Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e34382e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: ZHrQ7pjIJHQx0HypqIv57B6Q+caQPtPPeik5BmDP+gM=
Subject key identifier: 3E:AF:DC:9C:7F:48:8F:7A:0E:67:DC:91:96:3C:8E:FA:D8:93:AE:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B88BFBB9C78AE7226A2F1C9DD97377B124790EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e203230313135.roa
Signing time: Fri 19 Jun 2026 19:25:31 +0000
ROA not before: Fri 19 Jun 2026 19:20:31 +0000
ROA not after: Fri 18 Jun 2027 19:25:31 +0000
asID: 20115
IP address blocks: 217.217.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:88:bf:bb:9c:78:ae:72:26:a2:f1:c9:dd:97:37:7b:12:47:90:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 19:20:31 2026 GMT
Not After : Jun 18 19:25:31 2027 GMT
Subject: CN=3EAFDC9C7F488F7A0E67DC91963C8EFAD893AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:da:62:33:96:83:5f:76:ab:29:70:41:1e:
ff:9d:59:9f:7e:96:04:2a:22:12:b4:5b:b2:40:fe:
1c:66:98:34:15:ac:b2:22:4e:cb:e8:3c:21:96:30:
79:79:49:4a:d2:ff:20:b6:bf:3c:ae:5c:2c:2f:33:
5f:53:c4:9d:62:e1:73:d6:32:d2:a5:50:dc:f9:82:
dd:3b:bb:36:2d:23:a6:9c:28:89:ff:69:83:a4:32:
5c:41:90:31:65:7c:97:dd:1f:d6:00:d9:56:39:45:
5b:62:16:ab:bd:24:bb:59:9c:7e:83:18:c4:3a:d3:
10:e2:1a:96:36:3e:18:4e:64:51:53:84:8b:06:53:
c7:61:6d:aa:71:ca:5d:49:fc:81:c7:12:61:52:1c:
83:17:ac:5e:75:ed:f2:6b:87:3f:37:da:21:3a:73:
8c:3b:47:58:ee:af:c2:db:38:65:b1:e3:f8:72:07:
34:32:77:40:18:59:86:7c:a3:54:00:11:3f:8a:5b:
9f:01:e3:96:59:63:a1:56:88:67:74:8c:7b:90:03:
f1:c7:f6:c3:c8:61:e8:b1:94:c3:f4:c7:17:fa:82:
a0:6f:d4:db:5c:c7:b4:cd:c3:ee:98:88:06:bb:65:
22:c1:c2:d7:2f:3a:dd:1b:16:61:2a:3f:49:71:d5:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:DC:9C:7F:48:8F:7A:0E:67:DC:91:96:3C:8E:FA:D8:93:AE:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.48.0/22
Signature Algorithm: sha256WithRSAEncryption
21:44:87:60:02:5d:89:c0:a7:50:ad:d5:60:da:03:e4:0c:ce:
ed:78:13:5d:d6:f4:71:02:a2:20:ed:dc:8a:b8:be:d6:56:40:
4c:4a:50:be:75:29:d3:d8:a6:70:d9:4e:cb:72:77:02:2a:42:
ad:94:27:bf:fa:09:90:fc:94:ea:85:da:43:b1:4c:7a:1f:e2:
96:e1:e7:6c:52:46:ff:4f:f8:75:83:89:4b:b0:9e:1e:f7:0e:
8f:f6:ed:36:ed:39:bc:cb:e4:38:e7:2c:e5:f1:55:0e:27:c4:
f2:98:26:e5:c0:17:2d:a6:b3:5e:3a:63:a3:7c:36:4f:55:3d:
92:1f:91:cd:48:06:4c:e7:38:67:8f:37:13:11:99:28:32:35:
0d:a0:49:89:49:e6:99:2d:c0:d0:eb:fd:d5:1f:ff:af:b3:0c:
08:90:3e:27:91:ca:af:9e:93:fa:c6:72:b0:8d:ae:91:5e:a7:
8e:32:a3:33:19:88:13:44:12:09:49:9d:3c:07:a7:96:de:80:
1d:4c:4d:9f:a7:3c:33:dd:78:a7:4b:71:55:07:03:0c:e8:d7:
6e:15:7e:81:1b:e4:1d:1a:01:18:fa:76:c9:e7:7f:95:1d:f1:
66:6a:07:d9:bc:10:e5:40:2d:97:57:ea:7e:18:a2:da:48:f5:
f5:a4:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:44 2026 by rpki-client