Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32352e302f32342d3234203d3e203236303432.roa
File: 3231372e3231372e32352e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: Br+wOPG52hoSlzOp/B7IZOEU1y9xe0+D74eBwSNZhVs=
Subject key identifier: 88:52:07:3F:1B:5A:13:DE:C4:16:E0:3F:72:96:87:33:AA:FA:37:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03CD4ADBFE409D383E8FEC7E74E0E6F01D7D2D90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32352e302f32342d3234203d3e203236303432.roa
Signing time: Mon 29 Jun 2026 10:25:49 +0000
ROA not before: Mon 29 Jun 2026 10:20:49 +0000
ROA not after: Mon 28 Jun 2027 10:25:49 +0000
asID: 26042
IP address blocks: 217.217.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:cd:4a:db:fe:40:9d:38:3e:8f:ec:7e:74:e0:e6:f0:1d:7d:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 29 10:20:49 2026 GMT
Not After : Jun 28 10:25:49 2027 GMT
Subject: CN=8852073F1B5A13DEC416E03F72968733AAFA377F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:92:d5:23:f8:ca:76:62:dd:23:0a:9a:75:
8e:fa:78:97:09:d6:cd:4c:df:a7:31:c1:cb:20:9a:
33:20:18:ad:8a:62:56:0b:cb:cd:c7:06:d8:e0:40:
93:7b:dd:71:e8:62:df:24:72:a6:9e:77:92:bf:3d:
27:58:4f:af:c2:54:6b:7e:cb:da:c7:2f:63:6b:6e:
78:0c:29:b5:71:68:40:4c:34:1c:d8:c2:09:b7:39:
5b:58:c4:1d:e6:c2:da:ea:6a:f3:f1:7a:b9:70:11:
d0:2a:6b:ac:6f:a5:80:b0:03:e9:d1:fa:83:9c:6b:
34:8b:cb:b7:99:57:e4:f8:cf:a4:4f:4d:f3:39:49:
2e:ab:9c:8a:6f:66:a4:d1:76:54:82:0f:cf:55:71:
d9:65:c8:38:df:53:51:e2:17:e8:3a:6e:55:ef:0f:
95:62:9c:36:03:82:58:e0:21:38:bd:3b:48:c7:2c:
fe:e1:08:d2:d2:10:2b:e7:51:e3:e6:b1:24:e6:4b:
3f:cf:55:b5:19:96:f1:1a:c2:db:ce:9a:a6:98:b1:
73:66:8c:fb:60:03:ee:20:75:be:ca:8b:fb:fc:91:
69:ef:c6:14:bd:16:56:37:63:e1:c8:40:e2:98:e2:
c9:f6:0d:3a:2d:a1:c2:68:de:c8:49:b5:1c:94:97:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:07:3F:1B:5A:13:DE:C4:16:E0:3F:72:96:87:33:AA:FA:37:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32352e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b4:78:27:9b:d6:41:8f:7e:e4:06:c4:ed:93:21:e8:fd:0a:
6a:8d:e3:e1:29:5e:3e:b3:3f:98:9b:3f:71:78:e0:67:03:39:
61:6c:ac:eb:19:f3:e1:00:ad:93:ac:bc:09:d4:c3:d3:4a:d8:
74:4f:e2:2f:ea:62:71:f2:3d:48:79:4c:4c:c7:64:39:1e:bb:
84:cb:72:57:97:02:22:50:29:13:46:da:c1:2f:b6:a2:02:8f:
e5:71:94:5e:56:24:81:22:91:79:09:92:ec:d5:7a:e2:cd:19:
a2:8a:18:c5:c8:dc:e0:bd:aa:52:f3:fb:b3:28:da:2c:12:9f:
b3:f2:7f:89:7c:0a:f0:a5:eb:9f:f0:42:08:4a:4d:6c:1e:cb:
4d:f5:40:a7:bb:b2:ba:03:cd:24:0c:0e:a1:56:2a:79:29:bd:
b1:3d:c2:3a:ff:16:1a:dd:f8:50:fb:e6:83:20:c3:80:3a:89:
fd:c5:dd:51:f2:47:d0:2f:ce:ec:aa:0d:e7:bc:27:3d:c4:4a:
93:cd:92:70:a4:de:48:b8:bd:9c:3a:5b:c2:9d:19:cf:dc:43:
9b:51:96:01:cd:a4:07:d8:37:29:65:67:54:ce:60:53:84:d2:
2f:42:47:37:cd:36:c0:ed:0e:a6:79:e5:89:16:28:b8:02:b8:
01:c0:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:52 2026 by rpki-client