Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e203438303131.roa
File: 3231372e3231372e3230302e302f32342d3234203d3e203438303131.roa (raw, json)
Hash identifier: jQfD7c4eyl9rRNI8wqNQyKCsDItWs+CBNByiIyF6CY8=
Subject key identifier: 80:68:36:5D:BA:56:B6:A0:7C:92:68:B8:3E:26:5B:92:B2:C7:F0:90
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1221C2EA3B9FDF7155D40E62865D0765A2A60A6F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e203438303131.roa
Signing time: Thu 10 Sep 2026 11:26:23 +0000
ROA not before: Thu 10 Sep 2026 11:21:23 +0000
ROA not after: Thu 09 Sep 2027 11:26:23 +0000
asID: 48011
IP address blocks: 217.217.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:21:c2:ea:3b:9f:df:71:55:d4:0e:62:86:5d:07:65:a2:a6:0a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:23 2026 GMT
Not After : Sep 9 11:26:23 2027 GMT
Subject: CN=8068365DBA56B6A07C9268B83E265B92B2C7F090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:1a:9d:58:27:a8:b2:1b:1f:8f:8b:b2:76:
1f:46:9d:8e:52:dc:a2:06:2c:46:b1:7d:2e:09:6f:
94:61:ed:1d:8b:d1:4a:27:0e:ca:fe:f2:19:b6:ea:
be:fc:b3:77:26:0f:af:f4:a1:dc:fe:de:3a:37:59:
cb:49:ae:80:7a:e5:00:d2:ba:97:1e:12:13:72:9c:
14:0c:b6:c7:e1:46:fe:b0:ed:e9:1b:df:45:d9:f6:
01:cb:ed:fe:4b:ae:84:3a:dc:e7:76:a3:e7:2c:cc:
72:3f:aa:c5:f4:b7:99:fa:0c:e8:47:52:bd:2b:0b:
b3:c8:c6:32:8e:e8:a9:52:2d:86:6d:20:fa:fa:9c:
68:e3:c0:3b:8f:ef:2a:91:71:17:39:b7:f4:75:92:
e6:b2:1b:ce:e3:01:86:e7:f4:e2:23:19:e6:b0:ef:
cc:15:66:0b:be:8c:fc:aa:a1:ba:ef:0a:55:11:a7:
66:db:c8:3d:0d:20:df:13:84:95:e5:2b:61:a7:3d:
8e:b7:85:ab:9f:2c:e3:08:ba:67:73:6d:83:c5:9e:
5f:e4:63:c5:42:0b:a3:9b:d8:34:e8:14:37:5a:f1:
54:4d:14:68:1d:25:b2:75:f2:15:58:4e:83:96:d4:
9b:b9:ea:ec:8a:3d:0a:85:a2:b5:eb:c0:5f:66:68:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:36:5D:BA:56:B6:A0:7C:92:68:B8:3E:26:5B:92:B2:C7:F0:90
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e203438303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2b:7a:aa:d0:12:21:4a:ad:83:77:fd:ec:7d:5b:2c:26:c7:
4b:e8:40:b4:57:b2:73:2f:29:9f:f5:d6:f9:6e:da:12:5c:bd:
b8:e7:6e:97:b4:a4:f9:d9:79:dc:8a:49:35:9c:d7:08:f7:6f:
69:58:e9:c1:bf:d5:85:5b:ee:ea:df:68:a9:54:7c:82:39:2b:
19:0b:dc:3c:70:85:6c:0c:b0:49:3a:4a:b9:d0:25:6d:98:e8:
96:8c:aa:ea:bd:06:ea:2c:94:be:9f:4e:d3:6e:76:18:03:de:
01:35:4c:bf:2a:e3:21:c2:49:88:66:0f:6f:88:a2:0f:8c:42:
1e:e3:ca:55:77:f0:36:90:ca:11:4b:34:3a:cf:2d:37:76:9d:
ea:1f:df:62:72:66:f6:58:61:e9:43:cd:54:b3:b9:6e:46:d9:
7f:3c:ac:f1:50:c9:a5:80:e2:84:14:fb:ab:20:25:a3:ce:78:
2c:ba:33:e3:33:39:60:1c:7c:1a:4e:2d:e2:c9:a9:e0:93:1a:
eb:7c:a2:ff:12:d0:91:25:62:15:bf:d0:71:f9:77:14:f4:d6:
ec:16:91:f6:d6:65:28:a9:9a:b8:b1:3b:c9:52:e4:b1:c0:f0:
29:dd:38:15:92:4c:d0:6a:46:6d:99:b7:a7:7d:a4:0a:15:54:
69:79:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:44 2026 by rpki-client