Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232322e302f32342d3234203d3e203330303432.roa
File: 3231372e3231362e3232322e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: EqMoy6MZxxounat/qNFqP8XcpLd98kshQihJi35YBmg=
Subject key identifier: 2D:61:CB:66:1E:D9:5D:70:0A:0F:77:35:19:2B:35:90:E2:D0:AC:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A82B96114ECE9F7DBB1EC1CADF3787AC9FF5853
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232322e302f32342d3234203d3e203330303432.roa
Signing time: Mon 05 Oct 2026 09:25:52 +0000
ROA not before: Mon 05 Oct 2026 09:20:52 +0000
ROA not after: Mon 04 Oct 2027 09:25:52 +0000
asID: 30042
IP address blocks: 217.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:82:b9:61:14:ec:e9:f7:db:b1:ec:1c:ad:f3:78:7a:c9:ff:58:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:52 2026 GMT
Not After : Oct 4 09:25:52 2027 GMT
Subject: CN=2D61CB661ED95D700A0F7735192B3590E2D0AC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:17:0d:90:f9:46:b1:a8:90:45:f0:77:17:
46:92:4c:c6:1e:ad:bd:b6:ab:fd:89:48:b1:49:29:
7c:a7:88:a5:2e:36:d3:09:67:0d:05:1c:90:96:c6:
a9:98:34:cd:a2:b5:44:40:c0:50:76:29:30:fd:51:
b4:89:ac:c6:fa:9c:0f:19:69:56:c4:44:b5:d4:fb:
8f:dd:72:a3:41:fa:17:86:b7:28:df:2f:2b:2e:db:
61:d5:6b:b5:ed:93:d2:cb:83:21:04:5d:99:90:b5:
36:31:0e:46:4b:9b:a1:de:68:d7:16:76:54:7d:a7:
d7:35:7a:51:18:97:a4:17:64:6f:de:5f:49:8c:32:
a9:14:d2:ef:ab:3a:9c:b9:9f:c7:89:7d:81:69:c6:
ce:0f:05:f3:a8:f1:38:98:0f:ce:68:80:5b:a0:a6:
0f:91:24:6a:89:0f:a5:4e:e9:63:4b:f8:da:59:d5:
15:e3:09:28:54:79:e5:31:12:a9:4b:3a:f6:04:d4:
1b:79:c6:c4:af:1d:54:b4:89:ab:05:c3:d9:3b:de:
b8:b1:5c:e5:33:d3:34:9f:52:b0:0a:85:72:23:80:
6c:a5:97:c7:04:c3:37:5b:6a:fe:4c:71:7e:6d:08:
93:3f:4c:ed:b1:a6:f5:10:94:a7:39:a8:96:25:c3:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:CB:66:1E:D9:5D:70:0A:0F:77:35:19:2B:35:90:E2:D0:AC:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232322e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
40:88:cc:b7:62:4c:ce:0d:2a:31:8a:12:78:7e:bf:91:32:9b:
85:11:d0:d5:9e:69:62:de:11:38:d3:5e:fb:23:c1:4d:1c:93:
da:13:16:fe:b2:e5:d2:2c:b9:d1:11:75:ba:77:92:f7:18:95:
4b:7f:f9:39:cd:de:33:cf:2c:85:12:1f:c7:56:a5:12:d2:94:
d4:ea:23:ac:5e:c6:50:5c:b1:b4:03:95:95:cb:c8:70:39:54:
f4:f1:f3:15:c3:f4:d4:39:2d:27:fc:f2:6b:2f:de:8d:eb:9b:
5c:df:ab:ed:31:42:34:c4:ae:32:2e:cf:1a:10:86:98:45:77:
84:2f:71:ef:d6:af:7e:bb:10:98:ee:44:55:8a:fb:12:fa:68:
55:1d:fa:c6:50:a2:50:64:81:c5:3a:2a:c1:ea:72:8a:cc:88:
2a:9a:d7:30:c0:8b:60:e0:0b:a6:95:e3:cc:4d:16:dc:83:b0:
c0:ad:0b:95:80:ac:d7:9d:bc:6e:e6:0c:d5:cc:38:87:18:d7:
07:d2:37:a7:2f:01:cb:13:12:d3:f4:58:0c:5e:af:a4:4d:7b:
7c:fe:d4:61:a9:7e:78:5e:50:7a:f4:99:ec:85:f4:73:7c:33:
00:ba:a6:d5:0f:85:fd:d8:c7:6a:19:ec:9f:c5:e5:e9:10:d9:
57:c4:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:46 2026 by rpki-client