Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e32302e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: FTlgTuOQd4V+VO9JmFRcAHpN9t8pNTwaEubRttVYsRg=
Subject key identifier: 74:FB:95:19:96:91:82:24:E4:63:DE:AC:76:55:FA:D0:51:97:D2:F0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 59C4F4683599B46C8226E29A85CC76278E119870
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2037303239.roa
Signing time: Wed 24 Jun 2026 18:25:44 +0000
ROA not before: Wed 24 Jun 2026 18:20:44 +0000
ROA not after: Wed 23 Jun 2027 18:25:44 +0000
asID: 7029
IP address blocks: 217.217.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c4:f4:68:35:99:b4:6c:82:26:e2:9a:85:cc:76:27:8e:11:98:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:44 2026 GMT
Not After : Jun 23 18:25:44 2027 GMT
Subject: CN=74FB951996918224E463DEAC7655FAD05197D2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:c2:e7:88:6c:91:90:9e:cd:a8:01:5b:cb:
7a:de:77:8c:0f:17:1f:30:56:80:a0:0b:e3:8b:bb:
79:8f:80:c9:18:95:66:32:d4:e5:f2:05:53:47:25:
c3:28:7f:35:44:00:7b:72:3d:d0:70:19:4c:eb:72:
84:cc:3a:8a:88:c1:16:93:77:ea:0b:3b:21:da:3d:
d0:05:2b:89:cb:08:9b:0d:58:d7:c8:74:6b:2c:31:
8a:40:09:ef:40:5b:e8:29:53:5b:bf:74:8d:72:de:
93:ac:3c:d7:71:1a:44:c3:0a:b9:2c:4f:65:2c:3e:
10:98:63:ff:dc:22:6c:57:42:5e:5c:42:2e:d1:3a:
5f:a3:85:d3:26:22:f1:4d:ba:12:76:3c:22:1f:bc:
24:ce:29:4b:67:0a:53:dd:52:64:90:58:c8:18:4c:
aa:4f:c3:20:a8:f9:40:64:82:0c:e7:64:df:9a:5b:
ce:d4:f2:cd:00:4a:11:11:73:69:14:84:14:68:0e:
f3:7c:cd:d4:db:58:bd:0b:21:82:49:e3:97:da:af:
68:a7:87:4c:9f:6b:65:b7:86:1c:9f:08:72:4a:e9:
32:50:19:f0:64:2f:52:45:a9:b1:ce:2b:fe:98:d7:
15:08:0b:2f:6b:76:4e:c4:03:b8:65:fa:b6:c1:51:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:95:19:96:91:82:24:E4:63:DE:AC:76:55:FA:D0:51:97:D2:F0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.20.0/22
Signature Algorithm: sha256WithRSAEncryption
94:8d:ee:4e:16:8d:e6:3a:45:84:77:2e:44:54:31:6a:f8:70:
bd:6a:cb:6d:29:71:89:2b:87:f1:34:f6:89:77:bb:73:ff:2b:
2d:d1:2c:0f:dd:75:dc:cb:0e:1e:5d:18:eb:1b:05:44:78:de:
52:09:4e:8f:fe:23:f4:f9:08:ed:ed:ad:64:99:a7:34:33:56:
55:83:5e:24:fd:1d:c3:1d:34:5c:91:f9:e3:d6:95:82:9a:5c:
9b:b3:21:f8:9c:dd:6f:65:22:3b:4a:e7:02:d1:b8:22:af:c3:
b8:f8:b7:18:96:5a:cb:4f:19:ce:9b:f8:d6:50:bc:29:ed:31:
41:c2:b2:06:ad:c0:74:88:20:cd:59:77:d1:f3:fe:32:b1:d9:
c9:14:69:4c:43:ba:f7:f6:59:2c:59:ea:8e:4c:6e:4b:28:74:
c6:61:18:81:73:de:bc:ca:cc:46:3b:be:78:46:e1:8e:51:aa:
49:04:79:c2:51:0a:31:9f:a4:6f:9e:17:53:66:80:30:bb:6e:
cb:b5:15:8c:ba:76:88:25:42:f2:91:31:29:85:39:69:56:eb:
0e:46:65:47:f8:34:1b:ef:dd:a7:d9:cf:54:e3:aa:30:74:90:
5f:f9:79:34:de:07:85:0a:2a:5d:67:a9:02:89:f3:e3:67:43:
43:0e:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:51 2026 by rpki-client