Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DVHSCEM7DH+jeSFkpfIVcvr6/vbUIRx9F3BuWaZ8l7k=
Subject key identifier: 40:8D:16:F5:68:3B:B8:68:2E:AC:9E:EB:AB:99:35:51:53:2F:B3:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DCED90C9028809D95346FA78EC732A0FB193C48
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Aug 2026 19:34:49 +0000
ROA not before: Wed 26 Aug 2026 19:29:49 +0000
ROA not after: Wed 25 Aug 2027 19:34:49 +0000
asID: 834
IP address blocks: 217.217.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ce:d9:0c:90:28:80:9d:95:34:6f:a7:8e:c7:32:a0:fb:19:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 19:29:49 2026 GMT
Not After : Aug 25 19:34:49 2027 GMT
Subject: CN=408D16F5683BB8682EAC9EEBAB993551532FB3FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:da:9e:fa:e4:b5:da:25:4b:ac:fb:5a:57:
82:63:d2:1f:ad:1e:27:97:bf:4d:1c:0f:59:9b:2e:
a8:07:1b:30:3d:20:4a:f5:10:e7:3c:89:2b:5c:4d:
f9:2f:70:ee:44:e9:6b:bb:f1:5c:e0:df:da:43:b1:
ec:35:97:15:47:bd:16:55:83:c2:67:e3:a4:3f:66:
c3:a5:47:00:11:fe:29:05:42:84:43:04:4a:52:d0:
3a:77:cc:c3:5f:fc:89:17:d3:75:02:59:0a:6e:58:
4e:5a:42:b8:a4:5d:91:49:b0:09:61:a4:f3:57:c5:
67:c0:4a:a1:39:e9:d5:e2:76:bb:08:82:0c:ea:f7:
f5:4e:bd:60:5a:d0:07:a5:74:5d:0d:98:37:6f:05:
71:b5:8a:82:24:20:fa:5b:dd:9d:47:e5:a4:1a:9d:
50:0d:35:e3:8c:3a:6f:58:e1:6a:12:3f:df:ca:d5:
71:af:d8:55:9c:54:77:bd:e4:02:6e:9a:a9:3e:c0:
82:06:66:61:f9:54:f4:ac:53:33:ea:9a:49:a5:a2:
bc:ab:3f:8b:4e:0e:1b:97:a2:06:ba:97:9c:a6:7c:
f2:5a:ac:6f:87:b9:cb:51:c3:ce:0b:87:12:2a:13:
b7:b5:a0:c7:f5:6a:e8:87:fe:d0:37:9b:70:c9:9b:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:16:F5:68:3B:B8:68:2E:AC:9E:EB:AB:99:35:51:53:2F:B3:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
94:50:36:ae:2f:63:1c:02:8e:6d:9e:15:7c:1a:6f:1c:07:22:
ea:5a:3c:72:67:3d:99:92:4f:c6:6f:6b:eb:9d:be:43:aa:ef:
49:5e:6f:3c:99:80:7c:b5:64:17:1d:af:c7:6f:36:dd:6d:3a:
c7:db:e3:25:8b:0c:00:93:94:95:3b:0b:e4:b7:7c:41:0d:78:
42:3f:6b:65:26:a9:5c:aa:86:41:d4:28:20:d7:ab:5e:a2:1d:
0c:48:92:cd:b0:81:45:ae:c7:58:54:00:aa:5d:77:8a:d8:96:
7d:d0:d9:0a:aa:45:35:60:94:02:ff:03:99:a5:ad:ad:92:58:
44:37:3b:a0:a0:a9:d0:64:4a:d5:32:73:22:89:5a:22:da:32:
b2:8d:af:48:30:3e:c9:3a:4c:ca:3c:a1:7d:19:ae:96:60:de:
2d:cb:17:da:32:b9:0a:4f:f6:e5:bd:5e:95:aa:03:15:25:0b:
97:b2:04:f2:49:17:f7:45:f0:46:57:fa:16:ca:6b:1c:36:d0:
8b:1a:2e:0d:98:89:5e:12:a4:73:b7:38:ad:3a:e8:20:fe:33:
32:6b:1c:53:ae:cb:3d:d5:40:b4:62:17:30:ac:e6:63:4d:1c:
66:cd:46:4a:06:f8:26:99:a1:b3:bf:4d:45:97:df:01:67:b0:
bc:18:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:06 2026 by rpki-client