Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e2035363530.roa
File: 3231372e3231372e3138302e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier: D3j7Oa8jdhBeGQepytd0Vy0lEwPZZht/pvtlxhcjppE=
Subject key identifier: 57:E5:ED:84:21:ED:EB:AF:EE:C4:8A:EA:6A:E9:14:19:41:3F:7A:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DFAFF56617E10C2A6ABA9CFD5A51BBC3ABEE865
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e2035363530.roa
Signing time: Sat 11 Jul 2026 09:10:56 +0000
ROA not before: Sat 11 Jul 2026 09:05:56 +0000
ROA not after: Sat 10 Jul 2027 09:10:56 +0000
asID: 5650
IP address blocks: 217.217.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fa:ff:56:61:7e:10:c2:a6:ab:a9:cf:d5:a5:1b:bc:3a:be:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:05:56 2026 GMT
Not After : Jul 10 09:10:56 2027 GMT
Subject: CN=57E5ED8421EDEBAFEEC48AEA6AE91419413F7AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:a8:e0:9f:95:9c:c1:86:75:d4:b2:a2:91:
06:7a:9a:c0:4f:64:08:70:35:f4:7a:1f:33:b2:c4:
bb:bd:53:b5:11:1b:91:60:b5:48:07:cc:6d:78:39:
2f:24:74:fa:bc:69:8a:ef:b8:5f:53:7a:21:24:77:
c0:88:61:87:d7:81:cc:a9:f8:ef:4f:9c:54:bd:39:
ff:6c:67:34:d0:c1:54:b5:8c:a1:24:3b:06:a8:a3:
f8:66:2c:9a:2c:11:e5:7d:b9:78:f5:6c:87:16:8e:
8a:95:36:66:ad:d5:b4:1f:b5:4f:f5:1e:b9:2f:50:
4f:18:77:5f:fd:18:89:3c:10:fd:01:69:6c:55:60:
ff:bc:db:8c:52:69:66:5e:e4:a8:16:c8:57:94:6d:
5b:3f:c9:e4:46:f3:f9:84:f6:ed:bd:c5:ae:65:2f:
0a:58:57:7d:66:3b:33:4b:eb:56:ad:e2:24:f0:62:
ed:42:00:dc:a9:89:1c:c6:d4:a6:b4:aa:4d:b7:80:
bc:30:58:f9:99:a7:1a:71:d0:38:85:6f:1c:e9:8b:
02:15:fd:14:fd:05:fe:93:e1:33:ad:cd:74:69:4c:
5d:4e:af:75:8a:0c:e0:ee:8e:50:0e:15:4a:8d:5d:
60:53:dc:1b:fb:0a:0d:54:da:f5:34:e5:73:72:67:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E5:ED:84:21:ED:EB:AF:EE:C4:8A:EA:6A:E9:14:19:41:3F:7A:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
26:1c:37:21:f5:ee:76:ca:3f:77:41:d1:21:b2:4c:71:cb:33:
05:75:db:e5:f9:ac:9f:18:45:22:b2:a3:04:89:ef:0e:1e:3b:
bb:f0:aa:c0:92:78:50:a3:41:2a:8b:eb:b1:b2:6e:74:d5:bc:
ef:ae:f8:2a:df:06:47:37:10:f4:49:11:38:1b:3e:92:a2:a3:
b5:ef:0a:c0:cb:7c:0d:e0:07:5a:9d:57:64:b7:4c:76:eb:8f:
90:6e:36:a7:cc:cb:8a:fb:f4:d0:6b:51:e6:51:c7:85:a3:10:
58:61:02:c1:ae:c6:9e:8f:9a:c2:82:2a:47:50:af:88:61:9b:
e1:b2:e4:72:9b:00:ce:1a:10:2e:59:ba:3d:f5:f1:36:58:4b:
b0:d5:66:98:65:ea:27:3b:b3:cb:d4:1b:5e:9a:47:4d:e6:d3:
b7:03:a7:23:f0:25:7c:9f:fa:ac:06:0c:75:2d:dc:8b:f8:6f:
68:ec:0a:e5:10:27:f0:70:6d:08:83:75:a9:ff:89:92:70:f1:
55:f2:9d:6b:6e:30:f6:00:3a:f9:3c:ce:55:0d:d6:81:65:d0:
ad:1c:4a:1b:b8:b1:ce:25:31:ff:bd:49:cf:3c:9a:a9:13:b1:
0e:db:48:87:ff:ad:cc:39:9a:58:a2:d6:ce:da:ae:49:e7:80:
46:61:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:49 2026 by rpki-client