Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233322e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3233322e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 0HBGNUGbt6+I4HY5MtJ64tLvNlvwuDtYLFj042HTOiI=
Subject key identifier: 9C:29:3B:C4:71:7C:A2:2C:05:9A:7E:72:F0:04:64:4D:33:54:22:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28A02B26333E80D984DF7F8DA5B6E799B9706F48
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233322e302f32342d3234203d3e20323136323533.roa
Signing time: Wed 26 Aug 2026 10:49:21 +0000
ROA not before: Wed 26 Aug 2026 10:44:21 +0000
ROA not after: Wed 25 Aug 2027 10:49:21 +0000
asID: 216253
IP address blocks: 217.217.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a0:2b:26:33:3e:80:d9:84:df:7f:8d:a5:b6:e7:99:b9:70:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 10:44:21 2026 GMT
Not After : Aug 25 10:49:21 2027 GMT
Subject: CN=9C293BC4717CA22C059A7E72F004644D33542233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:fd:20:93:97:a4:5d:ac:7e:9f:7a:29:f2:
67:2d:d1:bb:7b:65:f7:7e:78:6a:62:ad:eb:b0:bc:
a5:f7:7d:96:50:b5:07:51:51:8b:db:58:28:79:ed:
d2:d7:a2:31:a6:b1:2a:e9:d8:a6:5b:0b:38:99:3d:
a4:56:a1:3c:34:86:20:85:26:18:bc:06:2b:72:cc:
53:d3:41:53:8c:55:b9:5e:50:13:54:84:45:5b:4c:
ed:c9:3f:71:6d:4e:3c:aa:91:cd:b1:7f:07:b2:3a:
05:ca:3f:09:98:29:33:ce:7c:70:6a:ce:51:39:95:
11:64:71:dd:a4:ec:d8:28:63:27:f7:b1:6f:d8:b8:
3e:c9:5f:d4:8d:2d:82:75:8c:eb:ba:5e:6d:72:9a:
51:63:4e:e1:6b:b8:17:af:aa:a2:33:95:5b:21:76:
ed:a8:d9:cd:35:88:e9:5e:7a:03:f1:bb:35:30:4f:
49:7c:01:78:0b:4e:37:45:84:0c:70:b6:a5:66:23:
0d:fc:0e:d8:46:26:8c:d1:b5:9c:a1:4b:6c:8d:b5:
89:1e:06:73:0f:4b:7d:9c:d2:af:21:21:06:57:0f:
a4:4f:47:86:39:e5:c2:d4:62:e0:ec:dc:64:a8:e1:
0b:9d:d8:36:17:65:5c:b8:74:1c:b0:5f:39:8d:64:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:3B:C4:71:7C:A2:2C:05:9A:7E:72:F0:04:64:4D:33:54:22:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233322e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.232.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2d:a2:7a:77:c2:c5:9e:92:19:19:75:f0:08:4d:83:e2:54:
75:39:ce:f4:22:80:3c:92:11:ba:20:c5:5a:ab:1c:80:ef:76:
2c:95:7c:98:c5:02:df:12:e0:88:32:12:98:83:fd:d8:cb:11:
cf:6c:22:e7:ca:28:52:8b:68:fc:a1:1e:24:88:e9:7b:7e:dc:
e6:b6:a4:48:06:d1:8d:97:b9:cd:b9:81:bf:e2:19:39:44:48:
0e:49:29:52:25:9e:15:ba:14:12:8b:bb:e6:db:f7:f8:b6:91:
19:c8:5b:34:11:fd:fa:c7:f2:32:cc:93:a4:40:cc:d8:7c:42:
0a:51:4b:d2:f5:72:36:ef:c6:e6:fa:fa:8b:c6:e5:3d:14:eb:
0e:57:36:8e:1a:9f:81:8e:ba:6f:e7:b2:17:20:06:43:8d:4b:
19:1d:21:7a:58:ea:81:f6:05:9f:11:7b:3d:34:08:1f:64:73:
76:81:29:b6:02:da:23:29:c6:be:df:83:f6:8b:6f:27:8c:e7:
14:d6:50:3e:47:b7:f9:8f:d1:93:c9:e1:2b:80:1d:86:86:bc:
b1:f5:b5:ba:ef:37:65:02:9a:27:b7:4c:bc:3a:e3:6f:11:1b:
5b:d9:94:52:75:38:e9:34:b6:30:87:d0:fe:27:ba:99:ee:ee:
30:7d:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:53 2026 by rpki-client