Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e203132303833.roa
File: 3231372e3231372e3138382e302f32322d3234203d3e203132303833.roa (raw, json)
Hash identifier: CU1JvzVLouSqvzHS/dATOSVKNkkeJVjcxvajL+G1xbY=
Subject key identifier: 7B:62:9F:8F:2F:12:C3:24:59:21:F8:B9:E7:DF:7E:3C:EA:E3:B9:1F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AF93E84A45516B1A79887D5DCFEE7B89BB2D7BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:49:22 +0000
ROA not before: Fri 10 Jul 2026 22:44:22 +0000
ROA not after: Fri 09 Jul 2027 22:49:22 +0000
asID: 12083
IP address blocks: 217.217.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f9:3e:84:a4:55:16:b1:a7:98:87:d5:dc:fe:e7:b8:9b:b2:d7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:44:22 2026 GMT
Not After : Jul 9 22:49:22 2027 GMT
Subject: CN=7B629F8F2F12C3245921F8B9E7DF7E3CEAE3B91F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:22:56:fc:82:13:40:1b:33:44:11:92:d6:
cb:60:62:1b:1d:77:7d:e1:b7:42:14:a8:50:31:1b:
76:85:d4:54:45:f1:5e:ab:1a:1e:99:4c:22:d1:36:
9e:16:3c:1e:eb:c5:ba:c2:15:55:50:66:0b:c9:33:
e0:15:61:e3:4d:2e:8c:76:c1:b0:74:99:9d:c8:1b:
0e:6e:e9:89:38:06:7f:49:db:15:08:7e:ac:ef:c8:
70:68:bc:6b:f2:ed:65:ad:e8:b3:4a:3a:1a:17:79:
a4:f5:3a:51:44:11:a6:59:78:cc:8d:6b:d7:03:84:
10:04:15:df:db:1e:56:7b:0b:cb:b6:23:13:e1:ba:
bd:72:40:c0:b3:8f:04:76:b1:5c:9b:4f:96:a2:4d:
52:5e:9c:08:31:df:cb:c4:d6:c4:6b:4c:0b:00:40:
65:9c:f4:4b:a7:26:35:e0:03:28:0f:a6:a1:c4:5c:
15:d9:e3:08:01:fb:af:d2:bb:ba:6b:9a:d8:17:a4:
96:9d:69:f6:62:6b:ef:59:36:3f:3e:51:a1:07:aa:
12:83:7d:ad:54:bf:42:f2:fe:3b:b7:3d:03:c5:ff:
01:f4:d2:3e:8d:b1:3a:9f:83:c0:81:74:8d:4e:89:
3f:a2:e6:12:62:23:6c:7e:9e:46:97:ee:db:d2:34:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:9F:8F:2F:12:C3:24:59:21:F8:B9:E7:DF:7E:3C:EA:E3:B9:1F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.188.0/22
Signature Algorithm: sha256WithRSAEncryption
14:6d:d2:f0:e5:04:48:eb:46:2b:1a:e5:1c:57:18:c2:8d:f3:
81:3d:f5:24:41:24:7c:0c:6b:af:d7:29:b5:a8:0e:60:f7:52:
b4:05:16:a4:d6:ac:82:cf:ca:fe:af:f7:cf:96:bc:7c:19:46:
65:81:d0:8a:5e:df:a0:07:c0:18:15:b5:1d:44:57:ad:74:79:
60:59:67:b6:d0:71:55:24:c8:c6:71:12:d7:82:cd:ab:2b:8f:
d8:58:ec:6e:fb:3f:82:55:2a:e4:33:ad:1f:f0:87:2d:8b:ed:
2c:52:3e:bb:83:1f:9b:27:8a:06:85:1a:74:7c:64:18:4c:98:
2f:c3:5f:7a:8f:45:ec:a0:eb:4c:ed:7e:d0:31:36:fb:7c:3c:
56:a5:33:e3:0e:9a:f1:94:72:31:0c:8e:c9:5c:6e:8d:44:ff:
77:38:31:18:70:3e:e6:b4:e3:0d:bf:62:a0:34:a9:ec:66:de:
08:22:d1:ff:de:82:85:89:94:68:38:f9:84:3d:c9:41:1e:4a:
c9:ce:1e:31:11:67:b2:63:5d:3b:2a:75:33:19:b7:39:49:62:
a7:a7:65:5a:e7:94:59:d4:a6:2f:4d:e3:50:51:cb:fe:c0:08:
c0:a1:07:a7:91:88:6c:ab:fb:37:ea:60:60:fa:9b:20:e3:31:
34:bc:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:46 2026 by rpki-client