Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20313530313733.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e20313530313733.roa (raw, json)
Hash identifier: yIiMoDiQ3SS9a9i6shooCc3MSDGfY8/USkm9FiQfA+A=
Subject key identifier: 98:96:25:55:CF:50:8D:67:80:4C:5E:00:E2:EF:A8:4C:69:05:E0:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78794A85D4B9FAFBA3CB5F9A75DCBDB949FD98FB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20313530313733.roa
Signing time: Thu 15 Oct 2026 12:34:36 +0000
ROA not before: Thu 15 Oct 2026 12:29:36 +0000
ROA not after: Thu 14 Oct 2027 12:34:36 +0000
asID: 150173
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:79:4a:85:d4:b9:fa:fb:a3:cb:5f:9a:75:dc:bd:b9:49:fd:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 12:29:36 2026 GMT
Not After : Oct 14 12:34:36 2027 GMT
Subject: CN=98962555CF508D67804C5E00E2EFA84C6905E011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:00:ad:11:1d:40:bb:90:c6:15:05:d8:9f:
13:f0:ae:0a:5f:0b:e2:a5:f0:aa:58:ec:e6:e2:04:
de:13:36:a7:3c:84:b7:62:a6:8b:1f:cb:06:e2:db:
ad:de:75:a8:ce:0a:e8:8f:5b:86:22:21:ba:9c:d9:
34:7e:65:93:8e:c9:f4:cb:10:ff:1f:e2:07:5a:ab:
58:7e:21:06:4a:e1:84:1f:9c:b5:43:0d:13:29:b8:
4f:ab:c4:3c:ba:1f:1c:44:14:e0:69:df:be:e2:e5:
aa:ee:86:ce:a9:f7:d7:74:d0:e2:db:34:18:2b:ca:
ee:ee:8d:27:e9:8d:9d:23:7b:3f:54:ca:d8:d1:58:
80:f6:53:af:7c:8f:6a:32:f8:9d:6a:89:10:4c:c3:
64:c3:3b:83:e4:9b:21:8c:90:f8:d1:d4:fb:00:ba:
d7:60:09:21:c7:74:52:36:c6:30:d2:5e:b7:78:73:
ca:9a:ae:2b:19:ba:db:bc:81:0d:c9:2d:e8:90:36:
58:e8:df:96:53:f6:a7:19:70:12:0c:c9:3e:71:5c:
09:e0:8a:44:75:1d:e3:c6:c3:16:48:8b:c2:ec:80:
02:4d:79:04:60:ec:79:ee:31:b5:36:28:3c:22:1a:
6a:96:d4:36:08:5c:9d:90:bb:53:71:bc:7e:47:53:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:25:55:CF:50:8D:67:80:4C:5E:00:E2:EF:A8:4C:69:05:E0:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20313530313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c5:0d:f8:08:51:6b:c2:69:c9:8f:12:c3:0e:a9:84:e0:eb:
ca:24:ce:10:09:6a:44:e5:0b:46:fc:3f:5c:83:48:2d:0d:ad:
b6:a0:46:7b:92:b3:04:1f:d6:56:40:08:24:e2:87:15:fd:f2:
ab:3c:82:1e:e9:59:07:ca:60:fa:2d:85:57:cc:d1:e7:4f:2d:
35:e1:d3:b7:1b:19:33:1a:6d:fc:39:c9:60:d5:1e:c5:51:cf:
41:98:42:26:fa:80:df:f1:0f:31:0d:74:80:5f:29:34:2f:6b:
ad:d5:f4:52:7f:b3:5b:1e:52:12:34:f0:31:50:19:e1:46:a4:
06:af:b7:24:71:05:c1:b2:c5:90:83:4b:c2:c0:88:e6:a0:11:
3c:f5:b2:3d:7a:35:de:c9:3e:97:d2:df:ea:b8:42:b9:11:b8:
ac:b1:92:3e:8c:65:e1:d6:f7:96:28:7b:69:cc:f8:90:4e:56:
c5:df:9e:3c:34:02:4d:f2:7a:46:2c:f2:06:1e:4a:07:32:13:
79:52:a3:2b:e9:e0:cb:e8:21:c4:b8:86:0c:ec:c4:21:2a:e0:
33:55:4f:d4:0a:46:6c:50:81:b9:e5:2e:4d:08:79:32:30:d1:
c8:da:82:73:46:f9:80:67:2d:01:4a:e4:52:f8:24:66:29:75:
90:28:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:10 2026 by rpki-client