Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: doSU+s6toW5/kahTpk4Zttb8+8zPNBOclo2Te+78e7s=
Subject key identifier: F9:2D:B4:72:36:E7:98:0E:9C:13:37:8A:3A:DD:0E:86:41:82:0F:EA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36BDE703E954838C56C95143744B2F5A47F503ED
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
Signing time: Wed 07 Oct 2026 11:17:26 +0000
ROA not before: Wed 07 Oct 2026 11:12:26 +0000
ROA not after: Wed 06 Oct 2027 11:17:26 +0000
asID: 834
IP address blocks: 217.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:bd:e7:03:e9:54:83:8c:56:c9:51:43:74:4b:2f:5a:47:f5:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 7 11:12:26 2026 GMT
Not After : Oct 6 11:17:26 2027 GMT
Subject: CN=F92DB47236E7980E9C13378A3ADD0E8641820FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:da:08:23:be:ce:da:89:22:d8:47:e0:00:
fe:10:e5:3f:4f:a6:55:bf:f3:e0:d6:20:73:37:12:
3b:3d:3b:8f:a7:19:cf:b4:5b:2f:5e:f5:6e:01:ba:
7b:80:87:91:d5:4f:6d:80:03:33:08:d3:43:bc:48:
77:b6:1b:d6:ef:8e:4d:ab:d9:89:dc:ff:b2:2d:7f:
39:a3:dd:8e:c2:cf:84:95:ff:c2:c2:3b:d3:b0:01:
b3:cb:88:e4:a1:fd:7e:3c:4c:30:0f:31:c5:dd:d8:
17:19:77:93:d5:aa:b3:3a:f3:13:b3:b5:75:98:ea:
8f:3f:ff:17:4e:06:ee:96:e5:a1:cf:48:82:ce:d2:
ef:cf:62:2a:a5:cc:a3:4b:be:c8:74:c9:32:82:76:
5a:0b:ed:32:f1:da:6b:5a:1b:bf:0c:8e:0a:07:19:
73:6b:be:41:36:e9:53:36:d1:ae:b4:77:c3:37:e3:
1f:2c:7b:0f:44:03:3d:df:0d:67:2b:95:df:bb:f3:
9e:40:6c:e1:f8:97:e4:65:e6:a8:b3:bc:29:ae:64:
8b:84:87:90:26:60:3c:96:21:ca:58:99:dc:64:00:
5c:60:06:a3:9c:ff:df:c3:8f:6f:2b:af:59:29:91:
c9:91:44:94:02:14:13:cc:1a:6b:71:c7:23:0d:f3:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:B4:72:36:E7:98:0E:9C:13:37:8A:3A:DD:0E:86:41:82:0F:EA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:bc:dd:7b:98:11:ff:c7:ee:97:39:c2:e1:4e:0f:67:74:53:
f2:93:4d:3a:1c:08:c8:56:08:1c:54:5d:76:db:15:ef:7f:69:
41:62:c1:ff:a0:7f:1b:a7:09:b5:a2:1c:6b:e6:5c:ad:c5:5f:
ee:57:ce:86:95:fc:39:7f:8f:4d:bf:3e:58:9a:56:4d:36:a4:
33:1c:92:dc:c8:38:af:b4:ee:5e:1f:ae:59:74:34:c2:7e:8f:
bc:d7:1d:71:02:b1:5d:9c:ff:7b:56:3f:2b:58:8d:1e:e9:13:
cb:1f:e8:70:3b:d4:fb:eb:de:a8:23:6d:4e:29:60:d2:72:e3:
8f:a8:26:c0:f7:76:73:a6:bd:e9:76:33:78:49:12:2e:e3:75:
4c:05:3d:ad:cf:dd:d8:9a:b5:ed:55:23:34:dc:30:1b:68:0c:
fd:10:9c:37:3f:6f:8d:3f:e5:4d:73:3d:17:b8:12:ea:b6:3a:
9a:16:b5:40:b2:c1:8b:80:e5:2d:a1:d8:c2:fe:81:1a:ee:24:
69:4e:05:7b:76:9a:0e:6d:b2:eb:00:a9:2e:0e:70:03:45:98:
09:51:aa:09:e8:89:d8:b2:68:0d:d9:99:ee:4a:f6:ee:7e:f3:
64:44:67:88:a2:2e:93:83:5a:d7:80:7b:69:6d:16:73:fb:a7:
bc:d2:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:51 2026 by rpki-client