Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e2035363530.roa
File: 3231372e3231372e3138382e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier: u48CUUuuem4ufqW2WbqoyPWnHYVQzj09CcnmRw92dYA=
Subject key identifier: CF:73:69:6A:00:00:4D:68:91:C4:4F:98:76:25:70:08:86:EA:E7:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BF082E1C430DBC02781887681F2CD6FE56220CC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e2035363530.roa
Signing time: Sun 12 Jul 2026 11:58:29 +0000
ROA not before: Sun 12 Jul 2026 11:53:29 +0000
ROA not after: Sun 11 Jul 2027 11:58:29 +0000
asID: 5650
IP address blocks: 217.217.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f0:82:e1:c4:30:db:c0:27:81:88:76:81:f2:cd:6f:e5:62:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 12 11:53:29 2026 GMT
Not After : Jul 11 11:58:29 2027 GMT
Subject: CN=CF73696A00004D6891C44F987625700886EAE7F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:16:53:21:6d:bd:04:e5:33:56:4e:00:68:
c2:13:da:e1:5e:aa:a0:66:b7:10:9d:54:d9:d0:5b:
da:4f:e8:29:6c:17:e1:e3:d7:64:3a:76:30:e4:54:
8d:c7:6c:a7:0f:5d:46:f4:b5:ec:87:05:da:d5:57:
1e:ec:ac:e6:39:aa:30:78:ab:d4:97:2a:64:78:18:
96:36:60:0d:53:8e:54:d9:9b:da:4e:4d:68:0b:cb:
f9:37:1c:6e:2e:8b:b7:93:6d:39:82:f1:57:30:d6:
a2:1e:b1:21:e5:03:75:4f:9e:0e:26:4f:ff:0a:6e:
68:6c:cc:c3:31:87:8b:d0:a9:07:58:39:42:4a:04:
0d:38:46:56:0f:ca:cf:ce:e2:8d:d2:5e:16:fc:e1:
08:13:f1:eb:dd:6b:f3:f8:53:98:77:09:3d:5d:f6:
14:1e:28:a1:15:b5:ec:93:6d:54:54:63:3e:42:4c:
43:c4:27:ab:20:05:18:9b:bf:77:6a:41:6a:08:e2:
24:d4:56:56:1c:28:a6:6e:6a:0e:9f:e2:d6:c6:1e:
28:8c:03:51:c2:2e:d0:a4:3d:98:b6:96:f5:80:a9:
39:e4:e7:c2:c3:28:1f:a0:7e:ea:4f:5c:50:3c:5f:
ee:f5:95:91:89:34:e6:84:30:06:4f:0d:ea:28:90:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:69:6A:00:00:4D:68:91:C4:4F:98:76:25:70:08:86:EA:E7:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.188.0/22
Signature Algorithm: sha256WithRSAEncryption
49:45:62:73:83:b4:15:73:3a:8d:9e:05:5b:10:93:fd:01:92:
09:ec:77:c8:bd:bf:f8:e2:e7:a4:14:c7:ac:74:d4:f3:eb:b4:
f6:f0:87:70:68:08:fe:42:28:6e:da:ab:30:c4:c9:c5:d3:db:
d4:0e:3c:19:d9:e2:6f:f4:93:aa:e2:4b:bb:d3:cb:35:e2:23:
93:13:d4:80:6e:82:c0:a5:76:17:0d:3e:93:4a:59:be:4c:82:
22:80:ff:ec:9b:26:be:05:73:1d:df:96:59:4c:14:b0:d8:44:
33:7e:63:c3:07:62:0f:9d:9d:3b:67:5d:a3:44:a7:97:47:21:
64:97:fd:d6:66:a3:39:bc:63:21:ca:d5:65:4d:4a:4c:0b:ae:
a8:53:2b:0b:e9:8e:cc:fe:15:d7:39:5a:c7:59:43:5a:63:81:
00:2d:16:cf:e9:64:1b:a3:29:b5:e7:98:97:da:16:4d:e6:07:
83:38:3a:b0:9b:79:f2:5d:23:22:d3:3f:13:7d:46:9f:c6:e9:
50:f0:42:40:ee:33:28:a4:b9:f8:14:f1:7a:9f:ca:a3:86:9b:
2b:9a:46:3f:36:17:35:6f:2d:8c:07:79:b2:a2:0a:b6:53:5c:
e9:d2:75:1b:c0:10:b0:30:24:95:81:ff:04:d9:8d:b7:c5:f3:
6e:90:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client