Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3231322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: ADlWlKy/jPdYjbDEKemSVSco9nqiSEzcJ/zjgTw13D4=
Subject key identifier: D5:BF:D1:91:B0:23:C0:59:4B:A2:58:C8:59:44:9A:D3:9B:08:FB:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 061EDF8EFC4DE2E575CE41BBCBBF2004806A81F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 03 Sep 2026 20:15:01 +0000
ROA not before: Thu 03 Sep 2026 20:10:01 +0000
ROA not after: Thu 02 Sep 2027 20:15:01 +0000
asID: 212238
IP address blocks: 217.217.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1e:df:8e:fc:4d:e2:e5:75:ce:41:bb:cb:bf:20:04:80:6a:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 3 20:10:01 2026 GMT
Not After : Sep 2 20:15:01 2027 GMT
Subject: CN=D5BFD191B023C0594BA258C859449AD39B08FB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:79:f4:69:77:94:6a:ea:28:de:3c:73:bc:
5e:0e:a8:db:e2:29:b5:55:59:c8:57:e9:46:c9:6c:
fb:63:bc:56:56:01:8a:9f:ee:d6:f2:36:d0:69:e3:
ef:ab:39:d6:6b:8a:be:40:fb:64:b9:b8:05:63:0a:
50:24:94:fd:26:bb:42:fd:41:06:07:2f:b4:3c:8c:
6e:fd:fb:0d:eb:e8:5a:d3:72:8c:5d:d1:72:db:62:
5c:47:12:bf:84:33:fd:95:3e:44:ce:39:a2:e8:8f:
cb:a3:6c:4a:43:92:ba:a5:cc:cc:64:02:a6:79:cf:
69:64:d0:b7:9a:cc:6c:56:91:d9:b9:cd:22:e5:6f:
37:7b:c3:46:5e:5a:73:96:72:3d:63:f9:ae:8b:ed:
ce:25:e8:e6:74:e3:00:8f:fa:f4:40:0a:5b:56:3d:
c1:8a:28:c6:aa:17:c8:4a:5e:f6:14:a4:66:66:ac:
7f:c6:f9:9f:e5:bb:e9:e9:84:be:bb:88:23:e6:3c:
ff:ea:97:cd:83:e9:25:b7:d7:c2:d0:7a:81:29:05:
f6:27:29:80:71:83:1d:10:e1:5c:b8:fa:c7:95:90:
29:90:13:36:6b:7d:f6:e9:66:4b:d7:3c:8a:e0:7d:
6b:c7:9e:89:24:92:66:e1:1d:27:2c:12:e3:7d:37:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:D1:91:B0:23:C0:59:4B:A2:58:C8:59:44:9A:D3:9B:08:FB:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:96:a3:d1:4e:c8:22:12:09:d6:de:8d:ae:b4:75:ce:4d:44:
e9:4a:91:ce:03:51:68:fe:11:78:2a:c5:df:df:11:4f:6b:d7:
91:bd:90:69:2c:04:da:51:e0:f3:34:58:73:1b:ac:b2:f9:0c:
a0:b7:45:2e:38:df:a5:73:81:df:7a:ec:26:fe:45:42:3a:78:
12:c9:04:19:d7:cb:ac:86:67:a4:e6:cd:c2:64:1f:b1:41:9f:
a2:45:19:18:6a:4c:23:72:99:19:b6:b1:da:4a:bd:38:73:27:
e8:70:41:42:f4:fb:70:eb:89:bb:99:a7:b7:f2:98:ed:43:e3:
7b:cc:20:3a:e1:f8:51:7b:56:fe:db:cf:84:f5:51:aa:03:c4:
5c:e5:ec:b4:12:71:fe:96:78:b9:0f:c4:bd:90:4e:9d:ec:fb:
5b:89:e9:36:b9:db:dd:52:d1:83:09:7d:60:cd:0a:7c:e1:18:
27:8e:47:44:50:b4:1b:39:2b:23:70:b7:40:d1:f2:5e:d2:cb:
7f:5d:34:9d:86:79:52:61:3f:db:fc:f5:68:f6:55:22:3f:13:
50:c8:77:48:66:50:05:cd:bf:77:1f:ff:ee:15:b5:b9:7f:28:
81:a6:27:50:f7:25:47:9a:7d:a6:6a:39:03:85:7b:3e:f9:aa:
da:d9:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:30 2026 by rpki-client