Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231362e3232342e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: aG6eNOgVSpLkSTbLl4y4dT+NE6MT0p2oTt+5P1njGPo=
Subject key identifier: 60:48:D2:4F:71:AA:09:62:6D:80:55:25:F9:BB:D9:80:22:C0:05:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F92A8404BF275BE5755C0C24E7F695952B10B71
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32342d3234203d3e20323139303735.roa
Signing time: Sat 10 Oct 2026 19:46:03 +0000
ROA not before: Sat 10 Oct 2026 19:41:03 +0000
ROA not after: Sat 09 Oct 2027 19:46:03 +0000
asID: 219075
IP address blocks: 217.216.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:92:a8:40:4b:f2:75:be:57:55:c0:c2:4e:7f:69:59:52:b1:0b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 19:41:03 2026 GMT
Not After : Oct 9 19:46:03 2027 GMT
Subject: CN=6048D24F71AA09626D805525F9BBD98022C00586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:a5:1b:f5:89:0d:31:14:88:9d:c6:9d:66:
b2:97:66:2e:43:f4:bf:d4:e2:06:6c:f7:f0:cd:25:
b5:5e:16:19:0e:54:70:ad:c8:60:7d:94:29:8b:a8:
e8:e0:20:84:11:9b:c3:a9:aa:7e:1b:bd:c2:2d:cc:
e5:4c:3f:f9:26:7a:04:f2:5b:69:41:b0:e7:e1:e0:
ae:61:bd:fb:0f:98:2f:6b:03:c0:f8:5b:16:d7:47:
ae:c7:6b:78:d5:52:33:11:4a:b8:59:2e:57:a6:cd:
48:e8:bd:f7:9c:13:63:71:f5:fc:41:0d:0d:7d:94:
8b:3a:f8:6c:ad:d4:f0:2d:68:68:31:65:21:1d:e7:
e1:a8:70:e6:76:e6:b3:02:10:2c:18:0f:d7:04:bd:
a1:71:9a:a6:48:74:3e:0a:82:12:c2:cb:97:d6:25:
81:70:4f:98:e8:bc:ce:65:f6:6a:6e:54:2f:1d:31:
d6:0c:04:65:f5:15:fc:c9:db:79:1d:f7:90:76:59:
09:4d:f5:76:f1:1d:ea:5c:fe:88:0b:d8:4e:f4:c1:
43:2b:cc:a0:88:f4:c7:40:4e:8d:48:58:2f:65:2b:
20:f2:90:4d:e7:05:9e:0c:3f:c9:44:82:92:90:29:
31:eb:c0:44:8b:66:e3:07:32:5d:16:f8:0b:d3:8a:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:D2:4F:71:AA:09:62:6D:80:55:25:F9:BB:D9:80:22:C0:05:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.224.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b2:e4:f2:50:55:37:f7:e8:f6:83:89:6a:a8:87:28:98:7e:
10:f7:89:71:ee:f7:56:98:13:b0:7a:b8:d0:3d:22:c5:7f:37:
f4:89:59:87:01:a5:13:c0:35:82:f3:27:34:d0:c5:4e:6a:00:
1c:36:3d:88:30:12:fc:e1:79:0e:15:c2:a8:6d:33:d7:82:28:
f9:00:62:77:4f:c8:b6:14:1f:c4:f7:72:15:1a:80:ae:ca:19:
5e:ff:d4:2f:09:d2:f2:61:49:10:5a:a0:63:d6:c2:1f:b5:dd:
41:3f:9f:a7:6a:5a:e3:db:aa:8f:e0:fb:72:ff:ad:0f:81:e3:
33:f8:41:6e:8a:9c:d9:3e:a4:42:b1:97:bc:d7:5c:c4:4d:29:
bc:b5:9a:09:ce:a6:a3:77:b6:e5:46:97:07:bf:30:fe:cf:d3:
44:4b:ed:3d:a7:68:75:cc:c3:9d:67:7d:05:2d:41:92:4d:95:
bf:c0:22:2f:a8:b3:ad:25:b3:96:e9:92:6e:5e:ff:d8:c0:8d:
63:e7:01:e1:da:0d:93:53:d5:2c:62:ca:97:86:c9:b7:9b:57:
be:21:c7:bb:ba:2e:5e:7b:35:24:dd:04:79:a3:85:f3:54:ca:
1a:09:99:b5:86:9c:fb:57:cc:e3:80:82:1c:b1:73:c9:48:e5:
9c:4b:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:39 2026 by rpki-client