Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233332e302f32342d3234203d3e20323033333830.roa
File: 3231372e3231372e3233332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: nkMDH2IJdKJ1S7FsPXUpZoWEL922cQXgzkfQU2U3abw=
Subject key identifier: 86:42:24:BA:7A:C4:CB:AC:56:FA:75:75:DD:41:FE:BB:81:57:8D:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4FD1E52191A4A25D09CC6FB6E934F38017116AE5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233332e302f32342d3234203d3e20323033333830.roa
Signing time: Thu 27 Aug 2026 08:39:50 +0000
ROA not before: Thu 27 Aug 2026 08:34:50 +0000
ROA not after: Thu 26 Aug 2027 08:39:50 +0000
asID: 203380
IP address blocks: 217.217.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d1:e5:21:91:a4:a2:5d:09:cc:6f:b6:e9:34:f3:80:17:11:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 08:34:50 2026 GMT
Not After : Aug 26 08:39:50 2027 GMT
Subject: CN=864224BA7AC4CBAC56FA7575DD41FEBB81578D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:ea:7c:8d:2a:5d:be:18:d0:38:08:62:3e:
f0:d9:27:e2:ca:ee:62:ca:86:b1:d8:0a:80:8b:21:
b5:e7:57:c3:82:24:c8:fe:4b:2b:88:9f:ac:d4:8c:
63:d4:86:35:fb:17:34:67:58:af:60:7e:79:e5:e2:
95:44:55:89:54:e5:56:d4:4a:aa:e3:1e:d9:41:b2:
74:f8:d2:c3:9e:4b:bc:0f:06:4f:86:a9:a7:fb:de:
ea:51:9e:b7:d5:8c:28:6d:3b:8a:d9:e7:a4:f3:8c:
93:94:65:4f:cc:df:a2:2c:aa:f6:a5:bf:e6:bc:19:
94:c9:8c:85:53:99:a5:22:94:0a:7e:cb:c3:b7:1f:
ce:b9:79:40:11:a5:16:a3:30:9d:38:3e:72:8e:3e:
42:ff:cc:32:be:65:cb:65:a3:9a:ec:ff:19:58:a0:
9c:0d:e4:b8:50:07:94:87:46:7b:64:71:2f:78:e2:
55:be:7f:3c:df:8e:8d:04:7c:36:b9:78:17:14:81:
b3:60:59:45:f9:78:9b:2b:2c:e7:0d:73:d6:a4:20:
59:4a:ea:a4:7a:5a:53:2d:eb:46:3a:74:0b:a9:da:
81:46:bd:37:d4:cb:5a:47:90:7e:61:1f:23:7a:c9:
b8:06:76:e8:41:82:02:3c:df:98:84:0f:c5:42:45:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:42:24:BA:7A:C4:CB:AC:56:FA:75:75:DD:41:FE:BB:81:57:8D:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.233.0/24
Signature Algorithm: sha256WithRSAEncryption
79:96:86:5f:01:bd:50:6f:2e:d0:e5:69:bf:22:73:86:8c:bd:
3e:50:3c:4c:a5:9c:46:06:28:29:30:0e:94:06:ab:4b:fa:fb:
a7:1b:48:80:b7:9e:16:1c:32:39:dd:c6:80:0c:1d:93:02:a4:
43:aa:b9:4a:c5:75:c1:4e:75:d5:74:dc:15:2c:80:d1:84:74:
9d:d7:5a:14:7a:f5:8c:09:04:24:88:8f:4c:e3:7e:85:d6:2c:
73:0f:bb:b7:f5:cb:66:b6:9d:5c:fc:27:8a:73:7c:6c:9d:7c:
14:6b:4f:6e:df:ff:54:db:49:ea:0b:19:3f:fb:da:c3:f2:c6:
89:2a:a2:14:17:10:67:d9:5f:ba:87:e8:0e:d4:cf:22:22:b5:
dd:1b:89:30:61:2b:57:ec:57:f6:9c:6d:77:f4:58:8d:66:9f:
4e:e4:f7:e0:65:4f:26:c3:53:a0:28:58:ce:eb:5f:91:68:18:
f4:f0:77:ed:4a:4d:15:c7:76:20:b7:c4:20:de:89:df:fb:b0:
80:fc:d9:38:00:85:65:88:ce:25:24:bf:ae:4e:bb:88:30:2c:
c6:a1:2f:bd:d0:89:8d:c7:81:62:55:90:59:b6:7d:a7:3a:98:
ec:a9:f7:c2:74:e5:3f:a7:30:92:01:6b:14:ff:2b:eb:11:ab:
cd:9a:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:41 2026 by rpki-client