Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234322e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231362e3234322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: SFg8/5Yx+8QyUvpNie6dmmAVqpvRMWohBnfMr1CKx8I=
Subject key identifier: 1D:E8:1F:69:BF:5B:98:AF:BF:92:05:54:F9:82:60:32:D6:00:78:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7920504F0FDAC58375EBE94FF5200BBA2909FF36
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234322e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 28 Oct 2026 12:02:43 +0000
ROA not before: Wed 28 Oct 2026 11:57:43 +0000
ROA not after: Wed 27 Oct 2027 12:02:43 +0000
asID: 212238
IP address blocks: 217.216.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:20:50:4f:0f:da:c5:83:75:eb:e9:4f:f5:20:0b:ba:29:09:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 28 11:57:43 2026 GMT
Not After : Oct 27 12:02:43 2027 GMT
Subject: CN=1DE81F69BF5B98AFBF920554F9826032D6007827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:19:09:24:5d:c0:55:6c:8b:f0:74:a5:84:
f5:7f:87:41:c6:e7:3f:a2:fd:22:b9:a7:40:f6:b8:
76:e0:1f:71:bc:1a:1c:15:55:26:20:64:25:11:8b:
a2:41:84:a9:0b:4f:eb:cd:97:c9:e4:08:92:81:7d:
c6:9e:c7:0e:9d:41:c6:88:e9:20:03:b6:4a:9f:6c:
f1:1b:62:05:64:bb:a9:cd:e5:21:56:cb:86:00:d8:
7e:ee:3f:b8:1f:04:f9:1e:a9:74:01:48:6c:30:dd:
0a:a1:33:b8:8b:34:e6:8e:ae:96:46:40:fb:80:3d:
a7:1d:08:73:04:bf:99:27:cc:4b:3f:26:ae:08:dd:
70:8f:92:dc:ae:fa:c3:49:d5:b5:3a:29:4b:64:e3:
60:54:91:1a:ff:95:a2:10:55:79:0b:02:d4:ff:10:
4e:ab:97:71:8f:fc:e8:57:15:7f:de:ac:3a:cb:76:
0a:46:7f:38:61:0d:1f:05:20:fb:e9:97:93:55:9f:
f3:ef:a1:e7:5f:5d:d0:56:30:fb:c2:da:f3:45:d6:
e6:98:0c:6d:b9:d5:5e:6c:4d:33:02:e4:27:a8:8b:
de:da:03:af:9e:14:34:66:e3:57:1c:47:af:65:11:
02:4d:35:66:06:bb:d3:f1:9d:2c:fd:1f:b5:bb:18:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:1F:69:BF:5B:98:AF:BF:92:05:54:F9:82:60:32:D6:00:78:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.242.0/24
Signature Algorithm: sha256WithRSAEncryption
02:98:94:b0:36:21:d2:04:e3:14:ec:a5:60:92:c6:6a:4c:d8:
1d:db:64:14:b4:5d:06:10:74:40:0a:2a:e5:b6:ce:f3:39:b2:
b6:77:bd:4e:94:90:90:64:53:66:7c:1a:5c:c0:24:98:9e:02:
6e:20:cb:5d:a7:8a:af:fc:66:b9:2b:0a:4d:50:5f:97:28:48:
4a:f7:f7:4b:72:fb:99:06:a7:2c:51:71:fa:e4:a0:ec:96:7c:
46:f2:49:db:cc:55:dd:b4:4c:1e:e1:8b:22:d7:cc:9b:17:0c:
a2:4b:94:c3:fd:2c:da:f2:7a:a4:c2:83:d6:be:88:3b:f5:fb:
55:c8:3d:01:96:4c:e7:8a:89:2a:7e:cc:65:ea:78:62:34:8c:
f2:f3:89:a5:e6:c7:b2:0e:55:60:ba:a7:6f:57:38:1c:2d:e5:
6d:eb:ce:f7:ea:d0:a7:30:95:92:ee:5d:e5:c7:57:48:0d:0a:
55:1a:67:70:2f:40:3e:8f:3a:cf:d5:90:cf:17:bf:a0:3b:69:
df:c6:ff:8c:59:d2:dd:c9:b8:bb:99:7a:dd:f4:d5:db:a2:14:
27:2b:b8:b5:32:da:8b:24:a6:6b:b1:5a:bf:11:11:2f:ec:47:
41:b4:17:56:b0:79:a7:fa:ef:1c:3e:d2:c2:7c:e4:29:b2:cd:
de:33:3a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:51 2026 by rpki-client