Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233342e302f32342d3234203d3e20323033333830.roa
File: 3231372e3231372e3233342e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: lun75Np3EZb+1157pnL4Ph15O1j14dQ5jYi5OcPXH+w=
Subject key identifier: 51:99:0A:CC:93:59:12:1F:64:72:86:46:4B:57:75:A2:D2:63:8A:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 44B1B18A7A8E4F46469459AFEFC2340B6CD1243B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233342e302f32342d3234203d3e20323033333830.roa
Signing time: Thu 27 Aug 2026 08:40:00 +0000
ROA not before: Thu 27 Aug 2026 08:35:00 +0000
ROA not after: Thu 26 Aug 2027 08:40:00 +0000
asID: 203380
IP address blocks: 217.217.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b1:b1:8a:7a:8e:4f:46:46:94:59:af:ef:c2:34:0b:6c:d1:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 08:35:00 2026 GMT
Not After : Aug 26 08:40:00 2027 GMT
Subject: CN=51990ACC9359121F647286464B5775A2D2638A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:45:92:a6:71:39:d2:bf:ea:42:3f:18:af:
55:f4:87:a4:72:73:76:63:89:c3:4d:41:02:f7:d4:
d8:6b:ec:70:fb:4f:8c:d5:96:00:0c:b7:93:ef:22:
77:3b:b5:b7:e5:13:7c:04:58:1e:59:b7:a1:6f:1f:
c9:e8:82:14:60:22:0a:32:a6:3f:9a:67:a1:d8:99:
ea:6c:60:47:09:ab:e7:61:de:3f:9d:20:60:b0:75:
05:38:5c:b2:c2:f3:dc:81:d6:fe:14:98:a5:71:63:
3e:8d:c3:4b:85:70:2f:72:d4:56:e1:eb:c6:a7:65:
87:6a:5b:7e:5b:4e:02:58:60:9a:6c:b7:68:d8:8d:
53:cf:60:f7:91:33:ad:b0:41:b5:ce:2e:2c:e6:32:
f2:96:b5:04:20:26:14:1e:c3:e9:7d:eb:20:40:6d:
eb:98:15:08:d9:ef:5c:90:86:11:64:07:ec:ee:f1:
81:f2:d9:8c:76:b1:9e:42:18:83:10:39:25:78:83:
3f:e5:d7:69:dc:8f:44:31:f6:20:7c:8e:94:82:ef:
a6:4b:bd:1c:ab:46:ff:25:1a:05:11:cc:4f:4d:62:
bd:ef:cb:f4:49:a5:c5:07:f8:4b:8e:3b:ea:7e:0e:
da:32:12:62:70:e5:b4:14:21:47:cc:d0:c7:91:29:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:99:0A:CC:93:59:12:1F:64:72:86:46:4B:57:75:A2:D2:63:8A:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233342e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:65:97:f0:78:63:ea:28:8b:0e:d3:e9:96:8c:9f:0e:5e:75:
9c:10:3f:e0:70:83:aa:11:f2:18:52:18:ec:d8:f3:b4:85:db:
81:f9:fe:83:83:cc:bb:45:ef:19:e3:03:81:d7:a0:f0:23:3e:
63:78:20:46:2c:c6:57:80:ea:ca:7d:fb:f7:5b:c2:a7:e5:d0:
89:88:81:89:f5:8e:e9:2d:41:6b:59:cb:18:35:cd:a8:d3:6d:
c8:43:fb:63:7d:8d:3d:59:8a:f5:d7:a1:0c:36:e9:80:f6:5f:
5e:9f:8b:59:c3:69:39:d4:87:7b:27:91:ca:8b:4e:80:76:93:
53:8a:31:e8:b7:20:91:10:b5:3f:41:ea:28:1f:78:a5:cc:f7:
6f:52:10:e9:49:0a:5a:4d:41:eb:fe:d4:9f:10:4c:a8:7d:1d:
eb:06:c4:5f:73:fb:84:5d:70:2a:0e:6c:5f:2b:68:ec:61:c8:
f7:12:7e:5c:fa:b5:5c:0d:7a:38:0f:1a:e2:73:0c:9e:53:fb:
07:f6:ce:6d:f6:83:10:1a:a3:0c:3d:e4:fc:61:d6:d1:d3:d7:
d9:9a:91:ef:aa:e9:c1:cc:ad:54:19:d9:bb:d2:f0:62:8b:12:
16:bf:4d:87:9d:c1:29:ae:6f:98:03:8b:06:d7:28:f7:8d:6d:
9e:24:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:09 2026 by rpki-client