Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233352e302f32342d3234203d3e20323033333830.roa
File: 3231372e3231372e3233352e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: g1KNFg+tJIKXekWRPKZ7o/bmMyy2y4u5P58sPi7cR8g=
Subject key identifier: 6F:7B:20:1E:6A:27:35:5C:5C:3D:5D:F6:0E:8A:4B:37:56:A4:A7:31
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 07F1027452DFA947AEC7484C41A0627F7E6DF4C7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233352e302f32342d3234203d3e20323033333830.roa
Signing time: Thu 27 Aug 2026 08:40:08 +0000
ROA not before: Thu 27 Aug 2026 08:35:08 +0000
ROA not after: Thu 26 Aug 2027 08:40:08 +0000
asID: 203380
IP address blocks: 217.217.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f1:02:74:52:df:a9:47:ae:c7:48:4c:41:a0:62:7f:7e:6d:f4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 08:35:08 2026 GMT
Not After : Aug 26 08:40:08 2027 GMT
Subject: CN=6F7B201E6A27355C5C3D5DF60E8A4B3756A4A731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:00:d3:8e:fd:b6:eb:72:91:0b:d8:79:3b:
91:16:92:8b:09:a1:fe:94:a0:5a:4f:a5:93:74:b9:
52:6b:90:d4:e2:5b:e4:07:8a:ae:87:39:40:3d:15:
aa:99:cb:fb:ab:75:d5:2a:13:bf:e6:67:83:19:b1:
9a:0d:b7:0c:c6:5b:1f:8b:9c:c5:78:9b:5b:c6:83:
ef:29:fc:cf:01:a8:fe:5a:5d:25:92:75:85:29:c5:
77:38:fe:e3:71:52:12:6f:69:4f:4b:75:25:76:dc:
49:c9:39:92:a4:15:38:32:18:28:fe:2e:f5:51:bb:
a4:57:3e:7a:48:35:5d:54:d0:50:3d:e9:45:81:ed:
b4:04:04:c9:18:3b:47:b3:06:3e:af:d9:b6:6f:7a:
d2:e4:bc:9f:cf:4e:7f:c4:66:4b:3a:5a:16:72:45:
86:07:dc:e1:09:c4:4b:eb:23:c0:a3:74:03:15:46:
bc:b5:b3:f8:cc:f9:a4:b3:e5:88:95:a9:d5:a4:81:
21:27:85:82:aa:b8:9e:e5:3b:35:0c:03:a4:2a:39:
a1:7c:93:a9:89:09:49:71:6b:a3:96:f0:7f:96:9d:
19:06:e3:50:f2:30:5f:96:34:77:aa:9c:a9:84:dc:
14:e6:80:72:30:24:1c:f0:f0:a3:29:e6:58:a7:46:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:20:1E:6A:27:35:5C:5C:3D:5D:F6:0E:8A:4B:37:56:A4:A7:31
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233352e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3b:17:8f:9a:39:f9:ef:13:89:18:3a:85:88:ef:99:e1:cc:
a5:64:9b:81:c2:e5:8a:f3:4f:9a:65:b1:f2:e5:f0:37:30:b8:
92:47:26:a3:32:00:d8:50:a2:20:b8:32:a5:e7:18:30:ab:79:
5f:aa:2e:7d:3c:c4:ca:4a:eb:20:bd:b2:b9:66:30:1c:45:7d:
ff:31:7c:c8:9a:08:1f:35:18:80:64:0b:0f:c3:6a:2d:9e:4a:
f0:be:b0:84:e3:0b:68:c8:a7:1c:7b:b0:9f:69:cd:41:74:a8:
5c:33:e6:84:e7:cc:e1:06:69:75:b8:b5:a2:02:fa:31:cc:58:
67:9e:e7:ab:a3:26:6a:3a:9b:ec:71:70:1a:d9:e6:9a:96:6b:
43:8a:ee:12:ed:17:de:e5:02:ce:ae:e8:ea:1d:da:b3:f4:a2:
82:b7:e9:e1:ab:f9:b5:85:ed:66:87:18:d7:c0:1b:51:8c:23:
a8:62:10:e1:44:c0:28:ce:e7:6e:ea:ac:95:d4:7f:78:e9:00:
2a:fa:4b:c6:3d:42:b1:62:e6:a5:c0:64:d1:10:cc:27:f8:e5:
c7:b7:ec:24:47:f0:a4:74:bf:71:23:b6:6e:e9:4c:0d:fc:68:
31:01:a8:45:e2:df:70:b9:1b:98:db:f4:d1:f4:f7:f1:b5:e0:
a5:de:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:28 2026 by rpki-client