Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dp+AEZ73y8usBOpx1TQuYYQT/K6I0O5CxuaaBxpMmvk=
Subject key identifier: CD:27:64:A8:48:FF:33:65:A0:50:4A:A2:B3:84:34:48:13:02:D5:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 590ECEB568CEEE549545890E715D9FFE73616A4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:09 +0000
ROA not before: Fri 28 Aug 2026 11:31:09 +0000
ROA not after: Fri 27 Aug 2027 11:36:09 +0000
asID: 834
IP address blocks: 217.217.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0e:ce:b5:68:ce:ee:54:95:45:89:0e:71:5d:9f:fe:73:61:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:09 2026 GMT
Not After : Aug 27 11:36:09 2027 GMT
Subject: CN=CD2764A848FF3365A0504AA2B38434481302D5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:dd:76:b5:29:d0:25:75:0f:14:03:2d:91:
f3:2e:0a:57:d0:eb:94:17:67:7b:8c:18:4a:08:20:
af:64:b6:bc:4b:16:3a:a0:9a:50:16:f9:79:10:a0:
e3:6d:3f:05:cc:3d:91:68:0c:b1:a1:34:13:b3:2a:
d7:50:87:59:62:43:0d:f7:1f:25:11:b1:48:c4:0b:
7a:88:3a:19:2e:f1:c8:ec:72:a4:b1:be:c3:18:7f:
1e:5e:dc:d3:75:d0:64:eb:d4:df:1f:2f:15:bd:4a:
f8:9d:8a:0c:8b:b6:dc:d4:e5:2a:51:5e:b9:c9:e8:
e3:bd:9e:53:92:15:2a:76:8c:58:cc:27:5e:2f:bb:
2f:84:e8:e5:b9:18:83:7a:c8:ce:da:69:66:0e:7c:
80:45:7a:f8:b6:65:c3:83:d0:24:bf:06:9f:04:6a:
63:dc:68:dc:93:ad:5e:4c:5c:ef:16:06:10:a4:52:
6c:59:13:25:30:93:c0:30:48:e5:4b:06:03:5c:5e:
06:56:e2:09:da:57:2c:5c:95:b7:84:1b:75:6d:3d:
b5:68:28:8b:d0:bb:f3:8d:8e:3a:d4:cf:d6:8c:83:
17:16:7e:86:88:7f:34:6e:68:18:f8:6d:66:4e:1f:
fa:76:13:8e:e9:60:8b:ba:a6:8c:9a:1b:3d:51:40:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:64:A8:48:FF:33:65:A0:50:4A:A2:B3:84:34:48:13:02:D5:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.204.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9d:26:3f:6f:ba:cf:c3:da:1c:34:a2:2e:ac:5f:57:54:b1:
51:82:d9:5d:94:cc:3a:a4:df:2e:33:58:79:c7:25:1e:1c:9a:
81:f4:b3:4e:cc:07:a5:f3:93:86:69:b7:f0:38:a7:06:c4:98:
61:72:cc:d5:7f:b3:fd:ed:b9:5f:ca:88:1a:c8:75:2c:c8:05:
73:ae:67:6f:d9:a2:6d:13:04:af:9d:ee:1d:05:c3:6e:9a:7d:
19:6a:7b:99:1b:2f:30:fc:78:42:da:8f:cc:71:3d:9c:b1:97:
8c:0f:f1:12:cd:f7:a2:69:fa:8c:1c:f5:3e:2c:ac:cd:4c:f3:
27:b8:8a:1e:82:45:f9:f4:7a:f0:03:4d:73:c6:c6:f8:c2:39:
22:06:b3:6a:1a:53:32:fb:66:6e:10:1b:89:58:86:02:dd:44:
f2:66:37:be:70:72:0d:dc:f8:d5:ce:37:26:78:bb:7a:e9:5e:
42:2b:d1:cb:4f:96:1e:71:74:9b:7d:7d:86:44:5e:6c:f8:3d:
19:ce:b6:e6:8a:71:76:99:22:1f:1d:74:ab:40:59:c5:b5:9a:
93:61:dd:ed:d2:69:76:4e:bf:54:fe:71:81:7b:1e:92:ec:0f:
c3:eb:a8:49:a9:f3:06:f7:8f:75:62:f6:10:5b:17:a2:e8:3c:
cc:82:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:05 2026 by rpki-client