Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QKlYykzSfwwnM0/uJOSPq96hOcGhK+7YEZ0/geGXF0I=
Subject key identifier: 5B:F1:79:60:7C:23:A9:1A:19:B4:10:26:58:37:20:A4:70:FE:A6:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46C67600BDC3A7A70BCD95650E121A6327D7B4E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Aug 2026 17:34:45 +0000
ROA not before: Thu 27 Aug 2026 17:29:45 +0000
ROA not after: Thu 26 Aug 2027 17:34:45 +0000
asID: 834
IP address blocks: 217.217.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c6:76:00:bd:c3:a7:a7:0b:cd:95:65:0e:12:1a:63:27:d7:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 17:29:45 2026 GMT
Not After : Aug 26 17:34:45 2027 GMT
Subject: CN=5BF179607C23A91A19B41026583720A470FEA6D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:40:d7:77:56:17:92:61:70:e2:a4:b8:8e:
0d:18:5b:c7:a3:54:23:28:fe:f8:a8:f2:2e:5b:39:
a0:b0:13:01:45:dc:de:e2:88:94:b2:9d:99:ea:8b:
2d:6f:a7:a3:a9:c2:b1:62:75:a9:05:dc:c9:42:7b:
14:08:4f:1e:93:97:e1:b4:c6:34:50:ce:72:d7:93:
5d:ac:ed:52:ba:8c:64:14:8c:fd:89:bb:d2:67:d8:
f2:9e:09:95:2c:44:05:c6:01:18:e9:9e:d9:6a:e7:
fd:83:19:bc:aa:ab:73:ae:be:35:ce:d2:ec:ce:ab:
1d:f4:c3:da:29:2f:70:48:77:79:fc:8d:91:21:5f:
13:ef:af:ef:c9:d3:5f:f8:be:20:54:bf:f9:17:e8:
9f:90:87:dd:d6:4e:33:bc:cc:b3:66:d0:ce:8f:44:
3b:76:4c:38:f4:af:69:43:b3:62:30:91:24:63:a1:
3a:a0:ec:fb:aa:7c:55:89:c4:a6:46:07:46:2b:36:
3e:c2:e2:a6:85:93:69:fb:fe:6a:a9:06:39:c3:49:
56:99:f0:a8:c2:bb:1f:4a:b3:50:3c:a5:5d:b1:d9:
56:30:ac:fb:b4:0c:1d:60:7d:6a:59:09:f6:13:e3:
0e:4a:5a:09:c8:29:2f:c6:15:80:7e:3d:ea:fb:1f:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:79:60:7C:23:A9:1A:19:B4:10:26:58:37:20:A4:70:FE:A6:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e1:ed:41:34:dc:ed:97:4e:a4:5e:8b:47:77:f3:3a:e2:39:
16:28:12:8e:d8:55:46:18:7a:b4:6c:ae:d7:37:b2:d3:ca:f4:
31:47:f4:a8:4b:29:4b:38:b6:49:bb:64:ee:4c:1a:40:5b:e4:
38:68:70:74:0e:2d:de:3e:04:09:e3:5e:46:39:f4:03:53:33:
3a:5a:20:8a:5f:14:68:bb:39:b5:42:e6:fa:8e:49:e8:11:a5:
b7:9d:50:15:b9:fa:ef:8f:d8:1f:17:d4:53:87:c0:04:86:bb:
c3:3c:fe:5e:0f:26:15:d9:0c:53:5d:68:cf:d1:43:2f:4c:98:
a1:d2:e9:29:60:92:fe:73:6e:65:66:b5:0d:5f:da:51:a5:92:
0e:7b:08:73:76:c0:48:e5:79:8f:84:2f:49:50:13:e0:cf:f2:
e8:70:75:35:48:fb:65:c6:50:58:31:e3:73:44:3c:a1:43:17:
2e:01:eb:5f:8d:bb:75:f0:84:97:f5:5e:7c:2b:bd:c3:a4:3d:
a3:5b:f4:36:82:69:bf:e5:e4:53:38:71:f9:48:9f:d5:75:95:
92:4a:48:64:4d:51:75:3a:6b:97:01:9c:73:24:f6:b4:da:eb:
0a:6d:e1:e8:c9:c4:32:0e:49:84:a3:85:20:cd:c8:0b:92:2f:
29:54:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:27 2026 by rpki-client