Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e203232373733.roa
File: 3231372e3231372e31362e302f32322d3234203d3e203232373733.roa (raw, json)
Hash identifier: Mi2OnHLoIpdte07mst8hh7uEoZ5da7+K44IUfqtCFfo=
Subject key identifier: B6:94:AE:EE:C0:D8:E2:D4:5D:51:CF:7E:9E:DE:DD:52:DA:D0:2C:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A7A9BBF24917AFDEFD1EAFEF2BFA24C3F0259BD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e203232373733.roa
Signing time: Fri 27 Mar 2026 13:51:20 +0000
ROA not before: Fri 27 Mar 2026 13:46:20 +0000
ROA not after: Fri 26 Mar 2027 13:51:20 +0000
asID: 22773
IP address blocks: 217.217.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 02:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7a:9b:bf:24:91:7a:fd:ef:d1:ea:fe:f2:bf:a2:4c:3f:02:59:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 13:46:20 2026 GMT
Not After : Mar 26 13:51:20 2027 GMT
Subject: CN=B694AEEEC0D8E2D45D51CF7E9EDEDD52DAD02C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:43:33:e8:dd:e2:fa:01:39:36:92:e1:ba:cd:
24:9c:05:ba:e0:be:16:43:21:22:38:69:6e:42:3b:
02:1e:f8:e6:4c:2d:0d:24:89:1e:8d:b2:18:ed:3b:
ca:5d:c7:6a:27:13:b5:96:75:27:29:9b:6c:3a:7d:
73:88:4e:b8:b4:52:fb:b7:03:5c:fa:60:25:44:8f:
89:8a:96:64:d5:af:35:3b:85:9e:0f:2b:51:40:ff:
dc:d5:e0:d0:7e:e2:d8:e2:c0:0f:62:92:23:72:2f:
2d:1e:b9:e5:fc:29:23:f3:04:06:b0:61:5d:83:95:
3f:5b:e4:c2:71:eb:bf:10:64:44:5f:0e:74:9e:a5:
d4:74:50:e4:7e:1c:7b:87:aa:5e:a2:b0:b3:29:e8:
87:4a:e0:24:d8:18:e3:e5:6d:02:56:a2:0d:f3:c3:
24:d6:a4:7a:b9:0e:8e:8b:64:50:fc:64:5a:cc:26:
b4:77:6f:76:81:7a:f1:09:55:0c:c0:32:3e:e4:e7:
f4:2c:41:89:aa:c9:30:16:2b:73:f7:37:d1:cc:11:
0c:1f:a5:33:72:02:d5:b8:33:cd:b5:14:9d:3e:c4:
9b:ff:9e:af:40:a9:d8:14:9c:1b:95:38:c0:04:bb:
bf:ce:87:95:55:65:38:26:e6:cd:2a:57:ac:ac:74:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:AE:EE:C0:D8:E2:D4:5D:51:CF:7E:9E:DE:DD:52:DA:D0:2C:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.16.0/22
Signature Algorithm: sha256WithRSAEncryption
63:3d:c3:cd:f7:6c:19:c0:1e:43:55:8c:ef:6d:c1:5b:0c:55:
ac:3d:4d:fc:de:75:54:d5:a5:e5:6a:3d:24:81:30:c2:81:f6:
92:96:bd:c6:c9:03:47:b2:ad:fe:82:73:ba:9c:7b:76:59:e8:
a6:fe:8c:fd:59:76:45:ef:5f:a1:44:dc:09:e7:3d:69:dd:9a:
db:cc:ed:17:91:31:e4:f5:34:df:54:69:11:61:8b:ee:40:a8:
b0:a6:e0:6b:73:6a:8a:e9:bd:2c:6a:7f:8e:9d:ad:8d:04:0c:
36:d0:9f:94:03:66:a5:e7:aa:3f:10:62:43:6d:32:f9:80:df:
e9:e8:17:15:44:2f:d6:9f:c6:e4:c5:cd:11:ca:98:8b:6d:3a:
27:32:07:41:5e:7f:b9:c0:7a:07:43:b2:70:7d:8a:4d:8d:cc:
b5:f9:2a:33:fd:7e:5c:df:f8:d1:bc:08:36:c3:3b:e6:e0:ae:
23:37:d9:14:9f:72:f4:ba:75:7a:6f:d4:6e:23:bb:6e:cc:fd:
6a:ce:a6:9d:ed:87:1b:cd:68:c2:d6:f0:fa:df:7c:b5:c0:b0:
b4:e8:33:83:a5:3d:01:07:c9:6f:62:ad:f0:8d:24:a2:83:66:
c6:83:96:e3:73:25:f3:64:47:6d:84:2f:fd:e2:b9:d9:5e:86:
65:d5:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:40 2026 by rpki-client