Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e203232373733.roa
File: 3231372e3231372e34382e302f32322d3234203d3e203232373733.roa (raw, json)
Hash identifier: 6Nvz2dMX6De9IzzcgoF+JiUmHqojMMv1KhcYIdsBALo=
Subject key identifier: D8:F2:29:B4:00:57:EF:B1:76:39:21:A0:DB:C8:E7:DE:87:38:8C:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BCFD15B6BB3A255B1919B17EC2CF73F5EAB71F3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e203232373733.roa
Signing time: Fri 27 Mar 2026 13:50:45 +0000
ROA not before: Fri 27 Mar 2026 13:45:45 +0000
ROA not after: Fri 26 Mar 2027 13:50:45 +0000
asID: 22773
IP address blocks: 217.217.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 02:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cf:d1:5b:6b:b3:a2:55:b1:91:9b:17:ec:2c:f7:3f:5e:ab:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 13:45:45 2026 GMT
Not After : Mar 26 13:50:45 2027 GMT
Subject: CN=D8F229B40057EFB1763921A0DBC8E7DE87388CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:e9:83:11:c8:ac:be:0e:15:29:ee:1b:9f:
09:b2:33:6a:aa:c0:0c:92:28:70:75:5a:f3:50:c4:
db:85:f4:31:af:f7:85:7f:45:09:bf:c2:a2:ba:64:
35:51:fc:9f:9e:e6:aa:22:9e:ca:58:f6:b1:44:46:
19:e3:60:bf:00:e2:d9:8f:51:9f:9d:77:12:8c:7d:
0d:ea:37:ce:f1:89:d5:34:14:b5:0b:d4:e1:ed:45:
9e:cc:e6:e2:56:cd:ae:66:e8:a0:68:6d:ab:f3:d7:
5e:af:4b:27:b2:4f:43:f5:8d:90:6d:c6:f9:e9:1d:
87:fe:e0:7c:14:fc:16:81:94:fa:af:a5:6b:5d:52:
0a:fe:a3:fc:7a:fc:3e:7c:c2:50:fd:2b:ae:8e:99:
d1:5c:d0:e8:66:9a:22:a3:31:91:18:05:38:74:12:
9f:e0:d5:c2:2d:58:2a:ff:fe:66:86:73:71:d8:72:
92:55:f2:92:68:9b:30:84:f1:ca:9c:4b:6c:e4:3b:
4f:9d:f7:9b:cc:3e:1b:93:8e:94:cf:c5:f7:0f:d2:
ec:41:3b:9d:15:d0:72:8a:c0:8c:fd:e1:90:10:b9:
2f:dc:08:68:27:26:e0:9b:1f:01:7b:cb:8b:64:74:
87:40:e2:82:d2:df:27:f3:f0:8e:cc:5e:37:58:ba:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:29:B4:00:57:EF:B1:76:39:21:A0:DB:C8:E7:DE:87:38:8C:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.48.0/22
Signature Algorithm: sha256WithRSAEncryption
54:31:78:3b:a9:34:c6:3f:31:34:41:ef:a0:1c:90:b6:e0:47:
14:a2:af:61:44:85:fb:a2:3d:57:7f:d5:8a:07:58:ff:38:43:
29:cb:55:9c:82:e2:69:3f:f4:39:e7:f9:37:66:f4:a0:59:7c:
4f:4b:23:9e:45:b5:d7:3e:a6:cf:fd:a9:bc:14:f5:66:74:47:
b8:99:88:f1:da:ee:95:d8:84:41:7d:99:e8:98:00:31:ab:6e:
3a:04:5d:56:75:a8:a4:d7:e1:21:19:65:2d:93:19:87:1c:2e:
d3:29:2b:5f:02:10:d9:d0:5e:96:58:03:ef:bf:d6:a6:93:a5:
98:94:4d:b5:6d:be:ca:e0:a8:80:88:dd:dc:a4:9c:e4:95:1f:
52:18:55:9d:cc:e9:70:b5:3c:34:30:57:64:f4:65:e1:34:a0:
44:ae:c6:03:cd:f3:cf:4b:1e:fc:cf:b7:13:7d:f6:db:4b:54:
34:db:e9:f4:b7:82:6b:2f:1d:da:ea:d9:4b:3d:eb:41:c3:c8:
31:1a:23:00:43:65:4d:32:ad:bb:da:5a:e2:04:01:f9:a1:ad:
ac:60:d3:08:7a:82:0e:d0:24:7d:89:02:11:60:73:c5:57:46:
4d:16:f6:5b:d5:0e:35:84:f5:d0:f3:d5:4c:4f:86:7d:eb:ce:
57:3f:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:40 2026 by rpki-client