:18:61:AC:A5:43:D0:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B58599CA030E2764E122D70538B216636B13E71
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232312e302f32342d3234203d3e20343031333632.roa
Signing time: Wed 30 Sep 2026 20:27:01 +0000
ROA not before: Wed 30 Sep 2026 20:22:01 +0000
ROA not after: Wed 29 Sep 2027 20:27:01 +0000
asID: 401362
IP address blocks: 217.216.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:58:59:9c:a0:30:e2:76:4e:12:2d:70:53:8b:21:66:36:b1:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 20:22:01 2026 GMT
Not After : Sep 29 20:27:01 2027 GMT
Subject: CN=5A179015DB3A66F7E955CB1EFC1861ACA543D048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:da:3c:d2:89:fc:2f:1e:08:4e:c0:0e:1d:
0b:ed:f5:6c:54:3c:6d:12:1b:af:8a:03:38:e6:a0:
e7:c4:a6:db:2e:05:94:13:c9:06:00:ef:66:ec:f4:
cd:82:e2:6a:2c:02:5e:ad:10:40:7f:70:47:3e:a3:
01:fa:a7:39:73:77:7b:c2:41:2e:b0:d0:ec:0f:3e:
a7:7c:4e:6c:a0:9e:ce:5b:57:4e:70:9c:6c:c0:67:
c9:64:ac:45:76:66:b5:0e:3b:2d:9c:f2:64:bf:56:
51:e0:74:93:90:13:ac:26:ff:53:5f:05:c7:cc:4e:
64:25:0f:45:7b:01:6c:fb:57:2b:8f:fd:5d:37:39:
b4:a0:cc:ee:dd:e9:7c:c6:5f:6d:89:35:79:69:ca:
a0:bd:0c:31:fb:0e:66:c4:6c:2a:ed:32:48:00:77:
c8:7b:fe:ed:52:48:08:cf:25:53:94:68:8b:29:de:
e5:27:0e:50:d6:92:b5:d3:b6:99:f9:aa:84:d3:3c:
1f:12:35:e6:a2:40:40:20:42:6d:73:04:27:34:71:
88:f4:9f:1c:f5:3f:51:09:bf:5c:a3:99:6a:e4:31:
2c:35:fb:7d:f1:79:bd:37:46:b6:e0:78:ba:0b:7a:
02:c1:85:f6:d2:54:46:bc:50:59:bf:f9:98:f7:21:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:17:90:15:DB:3A:66:F7:E9:55:CB:1E:FC:18:61:AC:A5:43:D0:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232312e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
11:59:15:4c:63:c7:85:87:82:bc:cb:eb:e7:42:e6:e0:2d:67:
b9:a7:a6:41:78:dc:8f:fc:eb:b6:a8:a9:f9:03:f8:2e:62:78:
56:85:9f:32:ff:bc:4d:1a:14:c5:f8:a0:eb:95:88:47:fb:8b:
44:87:78:46:8e:8e:97:65:8a:40:4d:9a:98:ea:55:09:35:05:
a2:ec:41:75:7a:40:3f:52:4f:94:3f:fc:d8:94:c3:d8:79:10:
4e:fe:31:57:2e:cb:c5:62:1b:85:34:86:fe:2b:68:b6:03:fa:
14:ea:50:dc:0a:35:87:92:59:c8:6a:6e:d1:5f:48:ea:7d:c5:
19:8c:46:df:ee:7b:91:01:68:f3:75:5d:ca:71:10:f4:e7:47:
66:34:ef:7e:79:3d:db:3d:24:8d:eb:46:0f:d4:d0:93:77:e1:
6b:f8:b1:96:03:dd:98:95:eb:13:68:82:d4:17:5d:39:b0:bc:
2e:e4:73:92:85:9e:6b:d1:6a:70:c9:9d:d1:98:83:6a:1c:30:
ec:94:1f:14:26:40:dd:65:09:2e:79:b8:63:8c:ec:29:4c:84:
84:80:76:5a:e0:88:21:5c:42:63:d3:08:34:ab:55:87:be:fb:
db:f2:b0:a3:60:bc:8f:21:f6:dd:94:94:d1:93:f2:4b:ac:e5:
9c:bf:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:30 2026 by rpki-client