Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132342e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3132342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: TLVJ3+AcTYyuS+qK0OyooW0RHi9z+64tkoWtdOyPhMA=
Subject key identifier: 8B:EE:83:B4:A5:F1:BE:93:E9:53:6A:AC:23:DC:58:EF:53:07:87:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06F5EB041B0493DE6A95A5B92002E2E353C6C688
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132342e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Jul 2026 08:26:09 +0000
ROA not before: Thu 09 Jul 2026 08:21:09 +0000
ROA not after: Thu 08 Jul 2027 08:26:09 +0000
asID: 212238
IP address blocks: 217.217.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f5:eb:04:1b:04:93:de:6a:95:a5:b9:20:02:e2:e3:53:c6:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 08:21:09 2026 GMT
Not After : Jul 8 08:26:09 2027 GMT
Subject: CN=8BEE83B4A5F1BE93E9536AAC23DC58EF53078776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:33:e2:d7:ae:e2:10:7a:2e:70:24:ee:66:
e9:ba:c2:bb:ed:39:25:f9:9f:28:85:10:04:c9:3a:
5e:7f:4c:9f:f7:c3:52:63:b7:ab:c5:e0:76:47:5f:
de:f7:60:0f:46:1e:71:2e:05:1d:0a:ab:cc:2d:c6:
e9:ee:4b:4c:26:8a:4e:8a:7c:b4:33:c2:be:cb:3d:
72:e7:bd:fa:db:ce:70:dc:da:05:58:3a:e0:37:55:
cc:bd:3d:4a:6c:de:a6:9e:dd:da:d6:4e:f9:1e:ef:
f2:44:44:91:2e:ff:e6:dc:e8:69:6b:af:17:eb:a0:
c6:06:1c:3a:b9:f2:46:bc:86:4a:c7:2f:8e:e0:be:
10:3e:fd:dd:a3:b1:f1:da:ce:de:3c:2e:d2:dd:91:
0f:12:75:9d:d6:c5:4a:e4:fe:25:18:e1:5e:da:b8:
a5:a9:a7:b6:8d:8b:f2:e2:62:8e:d0:84:3c:7a:a0:
8f:97:f3:0e:1d:1b:6b:72:8d:58:63:71:7a:48:3b:
da:85:c1:af:b1:52:04:22:01:12:e0:8b:7c:14:0e:
10:81:bb:c1:29:8b:d0:50:ac:e8:14:f4:5e:dc:c9:
aa:31:d8:77:c8:7b:2c:a8:67:64:8e:f3:46:0d:f0:
59:a2:3d:52:95:b4:39:78:cb:f7:e5:50:92:bc:a1:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EE:83:B4:A5:F1:BE:93:E9:53:6A:AC:23:DC:58:EF:53:07:87:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.124.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c9:c3:36:ae:0d:f0:80:08:c6:aa:62:0d:42:c0:61:ab:bf:
b5:a5:ba:be:30:d3:c7:a5:3d:c5:95:cf:71:45:cf:f1:ee:b9:
c9:b3:d3:af:d3:68:8b:1c:b0:8c:f6:56:1d:0b:c0:32:4a:ff:
ed:2e:b8:00:fa:ce:86:e1:e1:92:23:a4:24:15:de:48:5a:16:
c6:db:a3:ae:4c:9e:e4:51:d0:6e:02:6b:be:a8:c0:3c:f5:47:
a0:64:7f:1e:80:6b:c1:cd:e9:5c:f3:c3:9a:33:92:e9:35:d9:
ee:34:da:a2:70:7a:39:00:9e:dc:10:db:a4:d0:af:90:82:46:
1f:2a:f5:33:5c:98:bf:32:35:ad:ca:64:bc:53:5a:98:80:50:
df:17:3a:ed:f7:90:b6:ca:0b:2b:fa:00:e3:ce:04:a2:a8:51:
a2:c4:df:5b:52:fb:b2:cf:c2:d8:70:74:0c:aa:f1:d9:b4:1d:
ef:4a:c9:d8:88:99:66:5d:d6:97:65:e4:ca:db:e0:87:eb:6f:
c7:ce:ac:80:89:7e:2b:16:43:39:f1:40:10:9b:2a:42:6f:b5:
13:6b:bc:03:2b:5b:2a:36:42:d0:1e:8b:45:e2:49:0b:c0:ac:
3e:c4:46:f2:04:54:43:c2:e9:15:18:5d:9c:72:c8:4d:96:4f:
b7:92:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:28 2026 by rpki-client