Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36342e302f32322d3332203d3e203430303231.roa
File: 3231372e3231362e36342e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier: 9T5OUI79/Y/CrKh73R1g9cL42lw8w8i9N9gM5nfT3Uk=
Subject key identifier: 35:FF:71:A3:52:3C:7D:40:BE:D2:3F:71:03:7C:FE:07:83:27:46:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B9D4E5676C60328DB3C2AC896B05061843167E8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36342e302f32322d3332203d3e203430303231.roa
Signing time: Sun 04 Oct 2026 13:29:37 +0000
ROA not before: Sun 04 Oct 2026 13:24:37 +0000
ROA not after: Sun 03 Oct 2027 13:29:37 +0000
asID: 40021
IP address blocks: 217.216.64.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 18:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9d:4e:56:76:c6:03:28:db:3c:2a:c8:96:b0:50:61:84:31:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 4 13:24:37 2026 GMT
Not After : Oct 3 13:29:37 2027 GMT
Subject: CN=35FF71A3523C7D40BED23F71037CFE078327462C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:c9:b7:f5:bd:aa:87:c4:8c:7f:fd:43:b2:
af:e4:e2:a0:28:89:0c:85:37:82:eb:38:07:61:0c:
e6:a6:1a:43:89:9e:ec:98:b1:92:5f:38:57:c6:de:
53:78:8a:50:84:1d:f1:71:f5:eb:e5:6f:79:65:0b:
46:b0:3c:b0:d3:c1:62:6c:27:a3:48:42:65:2d:58:
4d:13:ef:f4:04:0e:87:59:ae:c3:0f:a1:7b:63:29:
d7:bb:a9:71:9f:4d:f0:96:e2:c8:12:c3:0b:00:31:
f6:f2:16:7e:39:60:90:81:86:f7:be:ee:59:64:99:
a4:13:20:89:5e:eb:0f:ac:f9:a8:88:e5:f7:a6:b2:
bf:cb:6e:f0:26:29:c4:96:13:ff:66:06:db:0a:16:
e8:91:d3:13:7c:70:8f:a0:82:c6:bf:28:28:5b:e4:
2d:17:6f:5d:bb:84:36:13:51:fc:18:8c:f9:81:a2:
7d:aa:ef:bb:3c:4a:85:99:e2:f3:e2:49:fb:8c:18:
b3:2c:87:2f:26:b4:bb:07:7f:b4:b6:98:ae:c8:ac:
1e:95:96:56:4a:19:e8:85:e8:97:07:c3:72:e7:41:
8f:a3:f8:52:3e:fc:60:e0:e3:a5:09:01:66:40:7d:
48:8e:58:02:24:60:21:46:76:8c:65:8e:59:66:ff:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:71:A3:52:3C:7D:40:BE:D2:3F:71:03:7C:FE:07:83:27:46:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36342e302f32322d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.64.0/22
Signature Algorithm: sha256WithRSAEncryption
44:5b:aa:35:77:db:98:3d:16:67:d3:a1:d4:4c:e8:34:c6:b7:
93:97:aa:7d:32:99:5f:c7:c1:96:69:cc:ed:2e:79:38:2f:b7:
9e:26:66:21:72:d0:c6:83:41:50:ba:21:0b:74:b6:4d:ae:70:
de:56:2c:e3:bf:82:54:2f:9b:40:e7:f8:2a:b3:25:0b:32:88:
f7:4e:2a:ec:ee:a6:de:81:7d:90:11:45:0e:a4:ff:13:8a:f8:
90:84:7d:d6:60:92:66:26:5a:a3:00:9d:04:68:57:f7:23:2f:
8b:5c:a8:0e:6c:f4:3c:54:94:fa:c7:17:29:73:bd:70:ba:39:
14:c9:46:5f:d2:ce:84:52:36:ea:cf:fc:11:ec:38:8a:ff:8f:
80:61:dc:a6:4a:d6:9a:e8:a4:de:a4:b6:bb:8c:e2:a5:ab:94:
7f:35:34:b3:9a:8f:a5:ac:0d:9a:1b:b4:0b:d5:93:ab:45:19:
86:80:b7:71:45:41:00:99:f1:8d:af:3f:23:33:a1:80:e6:ae:
0d:28:dc:17:cd:e7:90:ee:6f:f7:08:67:da:f4:2e:bf:41:ea:
b3:4a:be:50:b6:32:17:28:fb:5d:3d:5f:ad:64:14:0d:a2:8a:
4d:15:a9:71:fb:25:4f:9b:6e:9b:aa:f2:2d:4b:5d:09:61:d9:
47:9a:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:31:22 2026 by rpki-client