Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3232342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: tSUTl89N4KS8qRaRB/zQMq/8Hb7gLLMYyzLgxkfUGUI=
Subject key identifier: 11:52:07:EA:45:D5:AB:D4:A1:1B:F1:09:E2:63:71:93:E9:82:03:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1BD7258797AECE539CD936DA5028DE9B92CDFF85
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32342d3234203d3e20323138393131.roa
Signing time: Sat 10 Oct 2026 19:46:02 +0000
ROA not before: Sat 10 Oct 2026 19:41:02 +0000
ROA not after: Sat 09 Oct 2027 19:46:02 +0000
asID: 218911
IP address blocks: 217.216.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d7:25:87:97:ae:ce:53:9c:d9:36:da:50:28:de:9b:92:cd:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 19:41:02 2026 GMT
Not After : Oct 9 19:46:02 2027 GMT
Subject: CN=115207EA45D5ABD4A11BF109E2637193E9820310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f9:86:ec:99:9d:47:1a:5b:7b:a9:c4:28:89:
64:f9:11:4a:4c:5d:62:c0:05:e1:af:e7:a2:6e:2e:
92:06:af:c1:d2:e1:c3:e8:c0:9a:ce:88:a6:a0:f6:
60:39:1f:dd:3f:07:c4:e6:aa:32:46:73:3d:ce:76:
26:77:63:1e:0c:89:3e:e1:20:34:ce:91:1e:e2:57:
87:64:a4:f4:d1:93:0e:f9:2a:36:2e:4d:78:e2:52:
39:a5:c2:09:87:45:20:b1:e2:0b:7d:b1:30:43:29:
73:a1:97:32:a5:ec:37:7b:b0:b1:d0:8e:9e:66:26:
d5:e9:10:34:3e:b6:2b:e0:03:ee:52:c2:95:64:18:
3e:06:ea:f9:5b:53:37:96:7b:3f:ad:04:db:52:b7:
61:23:2d:cb:a2:6e:70:db:7f:da:fe:a9:25:6b:f2:
2d:97:f3:31:d4:26:d8:4c:70:5b:42:17:2b:61:17:
c5:c8:c7:60:f5:af:74:43:4a:7f:86:b8:d9:f2:03:
dc:af:5a:8f:ad:45:0c:d4:42:8b:85:67:85:6b:29:
35:35:3f:e4:17:d9:40:d7:7d:ce:51:90:12:fa:ea:
c0:4d:c1:6f:e7:98:c9:f6:66:97:99:5f:7e:ad:64:
55:f5:a9:9e:1f:b6:f6:fa:57:53:7d:6b:34:b3:dd:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:07:EA:45:D5:AB:D4:A1:1B:F1:09:E2:63:71:93:E9:82:03:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.224.0/24
Signature Algorithm: sha256WithRSAEncryption
64:40:4e:e4:bf:1a:41:bb:49:9c:25:69:d0:50:f1:c0:3a:b2:
4e:e8:83:07:92:d8:54:0a:61:bb:51:7f:86:26:21:54:e6:ca:
88:29:24:70:4d:45:14:ed:3d:91:86:27:18:eb:18:46:89:d1:
74:b7:4e:31:f5:6f:a2:9c:28:1f:4a:de:45:1f:3f:c6:87:d4:
ad:71:b2:ef:cd:a4:75:59:85:8b:55:51:49:6a:93:c9:b0:bb:
e6:c1:ed:0a:0f:39:70:11:ff:62:6c:ee:ad:1c:35:44:ea:00:
51:7a:18:e2:e0:a4:bc:4b:e0:27:ef:42:91:0a:10:08:29:75:
fc:fd:cb:75:5f:13:36:9e:64:a5:b1:68:e7:87:4a:6e:1c:da:
c9:e3:0d:77:3e:c6:7a:3e:9d:aa:30:ec:5f:3d:f2:e6:a8:d2:
31:bc:d9:f0:ec:07:3e:a8:be:ea:7b:2b:53:4b:a7:a4:6f:ee:
cb:9f:9a:a9:2d:d1:ab:9d:c6:61:db:37:a1:e9:8a:dc:15:68:
d0:a4:ee:83:d6:12:19:28:2b:47:cd:4c:71:1a:24:ff:82:03:
e6:7c:50:3d:6f:3d:f7:44:a1:ed:34:4b:1d:d4:56:88:eb:a0:
c3:e6:97:11:1b:ad:11:25:2b:72:99:6b:01:b7:28:ed:58:54:
9a:5d:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:30 2026 by rpki-client