Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33362e302f32322d3234203d3e2032383536.roa
File: 3231372e3231372e33362e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: 5bw3TsphoJBw9GE4f0VaNnC+cuVKfltD4A3OOmdh73k=
Subject key identifier: A9:4B:5B:04:41:44:FC:FD:F3:03:3F:B8:4D:32:4B:40:9A:A9:A9:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21515911A77C57D5977F81EEBC29D521FD08F833
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33362e302f32322d3234203d3e2032383536.roa
Signing time: Wed 17 Jun 2026 10:25:21 +0000
ROA not before: Wed 17 Jun 2026 10:20:21 +0000
ROA not after: Wed 16 Jun 2027 10:25:21 +0000
asID: 2856
IP address blocks: 217.217.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:51:59:11:a7:7c:57:d5:97:7f:81:ee:bc:29:d5:21:fd:08:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 17 10:20:21 2026 GMT
Not After : Jun 16 10:25:21 2027 GMT
Subject: CN=A94B5B044144FCFDF3033FB84D324B409AA9A948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:10:2a:89:25:85:30:1c:2b:22:02:25:64:
40:2f:d6:cc:f5:28:d3:56:3b:94:ae:07:5c:45:87:
a1:8e:39:ba:c1:87:db:25:8f:8d:10:39:6d:a0:36:
9d:cd:86:ba:f4:21:9b:18:3c:69:bd:29:f7:a4:20:
bf:46:de:b8:04:cc:8c:ff:8e:30:bf:bc:36:aa:a4:
53:9c:6d:8c:82:78:a4:fe:40:7a:e5:1c:1e:63:03:
13:32:b8:04:1f:38:12:26:17:b4:ca:6e:0a:65:d6:
9b:70:c4:83:a5:7d:63:19:c1:82:4b:8e:62:bc:cc:
ae:d9:2c:3a:39:f2:f7:cb:5e:d1:5f:dd:9a:36:e9:
99:38:01:ee:3e:3c:55:90:df:76:86:5e:db:3e:03:
b0:9c:7c:21:02:9d:92:78:4c:d6:13:ac:3f:97:3a:
c5:0c:e4:65:88:37:8d:65:3f:0b:79:59:54:e7:c6:
55:d1:ee:c4:e6:67:9a:18:09:76:7c:7b:33:fa:86:
df:08:66:a6:a0:27:17:c5:58:78:c3:ac:39:86:cd:
88:be:24:36:7d:c5:66:e2:6d:87:30:e9:f7:2e:86:
3b:61:54:fc:a9:c6:99:7a:3b:9f:8a:9d:3d:ca:30:
b3:b0:bb:a4:5d:ea:6a:d1:6c:02:ba:3c:87:34:d4:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:5B:04:41:44:FC:FD:F3:03:3F:B8:4D:32:4B:40:9A:A9:A9:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33362e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.36.0/22
Signature Algorithm: sha256WithRSAEncryption
76:8d:63:93:71:ae:cc:ef:23:4f:b0:5b:a6:f3:07:a0:54:cd:
62:bc:10:52:29:af:5e:8e:04:f9:b8:67:f1:9a:6c:73:30:c3:
19:f2:c9:2f:c4:ef:26:9c:59:00:86:3f:3b:ad:43:85:3b:c4:
60:9e:2a:39:a3:ad:94:00:42:77:35:d1:95:55:06:f6:df:64:
0b:ba:bc:ab:03:c8:13:7c:15:a7:f3:23:58:01:a9:77:02:18:
56:b9:e5:24:04:a0:fc:f3:52:82:9f:af:55:07:6e:95:03:dc:
70:44:a2:9b:99:e9:05:41:5e:44:cf:79:7f:49:85:4f:01:fb:
7f:ff:0e:8a:e7:df:ba:f2:e1:20:6f:b3:d7:88:06:67:f2:f6:
d4:a9:23:46:7e:95:d3:20:9f:c5:7c:24:0f:75:3f:34:ca:a4:
02:a2:66:89:5b:9d:2b:8c:23:ae:af:e1:2d:a3:26:4a:2b:89:
16:4d:f3:ad:8a:08:74:38:b5:c3:44:6a:1a:3a:61:13:03:e0:
47:73:6c:6f:66:0f:81:d0:03:18:df:74:dc:8d:a4:5a:dd:96:
0f:ea:42:80:49:f0:41:18:75:a0:c7:e5:9c:2f:7c:70:66:0b:
c9:b0:8b:f8:89:7d:9f:5e:bd:f7:8b:e7:18:9d:e0:64:40:14:
88:ff:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:49 2026 by rpki-client