Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa
File: 3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: n2OrvwygvlT/6flSzRU/gAAO3kbGgC7s2qlHy2WxTog=
Subject key identifier: D5:8D:50:7D:53:E6:0D:3F:87:CB:F2:1C:4F:DE:AC:B4:8D:8A:3C:DD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 049F50C595CEEAFC00F7CD3181F0715D7C83B099
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa
Signing time: Tue 16 Jun 2026 19:25:18 +0000
ROA not before: Tue 16 Jun 2026 19:20:18 +0000
ROA not after: Tue 15 Jun 2027 19:25:18 +0000
asID: 141995
IP address blocks: 217.217.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9f:50:c5:95:ce:ea:fc:00:f7:cd:31:81:f0:71:5d:7c:83:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 16 19:20:18 2026 GMT
Not After : Jun 15 19:25:18 2027 GMT
Subject: CN=D58D507D53E60D3F87CBF21C4FDEACB48D8A3CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:b9:ac:d8:8d:15:5f:48:0c:30:67:e5:8d:
b4:6b:0f:ab:90:c0:6f:17:14:c3:14:b5:fd:6a:1a:
ae:1b:44:80:a2:83:a4:34:5f:ab:64:f5:46:ac:ea:
dc:ab:0b:45:bd:6d:60:13:17:f2:68:a7:5d:39:3e:
77:7a:bc:8c:48:34:8a:98:07:a8:e1:57:d9:b2:71:
1e:83:1b:2e:1d:76:25:ff:06:e8:42:5b:0d:24:86:
d3:74:3a:05:df:b8:43:05:86:4c:c9:22:97:16:d0:
61:85:73:94:24:66:2c:7c:31:2e:2f:bd:08:da:5c:
10:c0:cb:ad:a2:d1:af:de:6d:c5:95:92:10:45:69:
f5:36:30:3c:2e:f5:25:ed:dc:50:37:fd:a5:ff:67:
70:46:74:44:48:ff:11:d6:01:27:9d:03:45:d2:61:
96:f5:a5:ed:f7:44:b5:e6:85:33:2f:64:22:6e:75:
66:42:ee:ba:a3:d2:10:d1:ce:8a:1c:1f:dd:3d:74:
d2:bf:92:b6:50:1f:c5:de:a4:46:04:ee:f7:d9:40:
3b:fd:bf:ed:6b:77:d9:2a:ea:76:8b:ab:76:35:95:
1c:b2:f1:4c:f0:34:51:be:e9:f9:4a:90:3b:6d:cf:
b1:8c:2e:ad:82:ba:eb:1a:f9:6f:32:de:4d:df:6f:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8D:50:7D:53:E6:0D:3F:87:CB:F2:1C:4F:DE:AC:B4:8D:8A:3C:DD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.248.0/22
Signature Algorithm: sha256WithRSAEncryption
81:66:2e:97:9f:15:13:94:91:cd:62:26:43:04:94:b3:24:32:
45:b5:59:a6:b5:ee:72:73:c0:e3:a7:37:3b:13:e7:11:47:4a:
54:52:21:9b:24:29:60:b5:a0:1b:fb:73:1b:31:91:86:59:a2:
5b:83:9c:0b:ac:22:b2:3c:92:8e:59:3b:d3:21:7b:6f:52:ef:
2b:b9:d7:da:e3:37:e4:76:22:f6:e7:60:59:8d:96:a7:0c:f9:
9e:1f:b5:de:99:43:a2:c4:fa:cf:b9:bb:b2:91:fc:93:80:0d:
1c:90:33:0e:96:b5:84:5f:31:b0:93:f2:bf:0f:08:4e:44:06:
9d:ae:7c:7c:42:41:e5:8a:44:ed:88:6e:b3:32:13:f4:c5:b5:
17:41:ee:9e:9b:22:98:57:27:93:03:c8:33:bd:02:d4:45:59:
53:f3:e8:4e:b2:b1:1b:2d:2f:37:4e:91:0d:04:d6:21:dd:b8:
1a:8b:08:55:ef:39:01:11:b5:f6:ce:86:74:9b:58:59:c7:1b:
8d:a1:fb:fc:a4:88:97:dc:30:96:9e:2f:b4:17:59:9e:ae:7d:
16:23:33:b2:14:c7:12:73:81:7b:25:90:b7:f7:11:b1:9d:24:
a0:16:cc:71:04:1a:1a:7c:dc:91:3d:3b:21:7b:23:c8:39:b7:
80:92:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:34 2026 by rpki-client