Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232372e302f32342d3234203d3e20323033333830.roa
File: 3231372e3231372e3232372e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: ivwCpMklA0ZSAoPgk5+YeGve54wh1BflRlxO8c/xi4M=
Subject key identifier: CF:3B:98:BC:45:EB:F9:2E:E0:01:4A:3D:2D:29:3E:7D:E3:D5:34:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67C9ED8D69F83F340664DAE2CC3ED3BB0D871C01
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232372e302f32342d3234203d3e20323033333830.roa
Signing time: Thu 27 Aug 2026 08:38:13 +0000
ROA not before: Thu 27 Aug 2026 08:33:13 +0000
ROA not after: Thu 26 Aug 2027 08:38:13 +0000
asID: 203380
IP address blocks: 217.217.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c9:ed:8d:69:f8:3f:34:06:64:da:e2:cc:3e:d3:bb:0d:87:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 08:33:13 2026 GMT
Not After : Aug 26 08:38:13 2027 GMT
Subject: CN=CF3B98BC45EBF92EE0014A3D2D293E7DE3D534CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:f7:a0:85:67:61:0f:d8:80:14:9f:bf:65:
0b:89:93:e0:44:2a:13:34:f8:a7:ae:c0:16:3f:02:
79:ad:48:66:45:d7:1d:06:87:ad:06:f3:91:b5:33:
8a:0a:1d:cf:66:e4:18:03:ce:8d:82:9b:a0:a5:fb:
85:26:ec:df:18:e8:8c:84:47:c0:10:5d:12:30:e2:
bb:bf:31:25:e2:36:ae:b6:d8:6e:9f:2d:e9:83:f2:
b7:c2:cc:fa:d9:50:e2:28:89:aa:4a:f1:3c:22:6b:
d8:22:6d:38:e1:9d:72:ef:3d:2b:2a:7c:15:16:3f:
0b:19:7b:df:0a:e4:2b:a8:3c:29:6d:d5:1d:d4:db:
19:da:8a:68:c5:87:c9:8d:84:67:71:bc:1d:8e:d4:
f9:af:72:cb:a3:d8:ee:a8:3f:31:6b:8f:b7:1d:1f:
11:49:46:49:04:b5:88:e3:31:d7:87:75:f4:95:22:
99:88:62:c8:47:f6:33:f7:41:86:c8:80:7b:d5:9a:
c3:61:b7:03:a8:c4:8c:05:b7:36:df:3c:c0:b3:2e:
34:6a:fd:9f:3b:9a:62:79:8e:1a:35:6d:6b:19:3e:
e8:98:b4:74:02:a4:1b:31:77:ba:47:a7:45:c8:52:
97:d2:83:59:9c:e8:67:f9:5f:ca:75:9a:7c:3b:e7:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:98:BC:45:EB:F9:2E:E0:01:4A:3D:2D:29:3E:7D:E3:D5:34:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232372e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.227.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6b:7f:be:07:a3:84:a5:ac:47:e6:62:04:d4:c6:94:1d:ee:
91:fa:2d:0e:ab:2d:79:64:ab:d8:8f:b1:6e:94:83:f9:42:0e:
76:8c:c9:d1:23:b3:c1:60:16:97:af:54:dd:b9:4f:3c:c0:22:
ea:2c:48:77:36:7a:fe:ef:02:de:a4:33:4d:c1:e7:42:b1:20:
9d:26:9e:16:e9:cf:b2:38:82:80:f0:7e:ec:f0:a0:36:e9:9c:
97:d9:08:78:5c:b6:3e:0c:80:fe:fa:5b:b7:3d:64:04:98:98:
67:c9:05:9e:ed:20:c5:9a:01:39:1c:57:62:51:c9:34:08:17:
fe:08:63:04:95:68:ad:10:2f:0e:2b:31:35:19:40:b7:94:54:
a6:27:05:27:cb:49:39:66:7a:cb:a5:17:03:3a:35:c8:d2:b6:
81:9c:b5:57:87:af:8c:3d:f9:18:dc:2b:d5:24:f1:e9:d8:b8:
bb:1a:0d:ab:af:8c:2a:30:3f:d6:cc:c2:5a:fb:19:e4:4f:ce:
dd:df:98:c4:6e:24:a6:75:11:29:e1:c7:7f:fc:68:b9:c0:36:
7e:ba:5c:82:6f:41:36:da:bc:bd:0b:02:a4:69:bf:86:8e:a9:
b7:41:e2:7e:46:70:c4:7f:a8:11:71:3a:62:4c:a6:ba:fb:ae:
84:34:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:41 2026 by rpki-client