Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132352e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3132352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: xyvnmsQ48f8pPEYGu6U4ZAwUx+ZNe6THZqDaaM1oGPg=
Subject key identifier: 80:A2:45:11:26:4D:B3:0F:A5:B2:22:9D:BB:76:98:7B:7D:20:AC:08
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7211D55D2DA7D89AB2247A15B0B556BD2571D15B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Jul 2026 08:26:09 +0000
ROA not before: Thu 09 Jul 2026 08:21:09 +0000
ROA not after: Thu 08 Jul 2027 08:26:09 +0000
asID: 212238
IP address blocks: 217.217.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:11:d5:5d:2d:a7:d8:9a:b2:24:7a:15:b0:b5:56:bd:25:71:d1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 08:21:09 2026 GMT
Not After : Jul 8 08:26:09 2027 GMT
Subject: CN=80A24511264DB30FA5B2229DBB76987B7D20AC08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:78:c0:d0:1e:46:55:75:75:e7:77:9f:b4:
30:37:94:34:09:f1:24:af:29:c7:23:66:21:5a:7f:
d2:7b:06:ab:01:cb:5f:b7:de:b9:9b:9e:a6:50:41:
22:80:01:f2:b8:82:87:78:77:78:94:b1:c1:5c:4f:
28:68:30:d4:90:f5:45:e8:9e:7a:05:a4:65:c8:18:
df:eb:79:8e:d3:1d:66:0a:85:57:51:b9:ab:24:04:
56:ab:63:a4:b4:84:d7:d7:67:1a:11:d3:f0:3b:25:
34:51:76:76:59:d6:cb:ac:57:75:71:d6:12:31:6c:
ea:d1:69:d8:53:e8:5b:f0:a8:3f:6d:cc:2f:c0:7d:
73:79:da:31:2b:14:1d:32:32:e8:38:64:88:3e:83:
da:a1:22:4d:88:74:2d:05:36:6e:b8:a9:f9:96:6c:
dd:01:61:e3:dc:f2:5d:72:f1:c7:d2:d7:f5:fb:2a:
7a:24:df:5d:6b:54:8d:c2:bc:07:30:5a:81:a5:89:
e4:4a:5b:d8:c6:cb:a9:c5:eb:1c:2f:ed:62:82:b8:
80:d7:b6:6e:6d:de:ca:f6:b5:4d:e6:45:2e:c1:ec:
0d:90:a9:13:45:88:57:26:42:fa:5d:46:dc:45:a2:
cd:33:82:4d:df:b8:56:82:61:fc:fd:cb:52:18:96:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A2:45:11:26:4D:B3:0F:A5:B2:22:9D:BB:76:98:7B:7D:20:AC:08
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:3e:e5:b6:85:e9:13:ca:7b:e8:5f:84:2d:47:c1:37:f5:5d:
3b:c1:54:c9:af:74:16:64:fb:ae:c6:fc:4b:5d:96:e6:d3:ac:
5a:4d:c3:b0:f0:36:31:f9:bc:b2:2a:db:ed:53:f3:c8:bf:15:
0c:00:84:e7:50:9d:5a:c8:e6:0f:57:35:5b:a8:7c:7f:48:6b:
46:fe:c7:2f:59:b2:98:b8:b8:cf:63:64:e6:28:54:c2:8a:c5:
ae:86:06:29:b6:59:07:53:b7:e1:6b:de:eb:3a:23:31:cd:d6:
30:57:e6:55:99:a0:f1:90:9f:f1:66:4c:75:98:91:8b:05:bc:
84:39:86:f4:ec:5b:e5:00:2a:be:44:1e:35:18:1f:9a:b5:40:
90:06:c8:78:b7:30:1e:84:24:a5:86:ef:c3:7b:f1:54:75:16:
19:91:d8:78:77:b2:85:1f:c7:28:50:3d:f3:78:73:2d:25:7f:
05:80:3d:b2:e2:28:7e:4b:6d:b4:04:54:38:ca:15:81:c9:34:
ce:a0:0b:1d:2d:2a:8c:78:bb:d9:c3:07:6e:85:ea:cb:6d:e4:
71:cf:bb:1d:59:85:1f:cd:c0:9e:72:10:58:05:bf:e7:16:2c:
2a:fb:63:77:ea:46:89:12:e8:a8:1c:39:9e:2a:e4:0b:75:ee:
01:60:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:21 2026 by rpki-client