Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130322e302f32342d3234203d3e20313938373533.roa
File: 3231372e3231372e3130322e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: x/uB98zHTGu/cwAUX++Zr6cQZb3EVwAhcfN983tgVOM=
Subject key identifier: AB:05:CA:AA:63:F3:B8:63:AB:4B:CD:44:D6:53:0E:DF:D4:A3:32:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4117F7B435E3123F0EA322D9BE55E67448A9B32C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130322e302f32342d3234203d3e20313938373533.roa
Signing time: Wed 02 Sep 2026 14:19:47 +0000
ROA not before: Wed 02 Sep 2026 14:14:47 +0000
ROA not after: Wed 01 Sep 2027 14:19:47 +0000
asID: 198753
IP address blocks: 217.217.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:17:f7:b4:35:e3:12:3f:0e:a3:22:d9:be:55:e6:74:48:a9:b3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:47 2026 GMT
Not After : Sep 1 14:19:47 2027 GMT
Subject: CN=AB05CAAA63F3B863AB4BCD44D6530EDFD4A33228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:1b:93:c3:56:60:b1:3a:14:aa:c0:2f:a6:
b9:2b:b8:15:5d:5c:b3:3f:72:61:4d:89:11:f4:fe:
02:06:46:c3:a4:ba:bb:37:48:29:43:b0:2d:21:ae:
6e:33:06:12:16:0c:c4:b2:fc:cf:27:8c:32:d1:59:
16:97:fc:6c:26:6a:a8:0f:94:5c:c3:42:cd:73:47:
4e:16:c8:24:ac:32:be:95:76:29:9e:40:e2:9c:7e:
2e:3a:c0:6f:9a:33:bf:ad:00:05:e7:43:e6:e9:a1:
26:f5:57:fd:5b:15:a8:1d:0c:a2:a9:24:58:8f:f8:
4d:48:c0:b3:f6:70:2e:86:85:0b:de:f7:5e:a4:51:
18:bc:76:59:95:c8:61:82:3c:f2:4d:44:5f:8d:b2:
b7:a6:08:7a:1b:1f:7c:16:17:bf:77:88:0e:93:21:
c5:4d:2f:1d:44:75:12:62:df:2e:55:8c:b5:ce:13:
66:60:3c:72:55:ef:81:1e:73:97:ee:98:01:a3:11:
f8:c1:c1:3c:96:1a:1a:5e:8f:76:07:6f:4e:10:22:
70:a9:bd:24:bf:bd:1b:f4:31:57:eb:3d:08:f1:74:
4e:22:cd:62:56:bd:bf:7f:46:29:a7:e1:17:7c:75:
59:3d:7a:f2:44:3c:6d:f9:0c:a4:11:fb:1d:18:ba:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:CA:AA:63:F3:B8:63:AB:4B:CD:44:D6:53:0E:DF:D4:A3:32:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130322e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:ae:59:86:29:e5:ea:ed:24:ab:dd:a6:84:d1:6b:f9:f0:
b7:7c:98:27:43:04:11:ab:cc:44:fa:ab:d0:1a:01:b8:55:f2:
2b:3b:83:e1:0b:d2:a2:34:40:6b:df:e3:ab:50:70:f2:57:29:
a6:f5:2c:89:e8:30:6a:5d:7c:7c:e7:92:d3:00:57:c1:19:3a:
47:b4:73:91:be:6a:37:35:a9:47:7d:9a:bf:62:fa:0f:8a:bb:
55:50:b7:7e:e7:f7:8d:39:11:fa:d3:6e:9d:e5:08:e5:12:c1:
24:bb:b5:12:b6:ec:0c:6d:81:6f:81:2e:9b:35:3d:7a:60:f8:
3c:dc:6d:c8:6f:d0:8d:4e:e3:ee:d2:dc:a8:49:90:c3:d9:9a:
5f:28:d7:11:85:df:25:ed:35:96:e6:46:36:68:86:06:c4:bb:
95:68:c6:0a:ad:4d:aa:dc:eb:af:c2:38:73:ab:0c:9d:22:56:
b6:43:1e:61:d5:a8:f8:07:7b:fd:98:1b:0f:a6:1b:84:0e:54:
c4:43:19:48:2e:9c:e1:79:4a:7e:70:d4:75:32:1b:06:37:60:
11:e8:1b:f2:d1:a1:73:d3:c7:41:82:84:a5:86:a8:5b:3f:18:
e5:a8:b9:61:90:93:d2:db:a6:2e:f8:65:c7:4c:97:60:67:e2:
0a:f1:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:27 2026 by rpki-client