Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130392e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3130392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: FL6PsEZ82NzEEcjWFqtIePNVAlM2qKFkoOlHoR1W//k=
Subject key identifier: 2D:DF:BC:58:10:F7:E4:B5:61:35:4D:47:9D:47:C4:88:DC:33:3D:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4BA7CF4AB040D9C3CC6E36DE85B65F3987DE211D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:09 +0000
ROA not before: Fri 03 Jul 2026 21:39:09 +0000
ROA not after: Fri 02 Jul 2027 21:44:09 +0000
asID: 216253
IP address blocks: 217.217.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a7:cf:4a:b0:40:d9:c3:cc:6e:36:de:85:b6:5f:39:87:de:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:09 2026 GMT
Not After : Jul 2 21:44:09 2027 GMT
Subject: CN=2DDFBC5810F7E4B561354D479D47C488DC333D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:c2:23:c1:04:80:05:f4:88:ed:a2:bb:cd:
e1:a6:47:a4:46:8a:62:15:04:cf:b7:4c:2b:b5:61:
45:c7:3f:fd:da:2c:7c:05:05:ee:4f:de:9c:0a:9a:
e9:b6:71:37:16:db:9c:76:5f:29:02:d4:a1:f9:89:
9b:21:ca:21:ac:8f:5a:e9:f9:52:ad:56:b8:d3:e1:
cd:e1:4c:da:6f:48:f1:cf:c7:1e:c8:11:7a:55:d7:
df:ca:48:00:b4:a6:67:50:a1:88:d0:c2:51:3c:64:
16:ec:98:ff:c8:44:a7:38:cc:25:b1:46:e6:11:a2:
fb:09:99:85:f1:d2:72:5f:0c:9e:77:f6:3f:82:7b:
85:b2:5e:37:44:70:c2:86:b0:94:ec:60:27:1c:68:
67:33:79:b5:57:b9:12:ed:0a:43:7c:22:04:23:4f:
f6:3d:75:f9:bf:46:a3:02:ab:f2:69:d6:6d:6f:37:
e9:47:60:f4:7f:00:17:b9:5c:de:dd:26:e0:06:48:
b0:24:84:c8:a4:93:8c:d0:80:e4:4e:d9:46:be:36:
37:08:8f:d0:ee:06:41:04:08:92:f4:da:36:53:a6:
50:96:f7:01:0f:d8:a3:50:64:c8:fe:4e:ce:63:89:
c1:52:f9:fa:ba:96:a5:cc:6a:8c:6a:58:54:8c:0d:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:BC:58:10:F7:E4:B5:61:35:4D:47:9D:47:C4:88:DC:33:3D:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f5:d3:16:ec:0f:b4:a3:0f:27:35:52:b8:a9:22:ef:4b:2f:
f5:5c:9f:5b:4a:5d:15:89:82:5e:f0:ee:9a:72:49:b5:d3:32:
04:a2:2b:c8:c8:b3:fb:af:5c:4f:bd:ff:f4:4f:c1:98:a6:e8:
1e:96:93:3b:08:51:e6:17:bc:d6:1c:2f:57:17:f3:fd:72:22:
21:9b:07:e4:c4:0f:ae:b2:14:9f:be:58:f8:2c:6e:5e:4e:40:
22:29:05:a4:0b:95:5c:5e:f2:b4:5f:03:7e:45:bb:35:89:74:
93:6a:8d:63:07:f6:ea:94:4f:bc:d3:82:51:d5:99:6b:c9:b1:
fc:ae:6b:30:23:65:bd:cd:39:b0:e0:9a:ea:af:11:21:84:af:
48:a5:78:ed:ed:0f:00:59:7a:23:43:82:bf:1f:5e:e9:a2:9e:
d9:a2:6c:82:63:c1:ab:b7:b0:97:27:db:d8:6f:4f:ef:3a:54:
ea:9b:5d:81:09:85:a0:cc:4a:fc:d9:e8:91:ef:1f:cb:a1:9d:
36:84:50:07:16:96:21:4d:db:cc:47:63:b0:e9:17:be:2c:8f:
c0:e2:a7:55:9f:ff:83:83:3f:af:1a:90:92:ea:37:39:ef:15:
9c:6a:ef:1c:42:b8:f1:f7:c4:2c:14:71:63:85:04:eb:74:4f:
cc:e8:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:45 2026 by rpki-client