Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Czi3NnBtcxn9kLaLF7iDbF+S9J0MfyAJEaj/H6cbdyk=
Subject key identifier: 4D:1C:CB:BB:B8:4A:E8:ED:89:9A:D2:79:9C:2A:72:53:41:00:BE:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73D0CA4E88FBA6714EB33C6195D9A8675EB0D8B6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:04 +0000
ROA not before: Fri 28 Aug 2026 11:31:04 +0000
ROA not after: Fri 27 Aug 2027 11:36:04 +0000
asID: 834
IP address blocks: 217.217.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d0:ca:4e:88:fb:a6:71:4e:b3:3c:61:95:d9:a8:67:5e:b0:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:04 2026 GMT
Not After : Aug 27 11:36:04 2027 GMT
Subject: CN=4D1CCBBBB84AE8ED899AD2799C2A72534100BEAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:52:70:98:17:3a:1f:2f:12:15:05:f0:d7:
a1:bc:c3:87:b9:93:b2:c1:05:a5:33:6f:bd:27:a8:
55:3e:e0:a9:4e:2f:de:18:df:04:6f:19:75:0e:aa:
8b:6c:1a:5c:21:80:15:4a:10:c2:6c:ea:8b:78:5d:
f3:cb:09:ed:76:d3:73:92:f0:3b:b2:6a:c2:5f:7a:
fb:f1:7b:5f:b8:15:14:ad:ff:ad:d9:37:9d:35:5a:
86:71:1b:dc:e0:89:f1:56:0f:45:a9:7f:74:5d:df:
97:61:0a:83:2c:72:28:27:00:31:e8:46:ad:c0:55:
56:d1:78:46:35:24:5f:3f:a6:ef:c7:6c:1c:67:91:
3c:d5:8a:95:80:3f:96:ac:f5:02:3c:82:59:99:a4:
46:a7:d1:f4:40:9b:fa:e3:93:1c:cb:23:31:01:38:
95:63:4e:96:d4:d7:f4:fd:69:f3:dd:98:c9:6c:fe:
5a:76:c4:83:de:89:da:0c:1e:86:58:4e:e9:3c:28:
1a:64:5a:a2:8d:c7:db:bd:db:d3:1d:ef:02:26:a1:
5c:71:bf:90:84:38:04:3b:03:02:a7:b9:23:53:a0:
66:2c:29:86:a3:76:8d:4e:54:ca:44:6e:47:5f:6c:
d1:26:d0:aa:b0:ed:54:cd:26:dd:07:d0:d3:dd:5b:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:CB:BB:B8:4A:E8:ED:89:9A:D2:79:9C:2A:72:53:41:00:BE:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.193.0/24
Signature Algorithm: sha256WithRSAEncryption
56:11:6f:d3:81:29:90:1e:88:f0:6a:09:bc:6b:ef:ca:8b:72:
c7:65:dc:ec:7a:02:9b:b8:d2:f5:40:7c:18:00:b9:87:d4:ec:
75:72:25:0b:27:1d:c6:93:66:d1:36:5e:aa:95:18:d0:7e:12:
ce:00:ce:1e:d9:15:f9:15:ba:57:84:aa:32:64:51:56:9e:d8:
94:79:39:0c:39:03:4b:0e:72:2d:45:25:6d:5e:10:9c:72:d7:
42:cf:b3:6f:21:18:c7:4e:7b:d5:dd:8e:40:ba:50:0c:65:fc:
77:15:2c:1e:00:c3:95:eb:d7:fa:e4:35:20:db:05:e9:19:19:
63:cc:23:95:b8:54:9c:f8:50:e3:c4:62:91:ef:ac:8e:d0:26:
f6:7b:7b:49:9f:b7:9f:4c:67:de:78:0f:d4:7a:88:1d:18:16:
cf:34:e2:27:a4:75:d8:14:ad:3e:cb:d4:4f:92:99:2a:ad:e9:
44:83:95:63:3c:51:31:f0:f7:b8:42:eb:16:43:52:db:89:81:
e8:fd:68:45:15:ab:97:ee:dd:34:37:44:52:82:1f:c0:6f:fe:
a4:07:d9:da:80:8a:86:63:cf:27:da:8d:6d:44:03:58:19:9e:
c5:3f:d0:a5:da:54:a5:fe:c1:99:41:0a:32:d7:30:4a:c4:e9:
45:88:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:34 2026 by rpki-client