Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20323139303638.roa
File: 3231372e3231372e3230342e302f32342d3234203d3e20323139303638.roa (raw, json)
Hash identifier: Nlpi8YXvTqy9mWfqAEMzQZo1o5raRLJpXPiKF4/U1b4=
Subject key identifier: 35:06:7D:52:BB:69:1E:19:EB:67:7F:2A:D7:FD:5B:72:3D:EE:DC:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66A1AAE706A3A9E3A289E171DDA19F9147E6C0C1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20323139303638.roa
Signing time: Wed 12 Aug 2026 08:12:07 +0000
ROA not before: Wed 12 Aug 2026 08:07:07 +0000
ROA not after: Wed 11 Aug 2027 08:12:07 +0000
asID: 219068
IP address blocks: 217.217.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 01:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a1:aa:e7:06:a3:a9:e3:a2:89:e1:71:dd:a1:9f:91:47:e6:c0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 08:07:07 2026 GMT
Not After : Aug 11 08:12:07 2027 GMT
Subject: CN=35067D52BB691E19EB677F2AD7FD5B723DEEDC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:45:96:13:0e:15:5a:24:9d:ee:f6:df:f9:
d4:d2:44:9f:98:84:55:91:44:2e:49:76:52:d1:0c:
81:a2:44:ed:41:9a:0e:01:77:d0:d3:9a:38:fa:70:
0b:02:2f:ea:38:f9:0a:a9:b6:81:52:e6:42:7c:98:
1d:c6:93:22:b6:86:fe:ad:3d:81:28:b7:17:a9:98:
e3:98:e7:70:bd:8b:dd:39:c2:77:71:34:03:3b:38:
ea:28:1d:f1:cb:6a:21:6f:4e:81:e3:15:56:c8:22:
b4:ad:c5:9b:18:84:2f:a5:67:64:e6:4f:20:98:22:
f2:e9:f0:05:c5:f8:f0:0a:fa:00:36:94:96:e8:d0:
ed:5b:df:fb:1d:77:a7:2f:4b:30:6a:45:0f:5a:fe:
80:d7:44:27:c2:f0:c5:1e:f4:4b:ba:dc:c7:99:3a:
30:3e:59:fb:8a:10:0c:9e:f5:2e:af:ed:de:25:50:
8e:aa:f2:c8:74:34:10:01:1c:66:d5:4a:2a:4d:be:
6d:d3:67:b6:b4:8f:27:79:fc:c2:a4:3d:75:88:73:
05:f0:48:57:8f:f0:35:90:dc:e2:96:c6:6b:84:b9:
c8:0c:d0:8a:dd:1e:2d:8a:e4:d1:3b:7a:94:64:40:
78:f9:e7:3f:72:cc:9d:91:3b:32:c9:5b:e3:c7:fe:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:7D:52:BB:69:1E:19:EB:67:7F:2A:D7:FD:5B:72:3D:EE:DC:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20323139303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.204.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d9:ab:dc:af:ee:0c:a5:76:ea:23:e7:2b:73:ef:47:98:ec:
6e:31:03:56:98:49:6b:19:a6:6f:a9:c6:68:48:3f:16:e9:97:
93:91:78:b8:3f:55:77:24:1b:a9:72:0e:c4:44:73:1f:ad:d1:
a9:2d:01:1b:fb:25:65:85:71:f4:1c:15:a2:4b:37:9f:69:2e:
d0:1d:b4:6e:74:51:dc:cb:95:06:f1:0f:e6:c8:be:c1:9f:80:
48:a8:61:23:7d:a7:84:25:d3:e1:0c:f3:ee:6e:2c:52:2b:d8:
4f:dc:4f:4d:d3:15:4f:88:38:78:e6:1e:25:72:9e:6e:d6:d5:
ab:f5:27:0a:64:ae:d6:9e:2f:c8:96:85:99:a4:cf:61:f1:ec:
65:d2:f9:fd:05:36:17:14:ff:34:72:9d:1f:3b:0d:23:30:72:
94:59:18:c0:4a:19:d2:a8:d2:d2:83:ef:5d:f8:b9:ee:b0:38:
b1:7a:ee:3e:55:cb:88:03:e3:df:29:98:74:00:31:c8:6e:13:
1b:8a:6c:6a:09:46:19:ef:19:fd:c2:17:ba:55:57:49:44:8b:
0e:1a:1d:ce:02:d3:04:a3:87:e4:62:f5:4a:74:28:81:8f:d9:
f2:85:4a:44:38:f4:86:2c:0f:78:d1:67:02:ff:d8:9d:7c:38:
cc:25:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 10:36:10 2026 by rpki-client