Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130332e302f32342d3234203d3e20313938373533.roa
File: 3231372e3231372e3130332e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: Xi+lo7SH2Q+oVhr99iPtiOniepL7K4CVJZUShhRKTKY=
Subject key identifier: B6:1F:AA:9F:6B:C0:7C:B6:25:56:92:BF:49:58:72:E4:3B:A7:2C:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6869CC5AB3674C94A8058A74BF152A0B04433E6C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130332e302f32342d3234203d3e20313938373533.roa
Signing time: Wed 02 Sep 2026 14:19:57 +0000
ROA not before: Wed 02 Sep 2026 14:14:57 +0000
ROA not after: Wed 01 Sep 2027 14:19:57 +0000
asID: 198753
IP address blocks: 217.217.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:69:cc:5a:b3:67:4c:94:a8:05:8a:74:bf:15:2a:0b:04:43:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:57 2026 GMT
Not After : Sep 1 14:19:57 2027 GMT
Subject: CN=B61FAA9F6BC07CB6255692BF495872E43BA72C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:62:09:32:d6:52:46:3b:af:1f:d5:f3:4a:
ef:0e:76:0d:f6:7d:04:91:67:11:c2:7c:6b:58:63:
91:22:88:94:ff:ac:60:5e:c9:14:01:61:3e:1f:36:
75:7a:41:67:5e:fa:4a:b9:b1:67:51:ba:7b:73:6f:
f4:d0:7f:9d:93:00:32:ae:fa:11:08:45:5e:ef:95:
8d:8a:5a:28:22:cd:a1:d6:23:93:6c:ef:80:dc:b2:
94:4a:f1:29:bf:65:bd:72:d4:13:03:1c:45:7a:e9:
f6:11:05:b7:64:d4:9c:50:9f:30:c6:61:06:ad:43:
f6:01:f7:4c:4d:a7:ff:8b:56:6c:cd:2a:f1:de:9f:
25:bc:ba:41:04:ba:5c:b5:64:5d:3f:2b:34:6e:79:
8c:1e:a5:c5:35:a9:9e:c2:72:e1:0d:d7:68:c5:26:
db:50:b3:50:0d:96:e3:3a:fe:d8:00:11:44:a3:f2:
db:ba:6a:e6:60:e7:75:42:c3:fc:ae:ba:10:e9:2b:
18:17:6d:29:5b:3f:65:78:df:d5:73:1a:eb:a8:0c:
fd:25:29:f4:95:01:19:54:ee:fb:9f:c4:63:2c:95:
4d:52:ac:84:54:6c:01:8b:d4:e1:cc:4e:3b:fa:a9:
fe:84:e0:d8:84:65:c4:fd:ff:fa:45:79:eb:cc:ad:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:AA:9F:6B:C0:7C:B6:25:56:92:BF:49:58:72:E4:3B:A7:2C:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130332e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.103.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fb:ce:20:08:60:0b:47:61:4e:f4:cb:7f:67:c4:d1:a7:80:
16:18:f4:f0:11:95:ca:c6:6f:13:63:2b:61:a5:42:de:a1:eb:
ff:f7:c5:39:01:eb:13:e9:5f:c6:ed:44:80:54:cd:11:5f:39:
c4:67:fb:56:66:2e:f9:b1:e1:0a:fe:fc:dc:ee:02:78:9a:4f:
8d:ad:fd:8d:56:cf:b4:9b:fd:f9:e3:fa:d6:47:13:5f:70:a6:
3c:0d:88:9c:0f:b2:f1:b3:ac:01:d5:49:c3:6a:19:86:4b:0a:
62:43:85:81:af:4a:f3:1a:81:51:79:99:8f:78:8e:69:06:4d:
30:3f:ca:54:59:e2:93:de:64:06:d0:32:a3:db:fa:2c:dd:52:
ce:55:79:9e:27:b8:44:cd:dc:20:af:47:2e:10:9b:a1:3a:7a:
9c:e6:03:0b:ad:92:d6:91:92:57:de:9e:e3:a9:ac:01:43:1f:
e4:5a:b0:0f:a8:6c:8c:5f:97:c2:38:4d:39:b1:c3:c5:cf:9c:
57:13:08:0f:f1:6d:35:f2:f9:de:90:82:1e:24:1e:b5:9b:8f:
d0:57:79:fd:f5:97:fa:4a:b1:b1:62:4a:bf:8b:38:25:50:5d:
a5:8e:6c:17:3a:39:a3:af:02:ec:e5:d3:46:75:3d:e1:09:b8:
50:63:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:54 2026 by rpki-client