Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e203438303131.roa
File: 3231372e3231372e3230312e302f32342d3234203d3e203438303131.roa (raw, json)
Hash identifier: QH3hQ5BMxOHJpuZSj1w4yq7LXyprrFuNswd4TVzITcI=
Subject key identifier: D2:57:64:82:67:26:61:19:A0:6C:C4:2B:CC:B5:73:3A:CF:CA:64:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 019C3F1FE5BDE3BB08B96BDA12B9875A4C402776
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e203438303131.roa
Signing time: Thu 10 Sep 2026 11:26:21 +0000
ROA not before: Thu 10 Sep 2026 11:21:21 +0000
ROA not after: Thu 09 Sep 2027 11:26:21 +0000
asID: 48011
IP address blocks: 217.217.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3f:1f:e5:bd:e3:bb:08:b9:6b:da:12:b9:87:5a:4c:40:27:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:21 2026 GMT
Not After : Sep 9 11:26:21 2027 GMT
Subject: CN=D257648267266119A06CC42BCCB5733ACFCA64D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:01:51:dd:40:61:a0:ed:06:3c:37:03:57:
ef:35:9c:41:6c:b8:e0:f7:24:d5:fd:ac:c2:ba:d5:
d1:24:f0:04:0b:ae:a5:5f:0c:5a:2e:56:ea:31:4d:
51:44:d3:3e:99:5f:22:f2:de:d5:b3:b2:db:83:25:
37:bf:5d:57:d7:37:1f:58:d5:f8:8d:9c:ea:e2:4d:
98:98:75:f6:f8:06:65:e1:8b:56:14:ef:15:0e:3b:
fa:d8:62:88:45:bc:dc:56:ba:a9:3d:af:9e:fa:8b:
13:4e:3a:32:af:4d:c3:49:7b:af:67:7e:84:96:eb:
2f:aa:76:3f:b0:1d:71:b9:b7:9f:f9:f9:1c:1b:33:
2e:99:a5:c3:a7:77:30:d9:df:02:d5:50:e4:9f:d0:
0a:82:f8:6c:e2:4d:85:31:40:0f:c9:36:a5:c4:f4:
46:ce:d9:ce:29:73:74:31:f1:99:02:ff:a9:22:0c:
c1:d3:99:e6:85:be:6c:7e:3d:80:d4:ee:ba:cf:ed:
d0:de:34:5c:7c:11:f6:44:40:83:6d:59:ce:56:2f:
bf:b2:48:78:c9:68:00:d2:cb:a4:cf:a0:9a:a9:ef:
52:47:83:df:9a:6b:22:51:8d:fc:c3:b1:34:33:6f:
ef:b5:46:92:14:96:0e:e4:df:b3:f2:c0:ce:6a:a2:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:64:82:67:26:61:19:A0:6C:C4:2B:CC:B5:73:3A:CF:CA:64:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e203438303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:61:ef:07:5b:19:b7:a6:ca:6e:77:52:26:a4:dc:68:95:d1:
55:98:06:16:06:f1:bc:1c:51:0d:f6:1d:7a:8b:24:b9:dd:ce:
05:35:05:60:62:2b:cf:a0:f6:50:b6:80:0f:6e:34:7a:f0:d8:
ab:50:29:fc:8f:a8:4f:2c:df:8c:73:64:c9:15:7a:2d:06:64:
43:0e:97:1c:53:8a:49:bc:f4:d5:70:88:6d:86:eb:e5:79:7c:
ab:3a:83:7d:6e:0f:58:9d:e2:e0:6a:61:87:74:58:6a:59:6b:
7e:a4:5d:b3:4c:fc:d3:59:4b:a7:5a:46:cb:1e:c9:6f:e3:2e:
1e:5c:ad:3b:08:dd:ae:db:98:62:16:4d:0e:d9:bc:bd:35:52:
fe:ba:78:37:82:23:fd:10:98:a5:b1:00:41:1d:f9:f1:03:ac:
df:0b:1b:f4:6b:ce:7e:2e:b7:b0:1b:c4:01:c6:31:2e:27:61:
1f:08:46:26:ff:0e:fe:a6:00:7a:32:e7:8d:06:68:b4:77:33:
5f:59:9a:79:74:e0:ff:3c:95:01:b3:67:e1:42:46:97:ac:cf:
e3:da:e9:fa:b2:40:bd:e5:35:df:a0:39:9a:d5:04:63:40:42:
e6:b5:c4:cd:fd:53:d0:4b:9f:ae:6b:57:65:0d:e5:2e:9c:57:
01:77:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:44 2026 by rpki-client