Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e3138382e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: xJChIlGJRAcNmXqMEqxjwT1whrI4D37rGTm6vvt9gU4=
Subject key identifier: E3:CC:42:22:45:98:A0:C6:F1:FD:84:A1:92:FB:EF:E9:B2:76:B7:D9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28CCA563B09AD2B32564E1E050B0CD23A628B0F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e2037303239.roa
Signing time: Sun 12 Jul 2026 11:58:40 +0000
ROA not before: Sun 12 Jul 2026 11:53:40 +0000
ROA not after: Sun 11 Jul 2027 11:58:40 +0000
asID: 7029
IP address blocks: 217.217.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cc:a5:63:b0:9a:d2:b3:25:64:e1:e0:50:b0:cd:23:a6:28:b0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 12 11:53:40 2026 GMT
Not After : Jul 11 11:58:40 2027 GMT
Subject: CN=E3CC42224598A0C6F1FD84A192FBEFE9B276B7D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:dd:a0:25:87:e0:0b:87:ce:1e:1b:a0:5b:
3b:27:10:4b:28:87:43:5f:26:a6:41:57:31:d7:8d:
46:da:70:54:e2:db:6b:af:64:b0:80:91:a7:80:9c:
d2:fc:e6:02:3a:f9:74:46:0a:38:7f:ec:3d:7d:fe:
58:aa:b1:e6:ac:a9:1b:52:6d:6a:d8:a1:d4:af:94:
e0:61:cb:10:89:b5:2a:7f:0c:8d:cc:08:c5:d8:0a:
60:ec:22:ac:c3:67:1a:69:8e:7f:be:88:28:fa:ac:
23:a0:59:91:c0:4b:56:ca:d6:78:78:2d:08:3f:86:
28:51:ac:ae:00:e5:ec:ee:58:9d:42:ab:2c:eb:0d:
f8:bb:c9:78:25:09:da:70:12:23:4b:ef:01:38:ea:
c1:c7:66:5e:00:1a:6f:ef:e1:df:bb:6c:ec:61:8f:
6a:89:12:a0:a0:9b:36:b2:58:10:9c:74:83:4f:58:
30:e5:1f:3a:84:df:db:4a:64:f1:3c:52:3a:28:35:
62:83:a8:fe:9b:6e:35:a8:a7:03:df:52:90:e4:9a:
64:96:3f:b8:40:94:5d:56:00:74:7b:5c:4c:b2:21:
e5:cf:e2:59:f0:29:67:57:1b:06:3e:6c:76:eb:65:
48:a9:33:6f:db:2d:40:90:63:7a:1f:23:99:5c:a8:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:42:22:45:98:A0:C6:F1:FD:84:A1:92:FB:EF:E9:B2:76:B7:D9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138382e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.188.0/22
Signature Algorithm: sha256WithRSAEncryption
06:30:89:e1:1d:a1:76:f4:bf:66:76:c2:2d:9b:8f:4d:6f:b2:
59:2f:bd:b2:3d:96:75:30:b4:2f:d2:c5:1f:8e:f4:4c:5b:66:
84:3f:9a:09:c0:bf:7f:5a:8c:2e:85:09:e9:b4:20:7a:8c:40:
a7:8d:b0:29:7c:9e:4d:f0:d6:43:bf:9e:90:2a:58:a7:42:03:
67:b5:b7:08:40:46:0f:8b:f2:1d:db:43:ee:ac:c2:14:77:3a:
45:75:f7:5c:4e:d8:dc:a0:34:14:aa:b1:d8:28:ac:86:f8:bd:
48:fd:c0:bb:00:0c:96:77:47:99:45:bf:c0:fe:58:fd:c2:e9:
af:eb:eb:2b:4b:80:5f:26:74:b2:80:8a:29:e7:53:c8:e0:fb:
e2:0a:23:56:74:b9:ad:ce:89:07:c7:91:56:db:b0:94:44:0a:
36:b9:8d:44:31:7d:4f:12:44:86:59:b0:7d:93:e6:78:03:9e:
9a:e9:8a:59:cd:0e:f7:3d:87:8e:32:39:58:26:5f:62:fe:92:
c2:66:bc:0a:0a:5a:41:a0:cb:7a:03:c7:32:d8:c0:35:de:08:
b5:68:d5:47:9a:b9:0b:d6:d9:74:36:31:76:fc:86:3b:c9:1f:
a8:50:b1:f4:ba:8f:50:f5:dd:09:d0:62:b6:13:4f:24:4f:c1:
7c:9e:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client