Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nEdP0kTXqS6Vl3jC9WpXVRkbwnaIDHbG91TGsyeEJZQ=
Subject key identifier: B6:8F:92:44:FC:72:07:7C:19:94:F4:D7:CA:8B:87:32:47:AA:CA:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B7807448D178B94DB9FE4439596D47A3486278D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Aug 2026 17:34:37 +0000
ROA not before: Thu 27 Aug 2026 17:29:37 +0000
ROA not after: Thu 26 Aug 2027 17:34:37 +0000
asID: 834
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:78:07:44:8d:17:8b:94:db:9f:e4:43:95:96:d4:7a:34:86:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 17:29:37 2026 GMT
Not After : Aug 26 17:34:37 2027 GMT
Subject: CN=B68F9244FC72077C1994F4D7CA8B873247AACAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:d2:67:80:28:35:20:b2:82:81:ed:9c:bc:
cc:65:f2:1d:fe:14:a2:27:59:4c:a9:71:0f:9c:58:
fb:07:bd:0b:e9:e4:ad:b4:a7:08:83:0f:89:a2:05:
79:52:7d:ce:45:f3:5e:b5:b6:45:a3:56:bf:9f:66:
88:84:28:09:50:7d:a5:a4:f9:09:7a:d4:d5:3c:dc:
29:a0:7b:33:36:71:ad:59:c9:96:95:84:03:39:ef:
b2:02:0e:4b:70:6b:75:6f:f9:e4:71:2b:05:63:ce:
22:b8:85:ad:e4:6f:ef:c8:09:0b:0a:55:dc:38:28:
c1:d0:be:c8:8f:55:e0:b2:3a:73:8e:27:9c:8f:5c:
8c:f7:46:f0:28:4d:30:8a:3c:dc:ae:6f:84:51:01:
b4:64:c4:cc:bb:d8:d8:e6:f5:6f:1a:03:13:15:6d:
e2:8b:64:24:fa:85:fa:8a:e2:81:8c:f6:fa:19:94:
74:53:96:27:20:67:e6:48:70:81:d9:ce:0f:6c:10:
3e:c0:eb:38:75:1b:85:13:09:22:3e:9d:93:37:d6:
12:9f:05:25:8c:75:35:c6:4a:ac:c0:e3:3d:9d:e0:
f5:bf:de:ff:79:aa:40:48:f4:98:04:c6:58:85:3b:
5d:86:90:77:b6:b3:84:2b:d7:58:39:4c:b3:40:41:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:92:44:FC:72:07:7C:19:94:F4:D7:CA:8B:87:32:47:AA:CA:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ff:60:a7:92:55:f1:9f:65:5c:55:e9:84:0d:48:14:fe:aa:
8c:32:d6:35:0d:bb:f8:86:1d:3b:48:a7:df:df:92:8f:a8:8f:
33:77:e5:97:ec:6b:8a:ad:1c:3e:5f:49:3e:93:d7:bd:02:a8:
0e:0d:03:fa:b1:cd:11:d8:81:ed:0a:c2:e5:16:2e:b5:7f:c7:
bd:96:39:d0:7b:12:9d:22:57:2f:c9:90:89:b2:c4:f5:5e:56:
04:04:be:74:b4:c3:c9:0b:6f:3c:e1:f3:e4:46:7f:a3:4a:df:
57:95:f0:8f:4b:12:84:b5:03:ed:77:0f:9c:77:76:71:a9:00:
64:c2:80:d3:c1:26:a4:f9:ea:92:0e:e2:02:5c:ba:bb:44:0c:
3d:6d:fd:2d:11:09:45:ec:b9:b6:85:60:75:9f:4e:3d:91:7a:
5f:b3:8d:12:18:60:b4:8d:2d:20:66:35:63:f1:da:80:08:4f:
86:84:b6:63:70:8b:8a:d4:78:75:22:13:a6:7c:11:46:cb:d8:
ec:59:1a:ba:a8:5e:2e:67:0e:fd:9f:a0:3d:e4:38:80:52:c9:
05:a8:e8:dd:a1:a5:8a:d3:3d:9e:00:46:da:44:5c:d6:1a:4a:
86:2c:04:a9:54:4d:69:ac:54:c8:98:7e:5b:ee:76:48:c8:de:
39:2d:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:24 2026 by rpki-client