Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wbxylt6I/Qj0xUmIOP551nMi4jWanzbNNJp4IFYbvZE=
Subject key identifier: 85:3D:4F:FD:21:57:B2:36:39:47:00:0D:ED:EB:16:25:E3:B7:8B:7D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50A98ECBF458C84A3C60E4B2BE162789B21C7B1F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:20 +0000
ROA not before: Fri 28 Aug 2026 11:31:20 +0000
ROA not after: Fri 27 Aug 2027 11:36:20 +0000
asID: 834
IP address blocks: 217.217.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a9:8e:cb:f4:58:c8:4a:3c:60:e4:b2:be:16:27:89:b2:1c:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:20 2026 GMT
Not After : Aug 27 11:36:20 2027 GMT
Subject: CN=853D4FFD2157B2363947000DEDEB1625E3B78B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:3d:bd:70:1f:4d:8f:45:aa:1b:33:c7:8a:
eb:98:1b:69:5a:eb:89:bc:42:a2:6c:ee:c1:73:a5:
cd:8c:d7:4b:0b:ec:f6:ae:16:a7:80:8a:ad:cb:96:
a1:b8:1e:a9:91:3c:19:16:c3:4f:fc:23:89:12:62:
5e:f9:26:1a:a6:f4:31:8b:6b:87:0f:0f:34:41:44:
d6:4d:8b:23:32:3c:b5:63:3d:fc:5b:cf:65:9b:b8:
ec:6c:d2:53:5e:4d:6f:43:67:b1:da:c1:82:a7:63:
5f:86:f4:66:41:c9:cd:18:83:f0:7f:9b:70:82:c2:
b4:37:f3:f5:ae:47:d0:c4:b9:d4:e3:d7:88:aa:60:
29:ff:2a:3c:35:25:cc:1a:62:dc:04:a1:b2:49:f0:
25:12:61:66:17:f5:93:b3:2f:39:5d:3d:eb:43:50:
1b:61:77:9e:c4:2d:98:e2:0d:ae:6c:62:19:e4:90:
09:5e:34:72:f1:ad:57:df:aa:c5:8c:e2:10:a3:09:
aa:93:69:ef:7c:19:9e:e8:e0:a3:fe:1b:2b:aa:5f:
4b:19:36:2c:5e:04:9f:cd:23:2d:a9:40:12:e3:ad:
20:a4:90:3e:42:b2:b7:bb:79:9a:6d:80:ba:58:5e:
43:f4:21:21:77:e7:e7:72:94:7e:38:78:d1:6d:80:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:4F:FD:21:57:B2:36:39:47:00:0D:ED:EB:16:25:E3:B7:8B:7D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.210.0/24
Signature Algorithm: sha256WithRSAEncryption
54:62:b8:43:dc:47:a7:28:45:cd:6e:42:e8:cc:f8:8f:be:35:
ff:7c:11:f6:fb:66:4b:6d:66:6a:e6:05:9f:9f:97:75:70:fb:
e0:90:b1:15:7e:79:a0:f3:c8:23:86:4d:d8:5b:72:5c:7b:91:
5a:c7:a1:43:f5:58:fd:5a:84:07:a3:5e:3d:8d:63:4e:83:63:
52:b3:8a:42:8f:62:fa:3a:0e:33:6d:32:ab:7a:13:93:76:9b:
c0:bf:f3:88:76:59:08:24:85:8e:02:42:6d:b4:f1:c2:77:4e:
35:5c:51:01:4b:66:ae:49:95:b0:5b:d1:db:33:fd:83:05:5d:
3a:09:29:93:92:40:cc:b1:bd:bd:63:c2:f0:64:b9:8b:c4:30:
91:b4:41:89:7e:55:ef:8e:ca:1f:1b:20:58:ad:f4:0f:58:b8:
26:2b:74:37:2c:ac:f5:4a:6a:fb:0e:2c:89:c2:64:54:4d:59:
60:fe:50:7c:de:bb:99:16:f0:5e:f9:34:8b:47:7a:96:59:79:
c4:36:d6:1c:fa:92:21:13:2c:4a:eb:ca:9c:09:0d:e0:4e:5f:
cf:9a:68:1e:b5:de:8c:34:0c:ad:11:0a:8a:89:72:a0:dc:ec:
19:a3:ca:39:b2:70:1e:2f:37:f7:72:1b:f7:01:68:8a:a0:ba:
31:db:a8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:23 2026 by rpki-client