Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e203330303838.roa
File: 3231372e3231372e3139332e302f32342d3234203d3e203330303838.roa (raw, json)
Hash identifier: 9ajagxCPjnwGGfsCqR9yIfYu25dCi2v1unY4BRqMwDc=
Subject key identifier: A1:C2:B8:2F:41:F8:69:28:92:A3:32:A3:91:B4:B2:F0:D6:F3:23:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 184864C9949EC44FF2AB963AA3867467F2776E33
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e203330303838.roa
Signing time: Mon 07 Sep 2026 09:33:57 +0000
ROA not before: Mon 07 Sep 2026 09:28:57 +0000
ROA not after: Mon 06 Sep 2027 09:33:57 +0000
asID: 30088
IP address blocks: 217.217.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:48:64:c9:94:9e:c4:4f:f2:ab:96:3a:a3:86:74:67:f2:77:6e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 09:28:57 2026 GMT
Not After : Sep 6 09:33:57 2027 GMT
Subject: CN=A1C2B82F41F8692892A332A391B4B2F0D6F323D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:b5:ba:d5:e0:e3:d4:bd:f8:f2:b4:89:d6:
00:bb:a3:f0:bf:b2:eb:2c:85:a4:31:ad:18:97:1d:
06:85:82:1a:7e:3c:50:2f:59:1e:1f:f0:ab:4f:59:
dd:1a:33:79:e4:d4:97:ff:e3:60:90:02:8e:04:39:
9e:91:6f:a2:f3:3d:ac:15:f1:ff:1a:89:7c:05:05:
32:0b:df:a7:e7:bc:d9:d5:8c:34:8b:b0:e7:56:ac:
d6:8b:13:3e:c8:4a:10:57:e9:1f:19:c5:ab:36:ba:
56:0c:06:2c:77:96:08:c1:bb:c3:b8:2c:e9:f8:69:
7c:2e:9d:2e:18:f2:51:c3:73:21:2e:56:d0:04:2b:
5d:68:5c:e8:d9:ee:91:74:95:10:a6:2b:ee:29:89:
3d:ac:2f:9f:e2:a0:f6:ae:88:90:fa:de:89:b9:62:
0b:cb:a4:c1:96:55:b7:1d:dd:bf:5e:19:db:da:55:
0e:c9:44:dd:2b:02:b0:17:f9:58:e3:28:d2:41:b0:
43:ed:85:83:bd:92:e9:06:5a:29:61:aa:5f:bd:20:
09:d2:9f:d2:9f:f4:f9:0e:ca:9d:cf:92:be:56:5e:
85:cc:4b:e1:06:8e:5d:4f:84:43:7e:9f:72:d9:53:
e6:0b:bc:10:d9:30:04:ba:f7:f3:95:35:84:6b:81:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:B8:2F:41:F8:69:28:92:A3:32:A3:91:B4:B2:F0:D6:F3:23:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e203330303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e9:0d:3e:ba:10:7c:43:ed:02:5b:88:c3:4b:47:01:8d:3f:
72:7b:98:3a:eb:a8:29:9e:00:2c:d5:65:f7:88:57:06:84:8b:
ac:ab:c4:89:11:3b:30:95:0d:bf:54:0d:82:0f:4e:4f:e6:68:
63:d2:9d:38:ca:29:1e:7b:03:56:e2:3e:20:8e:5d:1a:d1:bc:
2d:fc:2f:b3:1b:ed:a3:9c:00:34:28:ae:09:90:73:dc:ac:7e:
4a:aa:2d:65:80:d6:d5:3a:6e:4b:f7:9f:17:5d:2e:77:19:12:
bf:86:ee:66:00:bf:dc:da:aa:e4:6f:ce:cf:d5:af:dc:6e:42:
ec:06:78:5b:e2:df:65:fc:25:b9:b8:cb:a8:59:41:c8:2f:8b:
34:a6:01:0f:30:a8:fe:c5:83:5c:73:8c:93:a8:b9:5a:85:77:
b2:5b:4d:1b:74:55:25:be:38:89:1f:d1:77:a3:eb:b0:58:a0:
00:0b:b7:b0:3e:26:3c:c8:2b:b8:42:36:36:4b:64:10:85:cb:
f4:e5:b2:26:b7:8d:d9:e7:11:b3:9a:fd:e7:e1:5a:03:ce:59:
db:04:7c:e6:24:5a:08:c9:25:70:0b:9a:9b:35:ff:11:c9:dd:
79:66:d2:5e:ef:f1:60:8f:f5:60:39:4d:be:ec:20:15:52:b2:
b6:1b:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:47:11 2026 by rpki-client