Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32372e302f32342d3234203d3e20313430303636.roa
File: 3231372e3231372e32372e302f32342d3234203d3e20313430303636.roa (raw, json)
Hash identifier: xHrKuGAvy0oinrE9la5eec+K6nHP0ey07zt5IbBN4Qw=
Subject key identifier: F7:2D:7B:ED:B6:1F:CF:27:01:18:FA:52:B4:32:C1:7E:34:EC:76:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A77BEE71BF484E12A0777BADBE21D3E98419BB3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32372e302f32342d3234203d3e20313430303636.roa
Signing time: Fri 09 Oct 2026 08:32:20 +0000
ROA not before: Fri 09 Oct 2026 08:27:20 +0000
ROA not after: Fri 08 Oct 2027 08:32:20 +0000
asID: 140066
IP address blocks: 217.217.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:77:be:e7:1b:f4:84:e1:2a:07:77:ba:db:e2:1d:3e:98:41:9b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 08:27:20 2026 GMT
Not After : Oct 8 08:32:20 2027 GMT
Subject: CN=F72D7BEDB61FCF270118FA52B432C17E34EC762B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:23:d3:72:77:11:51:b2:4f:59:e3:88:84:
7b:50:9c:a5:82:aa:7f:1f:81:2b:db:2f:30:cd:de:
fa:54:80:b0:59:7c:21:19:56:5d:e4:5f:ac:7f:6a:
64:6b:d5:1a:d0:cb:77:da:59:f5:73:c0:df:bc:9c:
8d:f5:e7:db:c3:1a:cb:62:37:d7:7d:f3:44:27:38:
d2:af:79:30:d5:92:76:d2:33:3e:3d:f1:69:30:52:
84:57:ae:6a:79:0b:53:db:38:74:8b:ed:c5:a3:94:
a5:f8:a6:50:89:94:89:4d:ee:3e:00:1b:c5:39:6c:
9e:0a:31:93:90:79:1f:be:f5:d5:d5:3a:4c:14:36:
d4:8e:51:92:7e:e5:dc:3a:e8:61:64:97:27:65:46:
f9:32:41:d3:e5:7d:f8:37:7d:8f:30:bb:85:11:19:
39:01:c5:fb:e9:42:60:e4:83:83:02:c1:c2:6b:c0:
2f:af:91:36:ce:32:f2:0a:3f:8a:95:e8:76:ca:4f:
71:61:b9:2d:0f:fb:07:6f:32:60:17:f7:e2:a0:30:
80:2c:95:47:23:b1:f7:66:64:fb:c5:95:8d:e9:1e:
ca:04:a3:51:e2:43:2d:60:73:49:82:51:40:ae:b1:
eb:47:1b:54:d7:c2:5d:47:a1:37:33:73:d7:78:e0:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:7B:ED:B6:1F:CF:27:01:18:FA:52:B4:32:C1:7E:34:EC:76:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32372e302f32342d3234203d3e20313430303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:09:f6:cb:fd:03:fa:1c:5d:fc:b9:31:0c:ba:56:e2:00:04:
67:e2:97:37:63:4c:03:df:42:92:e3:fb:c2:25:40:c4:67:a9:
50:7d:c5:71:c9:c1:9b:53:43:1c:d6:01:99:3b:e6:63:e5:9b:
f3:11:05:a3:f5:aa:84:a4:8e:57:23:69:a1:f8:f3:7a:b3:39:
01:ee:f2:73:e3:cc:08:f3:0c:33:04:6a:8b:25:bf:69:78:50:
0a:00:72:66:06:b5:1d:5f:78:c3:6a:c5:df:df:1c:53:55:64:
2b:d3:80:69:24:71:66:aa:6a:e2:3f:d5:61:47:e3:cb:11:63:
b6:fd:26:86:3e:fe:a9:7f:a5:8d:b1:cd:e4:5d:e2:e8:4d:73:
11:06:1c:c7:d9:83:fd:30:df:b8:74:0b:54:c2:04:4c:96:52:
9b:cf:9b:3c:8e:96:fa:7a:ef:bf:21:33:76:fc:3b:eb:c9:b8:
28:42:4c:e7:21:0d:e6:7f:ff:d1:0a:6a:69:50:b6:a7:79:c1:
73:03:22:90:db:1c:f2:9f:06:ed:5a:1a:e0:72:a3:02:d4:10:
7d:a4:25:c3:8b:65:f7:a8:3a:5b:44:8d:5a:c8:ed:90:fe:35:
1d:1e:c6:58:63:f9:0b:07:35:61:54:59:c3:31:0c:6f:2d:f3:
1f:d5:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:23 2026 by rpki-client