Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lUlKBftzGzvzd1NsLPeal7kiK6Co81H5nOVjNR6WBdo=
Subject key identifier: 2E:1D:56:01:0D:A4:47:AA:8B:02:F5:DF:C8:7B:C3:32:A6:80:E6:E2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6AA39463C2190749066C77426AC0F13EB4F1DEC3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:13 +0000
ROA not before: Fri 28 Aug 2026 11:31:13 +0000
ROA not after: Fri 27 Aug 2027 11:36:13 +0000
asID: 834
IP address blocks: 217.217.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a3:94:63:c2:19:07:49:06:6c:77:42:6a:c0:f1:3e:b4:f1:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:13 2026 GMT
Not After : Aug 27 11:36:13 2027 GMT
Subject: CN=2E1D56010DA447AA8B02F5DFC87BC332A680E6E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:c4:10:26:d1:9c:4b:5c:ac:e3:87:7e:e7:
f6:da:41:19:5f:e3:7c:3c:eb:53:8a:a6:6c:e6:45:
04:c7:86:cd:e4:17:e1:89:b9:65:43:5c:b1:69:9c:
d2:82:26:48:11:24:41:19:d3:5c:c1:72:15:e5:be:
b7:76:82:c4:7d:80:5a:86:53:fc:40:9f:09:92:8f:
63:f2:ab:e7:45:e7:27:e3:c8:a2:d3:a7:78:44:34:
d9:6b:08:45:a5:f6:8d:16:3d:ce:8c:b8:0c:56:f6:
d5:e8:19:c1:c4:7f:df:37:90:b4:d9:d0:96:9b:de:
d5:6d:1d:a0:21:9d:55:ee:24:a7:10:31:88:f2:8d:
ce:3b:a3:bd:35:26:5d:4e:73:f7:68:a9:bf:64:06:
fc:19:48:7f:9c:6d:3a:4d:69:70:4b:67:0a:17:32:
7a:eb:50:53:87:1a:f7:45:b3:a5:c9:19:b4:e6:ef:
21:11:f5:6e:3e:0c:18:68:64:aa:f0:cb:30:3d:55:
5c:47:be:59:dd:81:b6:9f:55:8b:17:c5:9b:a7:11:
ef:9a:7e:7e:07:74:17:fd:8b:55:29:0a:84:82:5b:
22:e3:40:9b:a1:99:05:ad:2c:81:ff:91:80:f2:16:
ab:1a:c4:60:1f:f6:22:d8:f2:4d:31:43:8b:e0:59:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:56:01:0D:A4:47:AA:8B:02:F5:DF:C8:7B:C3:32:A6:80:E6:E2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:65:9e:57:61:d1:21:0a:5b:fb:42:29:53:e1:20:d0:19:9e:
6f:1b:18:6e:59:af:ae:b5:f1:44:fd:93:95:b1:73:90:33:86:
ad:61:6a:32:0c:74:de:a1:d7:71:03:f6:f9:00:6a:f5:5f:2e:
c2:7c:4a:f8:a5:b5:2b:d0:06:7e:24:37:fb:74:9e:e5:db:88:
df:b6:22:df:2b:4a:d0:28:6d:55:81:ac:cb:7e:67:0e:99:a7:
c6:cd:a0:54:6f:63:93:d6:85:a3:77:12:32:0f:1a:3f:fc:fd:
16:99:e8:9f:b1:20:11:5d:0d:b5:8d:40:54:d8:ce:e5:82:a0:
e8:70:67:ca:f8:76:8b:c3:01:f6:e0:80:d0:66:a2:a2:02:7b:
4f:44:7b:5d:5d:77:8c:11:14:01:ce:c0:0c:2c:f7:a5:25:63:
a0:45:7a:2f:07:fc:30:fb:8a:40:c3:77:2a:82:d9:87:16:18:
8e:86:26:92:57:ef:ad:16:e1:00:5e:4f:cc:4f:ef:92:eb:91:
53:b0:13:e7:1a:80:ef:dc:3b:f0:b4:f8:e4:6c:db:f6:34:7f:
15:41:c6:d0:6d:24:17:cd:b6:2a:51:7b:56:6a:ef:f0:b1:7b:
98:e4:16:13:1c:fd:e0:5e:15:6b:d2:9d:77:09:99:03:f1:ab:
4a:b2:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:31 2026 by rpki-client