Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232362e302f32342d3234203d3e203233303631.roa
File: 3231372e3231362e3232362e302f32342d3234203d3e203233303631.roa (raw, json)
Hash identifier: Umv25/VLo1jeID4CnxMLGrNpa6WaW9Kp9hE3/FB6qDs=
Subject key identifier: DB:F3:18:2C:EA:08:D0:35:47:99:C9:29:DA:F5:7B:E3:76:94:8E:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7737AE922FAA6563EE37EDD8B0B39A8FC3168B8B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232362e302f32342d3234203d3e203233303631.roa
Signing time: Sat 17 Oct 2026 11:36:59 +0000
ROA not before: Sat 17 Oct 2026 11:31:59 +0000
ROA not after: Sat 16 Oct 2027 11:36:59 +0000
asID: 23061
IP address blocks: 217.216.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:37:ae:92:2f:aa:65:63:ee:37:ed:d8:b0:b3:9a:8f:c3:16:8b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 11:31:59 2026 GMT
Not After : Oct 16 11:36:59 2027 GMT
Subject: CN=DBF3182CEA08D0354799C929DAF57BE376948ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:3f:f3:de:0b:c1:b1:2b:e4:79:58:06:b0:
f9:a4:af:10:75:3f:9c:1d:ca:d2:bf:ef:68:ee:c9:
03:52:11:e9:eb:f2:4b:33:16:56:f0:79:39:fa:02:
91:27:e9:5a:d1:5a:ff:1c:80:ca:89:82:28:60:a4:
a5:87:43:3d:fa:5c:76:3d:75:a2:ff:f5:16:5b:50:
a5:38:ad:c0:c5:75:95:6c:6a:02:86:7b:17:f1:0f:
20:28:76:d1:78:4f:cf:da:6a:ec:d9:16:6e:da:4d:
d1:1a:f1:3d:e9:d5:8d:12:98:fd:16:0e:9a:41:80:
cb:eb:73:6f:21:28:c1:e4:a8:0f:fd:02:f4:aa:57:
de:12:58:65:d2:57:69:0f:89:32:e3:4b:6b:38:dd:
73:7f:0b:aa:9d:53:74:d3:8b:95:85:21:d2:e5:a9:
1a:89:a6:b9:42:c1:ff:20:4c:77:4a:be:93:d3:5e:
e5:b4:07:01:99:87:2b:ef:af:ea:26:ea:f8:4d:5b:
77:d6:ef:3a:2d:77:09:3b:59:04:fa:1d:ee:93:e1:
48:17:6e:15:e5:88:a1:e1:74:94:68:87:99:86:53:
54:79:da:d9:dd:23:d2:a3:a2:0a:36:db:67:9f:86:
6d:86:39:14:73:8a:aa:4d:b4:27:b8:76:14:38:59:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F3:18:2C:EA:08:D0:35:47:99:C9:29:DA:F5:7B:E3:76:94:8E:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232362e302f32342d3234203d3e203233303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.226.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e8:a9:91:bb:d3:f3:7b:0a:38:50:df:4d:1a:fc:ca:c2:5e:
d7:a9:d1:d3:69:6b:21:be:c2:08:db:65:e4:7b:99:98:a9:99:
dd:7e:4c:e9:37:37:e1:0e:37:9b:ed:f4:93:40:8b:15:f3:b9:
d3:41:c2:61:6f:bc:97:68:f8:58:73:8a:d6:b3:5f:40:d2:cb:
a3:51:f1:e8:fb:09:e7:20:44:dc:6e:42:50:9a:48:01:e9:78:
1c:c0:4b:a7:78:a2:52:97:fd:72:5e:0a:6a:5c:88:68:46:29:
3e:8c:d5:f4:ff:91:da:a6:43:fb:86:b4:19:24:a8:b7:1d:32:
08:4a:10:44:2f:7e:36:0c:14:a5:df:d3:b0:13:fa:8c:1d:54:
9f:49:28:c9:e7:4c:95:15:26:ce:c9:b0:13:d5:a0:83:2d:33:
90:05:2e:cf:3d:6c:be:6f:33:eb:2b:e7:1e:16:70:46:51:dd:
f3:fe:0c:fd:7e:57:ce:1c:1c:c1:e6:f2:4b:de:e2:52:83:d8:
e1:aa:74:66:fa:c6:1f:0e:b2:bd:c8:5a:f7:fd:ea:af:00:60:
18:eb:3d:ad:e4:41:ba:df:ab:23:bb:42:5b:a2:20:cf:70:89:
b1:2e:11:b2:56:32:1c:17:5e:55:7f:4f:e8:e9:6e:c2:c6:43:
42:be:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:26 2026 by rpki-client