Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234372e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3234372e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: /cIdKtPLK0t8Y5yrz91DjTYGaY0BjEdcdFFJoqeoZuU=
Subject key identifier: 91:A7:2A:9E:72:27:36:70:6F:59:6A:D5:C6:32:9D:0D:6D:B9:8D:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7ECD4CE3AEB3BD6C78F119C3613830BC271DEA6A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234372e302f32342d3234203d3e20323136323533.roa
Signing time: Tue 18 Aug 2026 19:28:05 +0000
ROA not before: Tue 18 Aug 2026 19:23:05 +0000
ROA not after: Tue 17 Aug 2027 19:28:05 +0000
asID: 216253
IP address blocks: 217.217.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cd:4c:e3:ae:b3:bd:6c:78:f1:19:c3:61:38:30:bc:27:1d:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 18 19:23:05 2026 GMT
Not After : Aug 17 19:28:05 2027 GMT
Subject: CN=91A72A9E722736706F596AD5C6329D0D6DB98DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:4d:a9:2f:5c:4f:08:8f:7c:7f:fa:fe:72:
01:d7:97:4e:bc:92:a5:fc:1b:21:f5:14:52:85:ab:
cc:10:95:5c:de:1f:d6:f3:40:c4:44:7d:39:fa:a7:
6a:ab:a2:12:d6:9e:e6:42:5b:1b:0f:b2:a1:2d:1f:
81:e3:04:ae:01:5a:b3:2f:b7:58:43:e6:07:e9:4e:
03:9b:05:11:f6:22:62:60:85:9f:55:51:99:eb:bd:
a0:c2:32:fd:b4:08:75:ff:df:59:d5:3d:a9:8c:ad:
03:67:d1:70:50:c2:03:c3:18:bf:bf:06:45:58:e8:
31:dd:eb:d2:b9:52:cc:af:4c:2d:1a:5f:4e:38:75:
56:85:71:96:50:75:cf:52:38:64:a9:12:91:31:7f:
fb:08:f1:bc:ee:82:b3:3a:c1:78:9d:06:a5:6d:88:
e9:9e:e6:4c:a7:9f:02:63:60:95:aa:3e:69:bf:30:
ca:64:78:f3:7c:db:95:31:d6:24:bd:14:7f:0e:ee:
f2:24:c2:9e:ff:02:83:ad:1c:be:b3:a6:99:71:51:
20:38:b3:f3:3e:26:8c:85:a4:b1:e5:1a:76:25:64:
c9:f3:b4:6f:c4:73:2f:40:99:37:4c:5a:4c:7d:d8:
b4:20:eb:93:86:32:e9:c1:4b:e4:87:50:e7:0b:59:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:2A:9E:72:27:36:70:6F:59:6A:D5:C6:32:9D:0D:6D:B9:8D:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234372e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:de:4a:39:00:88:ca:e4:52:78:f9:75:7f:1a:e8:a2:8e:a5:
b6:da:23:08:4e:9f:8a:aa:7d:6e:8c:c4:db:c2:37:5f:03:23:
c6:38:33:55:fb:20:f8:36:3f:dd:9f:d4:a2:58:57:3e:20:72:
22:9d:2b:da:45:cf:7f:6b:86:c4:7a:07:84:44:f1:38:53:22:
b9:82:5b:01:ed:77:e4:c8:6b:1c:4f:77:82:3b:96:15:47:6e:
b6:b9:85:8c:29:f7:83:e1:4d:d7:ae:0a:2e:f2:67:17:49:25:
fc:bf:b1:fe:47:89:81:c0:76:26:c0:50:04:a0:84:f3:c9:8a:
26:80:44:66:50:d3:39:4a:42:f4:11:68:45:d9:3f:02:80:38:
94:a1:ab:d0:bc:8d:29:2d:1e:ea:38:40:14:9a:15:4e:16:5f:
1d:47:11:52:87:5a:51:ef:82:68:ad:60:44:6f:86:e1:05:bd:
3e:7f:f0:e9:e5:37:07:aa:74:9a:f3:54:d4:90:a6:fd:09:ac:
c1:46:bc:d4:ca:b1:e0:28:3d:b6:31:5d:40:16:92:01:55:fc:
6a:49:17:b9:77:17:52:96:ba:96:d0:b3:d4:b6:86:8d:d0:b0:
c4:75:8c:b4:2a:cb:07:da:94:e4:4e:c2:f0:0f:38:e3:5f:44:
d6:04:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:45 2026 by rpki-client