Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37312e302f32342d3234203d3e20323134313535.roa
File: 3231372e3231362e37312e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: 5QG9/aDUayQrZDQUfHg+XhtyznwU38B4fROypN/xQTE=
Subject key identifier: F1:6B:EC:0C:5E:AD:CF:0C:9B:D7:3E:B8:EC:DD:CE:A5:4F:85:10:8A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 202BFA8B40B60669B46DCAF4D568EED9DF458465
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37312e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 14 Oct 2026 16:29:45 +0000
ROA not before: Wed 14 Oct 2026 16:24:45 +0000
ROA not after: Wed 13 Oct 2027 16:29:45 +0000
asID: 214155
IP address blocks: 217.216.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2b:fa:8b:40:b6:06:69:b4:6d:ca:f4:d5:68:ee:d9:df:45:84:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 16:24:45 2026 GMT
Not After : Oct 13 16:29:45 2027 GMT
Subject: CN=F16BEC0C5EADCF0C9BD73EB8ECDDCEA54F85108A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:57:95:70:10:b7:58:ff:ac:f4:1c:ab:ab:
04:9a:34:a7:ef:e4:66:ea:35:c4:e0:eb:6f:e1:58:
cc:ac:f1:18:45:39:c0:f8:da:56:94:db:a3:f2:9a:
9b:24:f6:10:56:a1:c1:f7:46:09:28:39:ee:9f:0d:
18:55:54:96:18:b5:32:6f:ba:1e:4a:69:49:8b:88:
7d:cc:50:1c:25:a5:b0:77:47:78:cd:31:3f:43:33:
2a:23:60:a1:55:88:71:47:7c:50:b7:4b:94:72:7d:
d8:b6:31:b4:24:ba:69:4e:63:17:bf:8a:c9:fd:c1:
a2:d2:f6:67:de:7c:d3:29:96:60:bb:72:99:91:e8:
ba:de:4b:73:6a:fc:7b:39:c6:01:05:41:1a:6d:c4:
a1:a0:22:37:66:c3:94:80:c1:c0:8e:70:e7:e4:80:
b9:2a:ba:0e:21:b7:0a:92:07:c7:48:6a:d2:15:db:
bf:b4:04:0c:fe:10:23:58:d9:1f:0b:2d:61:bd:82:
ea:06:88:03:f6:5e:69:33:4e:7a:5d:43:39:0c:7e:
2b:33:a0:ca:92:a1:0d:41:0b:59:44:5d:85:83:16:
d9:0c:51:4c:e2:13:ec:5b:82:cb:d9:64:a6:65:0f:
c1:ee:b1:5f:88:d8:63:9f:19:4f:95:8f:f4:27:41:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:EC:0C:5E:AD:CF:0C:9B:D7:3E:B8:EC:DD:CE:A5:4F:85:10:8A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37312e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ba:c5:d0:76:38:f8:05:3e:65:a0:4a:16:36:ed:af:ce:38:
e7:cb:de:1c:ea:03:da:cb:b1:f9:8c:a5:38:b2:26:7b:70:72:
db:05:40:32:2e:e1:c5:a5:92:0e:80:09:98:de:ea:9f:27:0f:
6f:0b:75:bc:57:07:9e:2d:94:95:bc:a1:a6:aa:81:1c:48:61:
38:7e:19:bf:31:9c:cd:47:20:2a:0e:41:25:4c:ba:8a:ea:28:
b8:a7:ca:fb:8c:4e:52:87:3e:d4:ea:44:35:8c:67:59:ec:ce:
fc:17:e6:ed:f1:c1:f9:fb:b7:02:36:50:ac:96:50:7f:6b:31:
9f:98:15:37:d0:e8:01:6b:e6:e6:bb:4f:68:24:82:72:2a:be:
c9:e9:ab:fc:9b:03:13:a2:78:75:78:90:c9:58:c5:24:3c:fb:
c1:a6:b9:29:b0:60:96:58:e8:ba:0e:0a:e8:58:51:74:43:ee:
8f:6b:9b:70:22:72:e7:c2:39:59:3f:10:68:b8:2f:3d:23:61:
48:57:68:dc:4c:7d:5f:02:6e:88:c3:16:39:23:36:35:cb:67:
e6:19:7d:56:02:f2:89:43:0e:fc:4c:27:40:54:cc:76:08:ae:
6c:0c:ee:ec:5b:29:55:ba:a9:2a:54:b6:93:eb:42:8a:71:26:
64:a4:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:08:58 2026 by rpki-client