Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132362e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3132362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: m/wG8epIRonJaNTwl2S7iGxR/8CHuF4uo5DHxBId8ig=
Subject key identifier: 7C:36:73:2B:9B:26:19:7E:C1:9B:E3:F6:BA:DA:8F:4A:70:45:D3:9E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 373CFC5F0928196D9575A6DF30D05FCE2B8EFF9E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Jul 2026 08:26:07 +0000
ROA not before: Thu 09 Jul 2026 08:21:07 +0000
ROA not after: Thu 08 Jul 2027 08:26:07 +0000
asID: 212238
IP address blocks: 217.217.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3c:fc:5f:09:28:19:6d:95:75:a6:df:30:d0:5f:ce:2b:8e:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 08:21:07 2026 GMT
Not After : Jul 8 08:26:07 2027 GMT
Subject: CN=7C36732B9B26197EC19BE3F6BADA8F4A7045D39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:65:97:c2:91:91:c6:10:18:0a:df:d3:03:
e2:09:23:bc:54:7d:ea:28:39:81:7e:fc:5b:6b:4e:
c0:88:da:2a:73:97:41:60:04:e8:c5:61:f6:7e:92:
04:94:1c:ea:f2:a7:9a:61:83:7a:89:b2:f2:d6:ce:
a2:a5:76:df:56:50:09:aa:68:72:53:43:ba:99:72:
42:5c:33:3a:ee:46:65:d0:d9:34:a6:46:24:19:56:
fd:a0:10:fb:09:65:c5:7b:02:f2:61:0d:2c:b4:71:
2f:d4:e8:4d:b0:fa:51:46:3a:b0:75:66:05:56:da:
ee:d9:ae:b8:ae:39:67:60:7c:68:4a:90:38:80:e4:
ac:cb:c3:2f:58:cf:a5:78:3e:db:0f:5f:64:d0:58:
31:81:a9:74:63:3f:c7:0e:b3:0d:22:af:5e:e7:3d:
5e:f4:8e:9f:43:ff:fc:87:f5:7d:db:2d:22:39:c5:
ae:73:e9:9a:16:64:c4:2b:7b:ff:0b:e5:eb:d6:fd:
1d:2e:fd:c1:e0:b9:41:4c:8a:58:08:74:50:5c:47:
83:65:7d:3e:bb:21:d7:60:63:67:c0:ce:c6:86:e6:
a9:32:8e:be:fb:c6:c1:35:14:41:ca:cb:63:cc:6c:
36:a4:7c:19:26:b1:0b:8a:0a:05:b4:2b:48:c9:3f:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:73:2B:9B:26:19:7E:C1:9B:E3:F6:BA:DA:8F:4A:70:45:D3:9E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.126.0/24
Signature Algorithm: sha256WithRSAEncryption
70:29:2b:a8:9d:9e:22:c3:2a:ed:05:6d:b4:d6:95:91:17:e8:
3c:4c:4a:ce:2d:f9:b8:35:a4:79:2b:68:f4:46:22:0a:a7:7a:
9d:ff:7e:ce:4b:ff:35:7b:ca:15:dc:0f:11:aa:65:6a:15:27:
c1:83:f7:d9:4d:bb:80:62:85:62:1d:f9:29:85:18:02:e0:c3:
ed:4f:e2:9a:68:fd:c9:3c:64:24:d8:c8:75:af:ed:9e:2e:8c:
4c:e4:77:b2:f3:d0:b7:4d:14:c4:06:9b:e8:84:98:10:4f:69:
60:57:a8:18:f1:12:e7:bc:12:d9:3b:33:e9:8e:06:69:fa:7f:
51:e3:f8:26:b4:2a:dc:28:68:93:74:bd:79:21:a9:05:36:5e:
85:29:47:f7:3b:1d:1c:c5:73:b3:91:d5:e0:82:6e:1f:04:01:
4e:5b:a3:6c:41:41:da:e9:22:82:e4:f9:f2:09:6c:aa:51:63:
9c:28:29:40:83:f7:6d:10:8b:6f:28:05:74:a8:2c:b5:2e:8c:
79:d8:8f:00:55:8d:e4:27:a7:c1:9a:2d:3b:95:3e:1a:67:a3:
d0:0a:39:04:7b:fb:0a:d6:94:c8:fc:8d:92:7f:92:66:06:f1:
b9:97:b1:01:f2:7c:e6:18:b1:ff:22:af:2a:08:8f:69:2a:03:
d4:5f:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:21 2026 by rpki-client