Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gxrgptmf5PdATvzGW3zGB/yslmCJWqKAckeqDMA4Atc=
Subject key identifier: A2:02:15:EC:B7:BF:83:CC:95:3E:39:20:0D:DE:54:3E:3D:73:33:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20D03004EAAC2A19B438383D0697B40FB51CC288
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Aug 2026 07:59:43 +0000
ROA not before: Thu 27 Aug 2026 07:54:43 +0000
ROA not after: Thu 26 Aug 2027 07:59:43 +0000
asID: 834
IP address blocks: 217.217.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d0:30:04:ea:ac:2a:19:b4:38:38:3d:06:97:b4:0f:b5:1c:c2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 07:54:43 2026 GMT
Not After : Aug 26 07:59:43 2027 GMT
Subject: CN=A20215ECB7BF83CC953E39200DDE543E3D7333C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:c3:a4:a3:6c:96:b2:77:26:70:a6:cf:1a:
fa:10:a0:bb:e0:02:e6:17:3b:6e:00:91:e1:c8:e6:
52:0a:85:8d:15:84:75:41:dc:24:e7:9c:c9:15:41:
3f:5c:8e:51:dd:33:b3:b5:78:23:36:c7:76:87:83:
0d:00:07:24:0c:e3:f4:12:64:d8:a5:bf:52:0b:20:
cc:66:56:e2:e9:48:dc:12:ba:35:7f:0f:5b:0d:7b:
10:0e:5e:39:5a:5f:e1:89:04:bd:a2:cd:2e:4d:58:
c6:71:7a:f6:0a:a4:c0:24:17:d6:59:3d:a8:76:ce:
bf:9a:6b:5f:24:d9:d5:4e:93:ab:ef:ed:a1:78:b8:
98:5e:d4:1c:42:64:70:51:9c:ae:6a:a7:24:36:75:
7e:26:00:4a:99:bb:ca:fe:5e:95:69:da:b4:59:c8:
83:0c:0e:45:1c:7d:91:db:1f:07:67:df:78:f6:fc:
79:2e:52:c0:7b:cd:0c:3b:8d:d6:26:6c:1c:0e:18:
6f:f7:34:02:4b:ee:6d:30:37:c9:d7:0a:5d:e9:6d:
f2:db:a3:d0:f5:9e:89:9b:df:4b:ba:0b:5f:90:ea:
95:63:c4:4b:90:4f:0c:ae:88:74:de:a2:e6:1b:d3:
fc:f4:f3:5c:7f:75:dd:4b:b6:df:f9:f9:cc:4b:c9:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:15:EC:B7:BF:83:CC:95:3E:39:20:0D:DE:54:3E:3D:73:33:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.196.0/24
Signature Algorithm: sha256WithRSAEncryption
80:77:6c:37:bb:a8:e3:48:08:8d:cf:94:f2:db:a8:46:b7:4f:
95:79:ac:9f:52:8f:c5:ac:db:d6:cd:1c:1a:5d:29:b7:58:36:
e0:17:e3:e0:a7:e1:52:68:31:e5:a1:33:e3:c8:d3:ae:74:16:
ad:57:9d:cf:92:2a:50:09:58:f7:38:b8:d6:32:9e:e1:b4:44:
99:e6:0c:18:fd:bc:17:fb:bc:7b:35:a4:89:a3:2e:80:d7:38:
c6:eb:bd:99:85:98:48:e9:95:fd:38:17:da:d3:3e:09:15:87:
a2:a9:41:42:a0:cc:36:81:9e:d3:ce:5e:8d:0d:89:63:3a:4b:
bd:28:55:b9:30:f8:d6:f2:1b:52:87:8a:78:44:91:a8:50:66:
33:47:86:ba:f5:da:12:33:66:a1:c1:f1:48:d1:59:af:e0:f9:
3c:3c:a4:da:89:77:df:2a:2f:e5:03:28:51:fb:15:6f:ca:8d:
1e:89:4b:6c:4f:7d:63:c4:e8:b3:26:d3:ab:51:0a:a1:e1:44:
04:84:29:c9:b7:44:be:9c:ac:07:6d:de:5d:75:72:9f:48:8e:
a1:9c:9e:f9:15:b2:69:bc:36:51:fb:5c:23:d2:da:e6:45:af:
c0:68:e2:41:b4:9c:36:ca:70:00:ec:8c:a0:56:e2:71:28:cd:
ec:08:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:35 2026 by rpki-client