Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234342e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3234342e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: kqBiD9IPKoau8A2xmH1RnVAvEU78EU4hGpiDATCOoUU=
Subject key identifier: E3:5E:84:2D:18:04:CA:78:08:AA:D8:6A:18:4D:F6:73:38:EB:E4:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35C695FCC337CB7F0A79C26908BEFC2FE5BC8226
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234342e302f32342d3234203d3e20323136323533.roa
Signing time: Thu 02 Jul 2026 19:26:04 +0000
ROA not before: Thu 02 Jul 2026 19:21:04 +0000
ROA not after: Thu 01 Jul 2027 19:26:04 +0000
asID: 216253
IP address blocks: 217.217.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c6:95:fc:c3:37:cb:7f:0a:79:c2:69:08:be:fc:2f:e5:bc:82:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 2 19:21:04 2026 GMT
Not After : Jul 1 19:26:04 2027 GMT
Subject: CN=E35E842D1804CA7808AAD86A184DF67338EBE485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:3b:48:71:0a:30:48:df:16:d6:61:8c:1b:
52:3a:f5:c4:2b:8e:b8:34:57:23:67:7f:5b:c5:f2:
e8:ba:94:75:79:fe:3f:92:bd:55:a1:f4:89:31:6b:
a7:33:97:60:28:4d:4d:bd:de:48:2f:c7:0d:18:a8:
d9:e8:95:4d:a5:79:68:d1:b8:b4:16:44:0c:94:cc:
ea:da:2d:c1:34:b9:13:f1:f3:29:af:53:12:f2:8e:
39:1f:3d:ff:33:89:d4:5e:f0:73:bd:5c:78:52:d6:
8d:bd:b8:4e:e7:06:c3:b5:f0:0e:44:16:13:a6:19:
8c:fb:e4:f7:e4:00:8a:fc:7c:9c:89:10:9f:a0:90:
e6:93:b4:6e:9d:31:9b:bd:ca:55:bd:d4:5d:16:91:
e6:f9:40:a1:91:1e:33:95:ae:8c:4b:69:ef:c5:61:
01:fd:30:31:c1:c9:1d:d5:cd:b8:50:3f:1e:40:a3:
35:57:d4:05:b9:12:df:63:31:75:83:8b:77:7d:fc:
9d:96:1e:eb:ea:f9:d8:54:aa:7f:73:a8:cf:ef:5d:
8b:56:5a:75:c3:23:e4:dd:e4:15:e4:3c:05:83:18:
3e:6a:9a:3f:ec:af:a5:ad:32:8a:32:11:24:81:77:
49:db:0a:f4:25:03:31:c5:2c:45:86:d4:9b:37:59:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:84:2D:18:04:CA:78:08:AA:D8:6A:18:4D:F6:73:38:EB:E4:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234342e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bd:55:72:d2:22:95:62:fa:a8:ea:b3:61:8c:9c:dc:e8:92:
8b:bd:d7:af:89:1f:eb:0a:55:34:bf:41:d6:df:84:ad:d0:20:
65:b0:24:61:a8:bb:5f:dc:59:fb:74:6b:79:09:4a:fb:c8:d7:
39:d5:ee:38:b5:67:bf:dc:17:bc:38:08:c7:e5:35:16:cb:0c:
c6:2e:2b:fa:f1:6e:5e:d0:be:ee:6b:72:22:a3:eb:1e:3b:3d:
54:80:fd:20:8a:29:02:82:75:44:fc:03:c4:37:9d:2b:ad:e5:
ad:ca:44:1b:f0:c1:7c:ea:e8:29:ff:1e:82:38:c5:f0:31:fd:
bd:27:29:b8:39:60:b4:17:2e:46:93:25:37:e5:f2:72:82:d9:
63:90:df:71:bf:c9:fa:2a:8b:b1:61:41:6d:bb:a2:3a:8b:0e:
45:2e:fe:09:32:1f:4a:fe:c5:ad:ca:0d:40:05:d1:a9:6e:3d:
ee:ea:4a:6e:90:2f:92:9a:76:5c:17:be:54:d5:e1:c0:91:5a:
64:31:39:70:1d:13:1b:5f:d7:8c:6e:8d:26:1a:34:a2:f2:d9:
26:60:bb:23:0c:4e:8f:08:74:3d:5e:30:52:94:ee:38:98:ac:
a6:b1:ad:15:6e:59:ca:b9:fb:74:31:38:da:09:0c:10:3c:d9:
5c:98:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:43 2026 by rpki-client