Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33322e302f32322d3234203d3e203439333034.roa
File: 3231372e3231372e33322e302f32322d3234203d3e203439333034.roa (raw, json)
Hash identifier: ht+++wE8NalKd0iGnhv1Bgb3ZZ56vvAvRGtwIyt69/I=
Subject key identifier: 79:9C:80:20:7C:92:3A:40:19:B3:38:00:0A:87:F4:7E:93:FA:C5:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 596BA2E0BAFF3806B8F15956CF433DDC8A037064
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33322e302f32322d3234203d3e203439333034.roa
Signing time: Mon 19 Oct 2026 15:29:56 +0000
ROA not before: Mon 19 Oct 2026 15:24:56 +0000
ROA not after: Mon 18 Oct 2027 15:29:56 +0000
asID: 49304
IP address blocks: 217.217.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6b:a2:e0:ba:ff:38:06:b8:f1:59:56:cf:43:3d:dc:8a:03:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 19 15:24:56 2026 GMT
Not After : Oct 18 15:29:56 2027 GMT
Subject: CN=799C80207C923A4019B338000A87F47E93FAC561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:f5:28:e7:93:e8:e7:6c:4c:0c:f4:54:f8:
6a:77:5e:e9:03:44:78:93:35:58:c0:4e:80:5b:85:
33:72:e3:87:88:95:3f:82:a0:0e:8d:61:e2:cc:7f:
10:b0:c4:22:52:75:5b:b3:86:a8:b1:2b:72:5a:39:
2d:7a:66:35:da:d3:c0:16:ca:49:f4:d9:95:4b:ca:
73:15:3b:d5:2a:41:67:02:08:b1:a9:8f:ac:9b:ce:
2d:e9:5c:d9:aa:4b:2e:2f:08:27:5c:d0:29:1e:01:
64:cf:f1:72:e7:9f:1c:0e:1a:2c:8c:96:71:91:7b:
bc:60:cc:41:a2:d1:35:50:39:b4:a6:34:22:40:01:
e5:5d:3e:eb:1f:c2:5a:9a:25:5b:ff:0b:7f:ae:aa:
60:9b:c9:ea:fb:c2:4f:7f:65:00:8b:e6:ea:ce:5f:
e0:8a:88:7b:3f:9c:de:43:bd:f0:6f:2a:cd:bf:97:
33:dd:28:73:45:75:1a:8d:d6:10:80:e7:ba:dc:16:
cf:2d:c2:38:b4:7e:0d:bb:34:63:42:2c:8e:7f:21:
d7:d6:e9:af:e4:b8:97:f3:4b:6b:fe:7d:4a:81:93:
d0:ae:30:c0:b6:b6:3a:53:34:71:b1:e5:30:b4:65:
3c:53:4c:5b:64:82:5f:4a:3c:af:b4:a4:39:47:90:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9C:80:20:7C:92:3A:40:19:B3:38:00:0A:87:F4:7E:93:FA:C5:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33322e302f32322d3234203d3e203439333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.32.0/22
Signature Algorithm: sha256WithRSAEncryption
42:b6:1a:d4:71:ab:67:4d:ce:b1:d8:82:b6:de:9d:39:33:29:
a3:ac:03:3d:85:ab:14:31:ce:cb:78:de:48:58:ad:fc:b1:83:
ab:b4:67:1d:d0:1a:8b:25:1b:ec:6d:74:94:a7:c4:c2:04:f2:
59:65:ef:d0:97:9d:66:85:fc:ad:5e:72:78:f8:de:4f:14:eb:
12:69:39:ed:24:48:b8:fb:da:67:e1:72:53:ef:f8:79:4c:2a:
ba:7b:f4:d2:7a:3c:c4:c1:ed:9b:2c:65:1c:d8:6e:14:a0:34:
cd:ed:34:42:75:ec:f4:42:b3:bc:23:e6:71:68:0f:6d:57:94:
59:ed:82:b9:1f:70:2f:c4:11:b7:05:38:a9:aa:80:25:d5:5b:
18:c8:c0:d2:6e:92:0c:0d:38:77:69:9a:2b:99:6e:b7:62:a3:
14:f4:c6:2e:1a:ff:43:a9:c7:e4:f1:80:2f:2e:73:e8:a9:9a:
17:54:50:65:50:47:a1:4e:e8:fa:4a:66:b1:95:0f:5e:db:25:
68:f1:27:ca:97:03:fb:38:4c:83:1d:46:b9:d3:c7:1e:9b:b4:
b4:fb:7e:25:0c:3b:dc:9b:b8:da:38:1a:04:c1:43:e0:54:b2:
00:6d:cf:76:6f:74:d3:24:d8:ca:7a:a6:d7:0e:61:61:8e:57:
fd:98:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:20:41 2026 by rpki-client