Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3231302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: qRCtC1xUSEYrgrohzZwVSBfvk+9CT9RftD/fmt9ablc=
Subject key identifier: 6C:65:ED:BC:A4:73:9A:03:48:79:9E:6D:8C:12:7F:B4:81:FF:84:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40319967A1539A66E67C9B7FCC9EDB0BAFC32056
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 08 Sep 2026 08:06:59 +0000
ROA not before: Tue 08 Sep 2026 08:01:59 +0000
ROA not after: Tue 07 Sep 2027 08:06:59 +0000
asID: 212238
IP address blocks: 217.217.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:31:99:67:a1:53:9a:66:e6:7c:9b:7f:cc:9e:db:0b:af:c3:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 8 08:01:59 2026 GMT
Not After : Sep 7 08:06:59 2027 GMT
Subject: CN=6C65EDBCA4739A0348799E6D8C127FB481FF845C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:08:dd:de:c8:dc:ac:70:ba:d3:c3:4b:75:
07:15:85:c7:8e:72:0d:8b:2d:d8:47:dd:66:98:74:
ad:87:b8:ad:ec:cf:74:ac:21:77:7c:40:9f:8a:71:
13:6a:c9:f2:3a:00:a2:5d:c4:d8:2c:3e:67:87:cb:
c7:1e:61:e4:ed:59:76:93:e5:ee:6d:b4:53:54:53:
c0:19:57:03:52:0f:93:b4:31:cb:bb:e0:bd:c9:ae:
24:fc:3a:cc:80:57:ec:8d:82:f1:f7:d3:3d:b0:41:
58:05:2e:9a:a6:a3:9b:e3:66:d0:88:18:f4:d2:a2:
70:9e:8e:43:3a:91:70:f9:7c:c7:07:1c:43:e7:ef:
01:b5:41:e1:a1:9d:82:73:28:6d:5e:c2:04:41:29:
8a:fe:95:3e:7c:04:34:b8:3d:81:56:a1:30:8a:f8:
df:4b:68:c8:e4:d6:d2:ac:d4:59:3c:c6:9b:3d:b2:
9f:e1:47:4a:f0:ce:0b:8d:51:a0:d5:65:eb:da:0d:
14:37:77:4c:11:4a:9e:9f:42:8c:02:7f:07:90:51:
06:ec:53:69:ec:30:24:9f:39:b6:8e:c5:48:00:74:
1b:13:75:37:be:5a:ba:bc:84:26:80:78:23:1d:c2:
55:c7:71:36:be:c4:6e:bc:9c:87:69:e0:19:eb:5f:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:ED:BC:A4:73:9A:03:48:79:9E:6D:8C:12:7F:B4:81:FF:84:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b9:13:dd:4d:b2:b4:05:ec:cc:e4:a3:ff:a9:4b:3c:02:9b:
6e:97:a5:fb:a7:9e:32:1c:97:55:34:d5:1e:35:5f:68:63:8c:
44:57:1a:e6:9a:e3:a2:d5:69:e5:99:c1:0b:be:17:c6:40:57:
c6:db:b1:73:6d:a2:9e:84:b9:c0:8b:3c:f5:68:d3:44:ed:4f:
50:eb:1a:0e:c0:0b:51:f2:8b:13:c7:01:cd:0e:e9:a9:08:18:
7d:93:0f:d7:93:17:79:e7:14:a4:ff:9d:22:cd:ef:24:fc:5b:
99:4d:9e:aa:04:65:35:98:30:29:a9:04:32:65:93:d7:c7:04:
86:d2:fd:e6:6f:d0:70:2a:6c:fa:c4:4b:92:1b:13:8f:76:bd:
60:80:d9:51:da:32:f0:ec:2e:f7:ae:76:35:59:76:7f:1b:e1:
aa:47:88:15:d5:e5:a5:e2:52:9a:47:54:e7:5e:12:db:68:c0:
19:ad:6e:c7:31:9a:14:d1:6d:94:3f:66:01:a3:8a:17:55:2f:
15:d0:20:87:1b:d3:c7:35:21:17:4e:45:47:9b:6f:2c:96:65:
84:45:db:99:2a:a6:dd:29:71:20:4f:dc:d7:25:8b:dd:af:15:
69:71:87:5f:1e:46:e6:73:83:55:85:4f:0f:c0:02:2e:8d:e1:
eb:43:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:26 2026 by rpki-client