Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232332e302f32342d3234203d3e20323134343833.roa
File: 3231372e3231362e3232332e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: pFejUEeJLZt6I/BNx2OFRnhHwmj6+vitt0tuvPFwJgs=
Subject key identifier: ED:03:76:D5:89:EF:9D:79:C4:6D:B9:70:FF:DF:EC:3B:6B:9C:7C:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E796CF11ECC8407744BF26ADB96D351D844F0AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232332e302f32342d3234203d3e20323134343833.roa
Signing time: Mon 31 Aug 2026 10:25:04 +0000
ROA not before: Mon 31 Aug 2026 10:20:04 +0000
ROA not after: Mon 30 Aug 2027 10:25:04 +0000
asID: 214483
IP address blocks: 217.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:79:6c:f1:1e:cc:84:07:74:4b:f2:6a:db:96:d3:51:d8:44:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 10:20:04 2026 GMT
Not After : Aug 30 10:25:04 2027 GMT
Subject: CN=ED0376D589EF9D79C46DB970FFDFEC3B6B9C7CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:69:2e:4b:08:a9:7a:20:e9:88:a1:a0:79:
25:99:e7:37:2d:a2:ce:41:f8:76:c3:55:e0:79:2d:
99:97:58:22:13:75:a1:6e:8a:33:46:7b:4d:11:34:
13:ab:5d:cf:88:54:fa:15:38:0b:44:11:4f:c2:b1:
ef:67:2f:5d:4e:b9:2b:0f:37:20:54:fa:82:78:0b:
47:50:49:27:60:82:80:ce:89:48:2b:41:3a:1e:2c:
08:8b:e6:87:12:4f:db:01:03:8f:41:bb:d4:9d:2c:
03:16:ba:00:1f:32:b6:83:9b:6f:70:a2:75:26:50:
3f:32:96:ca:18:5b:1e:75:a8:52:fc:8e:20:89:54:
b4:4e:bc:c9:18:80:b9:06:a0:db:46:68:39:c6:b8:
bf:5d:37:ef:ea:f7:60:ee:8a:7c:47:da:e0:37:56:
87:b8:05:66:a4:a8:25:13:21:71:ed:cd:b1:1d:1e:
de:ef:64:d7:22:c7:85:d2:29:de:c4:c4:c2:2b:7e:
06:aa:7d:5a:9d:82:21:c2:42:da:34:23:52:1e:d4:
39:c6:7e:05:14:cd:98:98:8c:46:64:d2:fb:62:89:
fa:85:c1:6b:73:a1:8e:3d:dc:f7:ca:5a:64:d0:15:
6f:20:62:d5:fb:f6:6e:d0:be:25:bc:6a:83:9d:42:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:76:D5:89:EF:9D:79:C4:6D:B9:70:FF:DF:EC:3B:6B:9C:7C:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232332e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
96:df:77:ae:94:11:fd:85:90:ec:c2:c7:d4:9a:7b:1b:e5:bb:
fb:10:a0:32:2e:25:c1:59:b3:23:ed:21:58:7e:fd:bc:41:3d:
9e:57:de:24:2c:7f:0f:9a:57:26:d7:18:86:39:84:58:0e:9d:
9d:bc:96:1c:fa:13:0a:2f:27:b9:76:91:cc:57:b9:30:50:07:
52:d8:5b:1b:c1:80:3b:23:47:3b:cc:f4:92:ba:67:15:d8:a3:
28:6a:86:28:d1:88:e9:40:58:fd:3e:7d:dd:b0:90:4b:e0:f0:
b0:35:e7:0b:82:ae:f4:fa:df:83:2e:26:b0:47:e1:d2:fc:8e:
72:8e:34:d0:62:4f:0e:cc:43:37:a9:a4:a3:c2:d5:c0:fd:7f:
8a:77:da:d5:c0:e4:9b:9b:85:6b:d5:dd:f7:1b:7a:13:03:ad:
f7:c4:d4:69:6f:f2:7c:15:ad:dc:c7:da:bf:a0:d0:0e:a6:2d:
2d:1b:44:72:82:7f:38:26:89:14:b7:9a:cd:09:42:9a:b5:32:
56:39:a0:51:4b:05:48:d6:6e:17:cd:fa:ef:d9:4d:41:94:df:
87:ef:f2:d1:8e:9c:57:bb:8c:ce:2b:76:8f:66:c3:b8:bc:e7:
8d:5d:e9:58:34:35:89:dd:a5:ff:51:58:ed:32:8a:21:bc:78:
86:e6:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:25 2026 by rpki-client