Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232322e302f32342d3234203d3e20323134343833.roa
File: 3231372e3231362e3232322e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 2A9j6zMnlyCrbb4498boOzq2LWteQCWB7WLFTztwKOs=
Subject key identifier: 51:E4:EA:CA:C2:39:A6:89:82:78:2C:5E:01:64:8F:77:3A:C0:07:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4868F8951803327D7082F29B1687AEA0B40DAAC8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232322e302f32342d3234203d3e20323134343833.roa
Signing time: Mon 31 Aug 2026 10:25:08 +0000
ROA not before: Mon 31 Aug 2026 10:20:08 +0000
ROA not after: Mon 30 Aug 2027 10:25:08 +0000
asID: 214483
IP address blocks: 217.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:68:f8:95:18:03:32:7d:70:82:f2:9b:16:87:ae:a0:b4:0d:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 10:20:08 2026 GMT
Not After : Aug 30 10:25:08 2027 GMT
Subject: CN=51E4EACAC239A68982782C5E01648F773AC0079A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:8d:e7:a1:5a:8f:d3:f0:12:4d:a1:5d:db:
69:b1:30:95:f5:35:d8:63:ca:bd:21:4f:44:f4:ec:
c1:eb:f8:a5:b7:da:03:b9:4a:8b:df:4c:9c:2e:08:
e2:7c:5e:ed:31:18:12:38:55:4f:bb:8f:ce:44:ee:
5a:ea:df:76:25:e1:c3:12:7d:ac:8b:d5:f9:f6:26:
47:cd:77:ae:c0:9f:aa:16:a1:c0:1b:ce:a6:98:2f:
59:36:f7:17:98:c6:36:ff:c6:bd:ab:b2:36:96:02:
19:c6:7d:fa:54:03:ee:ad:2c:3e:c8:11:e3:fd:dc:
90:4c:39:30:dd:3c:2f:50:db:19:91:47:da:ba:7e:
ec:22:24:cc:ca:66:49:99:1c:da:e6:75:db:54:d6:
78:12:54:78:41:56:a9:95:2f:ae:2f:16:37:5e:a9:
3f:a4:94:dc:6e:e5:68:a4:18:a3:32:36:24:e4:d7:
8a:4d:f2:f1:03:57:b4:f3:8e:59:f9:0e:22:be:dc:
24:e2:aa:03:29:33:43:5a:2c:e4:d1:58:ae:97:0f:
9f:39:95:12:ff:31:68:47:aa:26:4e:6a:32:11:ed:
04:00:e1:58:30:60:c7:bb:0b:7b:bd:60:e0:7c:09:
53:36:91:c4:3e:3b:d7:84:d4:30:90:07:9e:ad:48:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:EA:CA:C2:39:A6:89:82:78:2C:5E:01:64:8F:77:3A:C0:07:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232322e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9b:15:bb:a4:6c:a7:a9:56:93:9a:77:71:7b:5b:aa:e5:66:
ce:cf:ee:40:da:46:02:77:17:43:10:cc:60:53:1b:87:b3:52:
78:f4:b6:65:d9:59:6b:c7:79:46:70:40:7d:88:b9:87:e9:99:
4b:47:de:79:52:a7:10:50:f2:50:de:d0:0e:e0:ac:0e:5a:36:
8f:de:01:7a:6a:9c:eb:bb:8e:5c:79:85:f5:17:63:a5:5a:6b:
0a:e7:e7:6a:a1:ad:15:a0:68:dc:95:16:6b:a1:71:ae:86:25:
64:54:b7:a7:43:74:fc:90:7c:8e:7b:d9:e2:a8:65:42:8c:18:
7c:ed:2c:bf:dd:4c:54:be:24:28:ba:d6:73:c7:ae:df:b4:30:
0a:6b:67:f6:63:1f:2d:37:16:a7:b3:3f:b4:a5:80:1b:a2:92:
e5:82:f7:77:49:37:4b:62:3d:f2:0c:a0:92:07:4f:e6:14:3b:
39:96:22:25:90:31:1d:a2:fa:fa:0c:08:38:12:3e:b4:06:40:
49:3d:f3:0d:ab:ca:e4:be:b0:80:da:ff:61:28:5a:fe:23:c4:
71:45:17:2a:9d:ce:32:dd:f3:9f:07:31:5b:ce:e6:93:fa:78:
41:04:0a:d8:60:50:c6:ea:91:18:be:b0:27:2d:b6:36:2d:e1:
04:e2:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:38:19 2026 by rpki-client