Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131302e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3131302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: qkHZlfBmztHX1CkmrU+4A9thkszhgrLI247jJrjifTw=
Subject key identifier: A3:1B:64:C2:54:19:FD:45:AA:06:F8:24:5D:49:0D:4B:A4:CA:8D:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40E59450CC2BA94DFCC9C5A2AEF06AD4FD128E35
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:10 +0000
ROA not before: Fri 03 Jul 2026 21:39:10 +0000
ROA not after: Fri 02 Jul 2027 21:44:10 +0000
asID: 216253
IP address blocks: 217.217.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e5:94:50:cc:2b:a9:4d:fc:c9:c5:a2:ae:f0:6a:d4:fd:12:8e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:10 2026 GMT
Not After : Jul 2 21:44:10 2027 GMT
Subject: CN=A31B64C25419FD45AA06F8245D490D4BA4CA8D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:a8:e6:25:58:58:e3:d7:2d:ab:1f:44:cb:
28:71:46:60:ee:0d:0e:2c:4b:f9:96:23:6c:b5:6b:
ce:d7:bc:b5:a8:ec:0e:86:0a:34:5c:2b:d2:f2:4b:
36:ec:c5:20:ab:a5:6a:9a:b4:ef:b9:45:6c:00:aa:
c6:51:cc:b3:a8:87:f0:d9:a2:b0:0a:9c:e0:05:5f:
f0:63:a7:9e:f2:70:f2:9a:94:8f:de:50:84:da:ca:
27:aa:ab:5e:55:01:f7:30:d3:b1:ca:41:19:54:98:
d9:04:85:f4:50:cc:65:02:1c:c1:4b:28:fd:bc:48:
26:12:72:d2:e1:40:49:aa:3c:14:2f:c6:e8:7b:c2:
91:39:7c:76:69:db:b4:33:84:f4:88:84:da:83:a1:
78:25:71:3a:de:f5:6e:06:82:77:69:0b:d9:2f:f5:
e9:18:08:0d:e4:ea:11:73:71:a8:86:f0:e6:31:e3:
33:77:c2:78:ce:05:d3:10:52:e4:16:0c:e3:49:c4:
e3:87:24:22:30:8a:68:57:46:83:4a:f6:5b:9e:eb:
79:ca:ad:71:08:0d:50:b0:46:07:ae:f0:f8:f9:ee:
ed:dd:0d:f5:f0:9c:f3:ff:e5:52:6b:b2:22:f1:e2:
21:d8:1a:ac:db:52:4c:d5:50:97:1e:c8:95:ed:bc:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:64:C2:54:19:FD:45:AA:06:F8:24:5D:49:0D:4B:A4:CA:8D:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ac:ae:5c:71:b1:56:0d:58:af:8e:6c:58:65:1a:63:7d:9a:
43:11:23:89:e5:f9:8a:df:d0:f7:21:c8:ec:c9:81:bc:16:ac:
08:3c:48:76:f9:ae:6b:81:58:c5:92:78:77:e9:60:3c:22:54:
49:45:7e:7f:70:2f:d3:6c:3f:33:f3:e4:2f:e7:3c:70:d6:e9:
1c:3b:ac:08:06:41:ec:c4:c9:bf:25:ad:93:c4:96:3c:b4:14:
19:18:bc:4b:6b:b6:e6:88:4e:51:75:b8:c7:6c:98:7d:bd:0e:
bd:d7:40:60:f6:69:fe:ba:13:3f:a2:9a:dc:3b:59:22:64:05:
73:47:38:66:dd:b9:2c:15:93:2d:42:61:58:4e:ef:db:1a:21:
71:cc:c1:61:22:0f:08:2b:1e:4e:2b:b6:c6:76:71:18:c1:72:
b9:62:65:6d:ba:d4:eb:a7:dc:bd:b7:d4:28:b2:ff:aa:fe:4a:
73:45:87:9c:97:c5:f9:fb:b5:1c:0f:7c:9d:73:46:a3:76:ca:
ef:14:0a:3d:82:c2:4b:ed:63:0b:f2:7e:d1:47:ad:56:f6:f3:
71:70:fb:d9:0f:2e:24:89:78:42:6b:8a:54:ab:d2:5b:59:c1:
fd:28:36:1f:ed:90:66:05:ca:d6:70:17:58:0b:f3:ab:b8:aa:
17:ed:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:46 2026 by rpki-client