Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32392e302f32342d3234203d3e2035303635.roa
File: 3231372e3231372e32392e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: R3GHjWBEYtRA4rC0GgFvY5E7+6/C8G/95DOJtYhMXiI=
Subject key identifier: CC:A1:C2:4C:99:EA:A5:9D:55:12:0D:5B:67:9F:30:B0:21:49:B5:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 14FAF2517B0E33B5F64D415C6E3706EF47759763
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32392e302f32342d3234203d3e2035303635.roa
Signing time: Wed 24 Jun 2026 09:25:38 +0000
ROA not before: Wed 24 Jun 2026 09:20:38 +0000
ROA not after: Wed 23 Jun 2027 09:25:38 +0000
asID: 5065
IP address blocks: 217.217.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:f2:51:7b:0e:33:b5:f6:4d:41:5c:6e:37:06:ef:47:75:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 09:20:38 2026 GMT
Not After : Jun 23 09:25:38 2027 GMT
Subject: CN=CCA1C24C99EAA59D55120D5B679F30B02149B5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:f2:a9:53:2d:c4:98:59:57:a9:18:60:57:
dd:0e:d8:8b:2a:05:5b:5c:3b:c5:ce:30:9e:da:b6:
ab:8b:83:62:d1:2f:53:7d:e0:b5:30:9d:a8:ac:0d:
c9:cd:03:d1:c6:d7:5f:54:85:3e:70:33:a5:61:39:
90:cd:69:f5:ac:c1:b9:3b:89:a3:5c:7d:a1:0c:18:
ed:b9:4b:e2:3b:39:3c:28:ad:e6:59:13:2c:6a:ae:
9d:e8:ce:cb:cc:23:ca:9c:91:ab:fb:9e:e8:18:04:
5b:6d:53:bf:fb:62:e0:62:a8:87:e2:d7:87:b3:d9:
12:1a:b1:10:d8:b3:43:3e:e9:84:c4:35:ca:a0:a7:
aa:78:4b:6d:37:3b:d2:ad:46:ba:0e:d9:b1:da:f3:
9c:42:90:a7:e6:58:c9:f1:69:dc:ab:ce:b9:b3:1c:
3f:86:d2:56:4a:72:56:f8:24:4c:d5:c1:44:99:cd:
02:06:9c:02:94:98:5c:0e:14:dd:7b:1e:a8:75:ae:
1e:8b:6e:e4:48:5b:4c:9c:6b:57:98:57:f5:1b:1c:
ad:e3:f6:c3:c9:f1:10:80:48:d3:c0:59:e3:bb:60:
c4:ca:d7:13:17:ca:89:a8:fc:0b:c8:09:c1:5f:c9:
20:ed:b3:51:b5:4e:b2:b8:f4:83:ce:86:0b:74:7f:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:C2:4C:99:EA:A5:9D:55:12:0D:5B:67:9F:30:B0:21:49:B5:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32392e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.29.0/24
Signature Algorithm: sha256WithRSAEncryption
40:44:9f:bb:b2:7d:f6:c4:8d:10:ce:48:f0:e2:b6:70:e4:e4:
d3:c2:c1:dc:f1:9b:06:29:41:c9:ee:2b:97:4a:e4:d9:2f:77:
89:64:96:fd:ed:73:88:3f:0d:53:0a:5e:57:95:fa:0a:4c:d2:
2c:c9:c7:c1:2a:46:76:20:33:d4:0e:5c:a4:36:30:92:46:c3:
dc:e7:19:77:99:4c:18:a5:8b:9c:dd:e2:9e:5e:d6:95:b3:d9:
0b:63:33:fb:43:31:22:5c:44:5a:b4:6b:96:08:03:22:f8:6a:
f1:e8:6c:61:d8:48:31:8f:2f:9c:5c:af:bc:3f:88:57:cc:e4:
9b:30:92:16:3e:80:7f:d0:3b:48:3d:66:c8:57:80:8e:0e:80:
24:db:56:bc:d4:fb:bf:a7:46:13:e1:dd:81:92:5c:25:85:47:
43:6e:1c:56:fc:f0:a8:aa:ad:cc:53:02:f4:d2:43:5a:d2:fa:
4a:0a:c0:1a:36:50:47:f5:60:67:f9:70:d6:f7:db:0c:49:09:
ba:bd:74:5f:86:b8:2c:50:36:2e:47:78:aa:74:47:1f:88:0a:
24:ff:34:ee:a7:b4:a4:55:8d:62:fc:f0:33:63:6a:76:24:1c:
07:7e:dc:d2:48:03:30:dc:c3:c0:91:16:0d:47:d4:99:39:bc:
0d:12:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:32:53 2026 by rpki-client