Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20333939333539.roa
File: 3231372e3231372e3231352e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: qD3Ekqc9EcXzYZr9d+dko3R9oLAZyqiZpHqoQZj8X4s=
Subject key identifier: 64:A5:46:F6:5B:AD:86:4A:9E:91:1B:3E:8D:2C:D8:4B:44:03:38:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A914E364BB3DC672146026FC620E7501C92E687
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20333939333539.roa
Signing time: Thu 30 Jul 2026 14:45:47 +0000
ROA not before: Thu 30 Jul 2026 14:40:47 +0000
ROA not after: Thu 29 Jul 2027 14:45:47 +0000
asID: 399359
IP address blocks: 217.217.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:91:4e:36:4b:b3:dc:67:21:46:02:6f:c6:20:e7:50:1c:92:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:40:47 2026 GMT
Not After : Jul 29 14:45:47 2027 GMT
Subject: CN=64A546F65BAD864A9E911B3E8D2CD84B440338FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:7a:9d:38:2f:2c:95:6e:55:cb:f2:af:75:
26:cc:ff:20:e5:b4:d0:c4:b3:a6:15:ea:83:0a:c4:
a5:38:cd:d3:a8:49:e9:44:3f:ed:96:38:f5:63:59:
ec:7a:3b:21:69:fd:58:94:6c:91:a9:7e:8d:e2:91:
10:5d:a9:0c:7b:f8:0d:30:81:eb:fe:e2:01:f4:8b:
76:2e:c2:9f:63:0e:7b:2f:ba:40:da:34:5a:1a:51:
9d:3e:9d:c3:a2:17:24:3b:ac:94:46:be:3c:1a:10:
85:55:93:7d:b9:38:9f:aa:a0:4b:14:9e:4e:05:da:
7c:42:02:c5:1c:ec:bf:03:e5:c4:73:d7:aa:37:11:
d1:ec:df:1a:9a:e5:90:c7:2d:b2:24:bb:98:75:c3:
c3:ec:43:65:2f:47:9d:a9:51:35:a8:d5:37:cb:98:
c5:3b:32:2d:22:d2:e5:46:69:cd:43:74:c1:36:c8:
01:ba:79:aa:35:03:81:98:ef:90:19:e3:2b:dc:c6:
27:08:fc:8d:f5:9b:b0:7e:fa:33:1d:8d:35:57:fb:
af:f6:91:7f:7b:d5:06:93:c8:6b:d9:a6:6e:fa:a6:
69:a1:4c:fb:34:a1:09:a0:44:07:39:ab:0a:30:ff:
5d:00:7e:2a:c2:d4:f2:dc:a6:a5:71:5b:89:cc:ed:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:46:F6:5B:AD:86:4A:9E:91:1B:3E:8D:2C:D8:4B:44:03:38:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b7:e6:14:f5:99:56:a6:f0:d6:33:82:4a:4e:4d:0a:db:e1:
c0:60:77:f1:99:01:3a:e8:1c:b8:6d:f5:37:b2:f3:24:3a:de:
b5:31:6c:09:3c:78:d5:f2:b9:28:43:6a:09:24:c2:57:0b:62:
61:6a:d8:ec:b4:2d:0e:30:63:72:c3:c4:89:a1:a9:74:79:eb:
83:c3:b1:19:98:a0:85:07:4b:a9:ec:6c:6a:a5:97:af:b4:75:
6b:4d:94:c3:eb:3b:16:34:ed:76:8a:fd:10:b5:16:ce:bc:68:
4b:19:d0:f9:3e:0d:c3:d0:20:b9:3d:70:6f:2b:bd:4a:4f:f3:
8a:df:97:5b:70:95:db:bd:9b:32:12:79:56:a5:be:22:32:a8:
1d:72:6b:29:09:43:a5:f1:19:da:44:67:45:e6:53:b0:a2:d8:
a2:34:11:9f:33:07:2f:82:1e:87:7c:3b:33:6d:d4:62:51:a6:
8e:98:7f:c6:28:ac:ab:61:37:4d:df:0f:a5:52:88:93:13:36:
aa:46:52:34:7f:0d:dc:a3:86:64:1a:89:29:b7:57:20:3a:dd:
cb:78:14:53:5b:5f:14:64:bd:f5:66:3b:dc:89:f0:e0:c4:b8:
10:6b:ba:96:41:69:fb:94:cb:5c:10:ab:da:77:80:7b:b9:7a:
49:94:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 08:36:19 2026 by rpki-client