Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e34382e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: E4SNaYjcGYQheEGdUH7MqsxKZ9Tno5T0+sB6iFmH0mI=
Subject key identifier: 15:A2:CD:42:1F:81:DC:61:33:02:E4:1D:BA:EC:29:F1:C8:C4:1B:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3FDD3F107E85C1BAF3AF26C3E93797EA93BA8016
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037303239.roa
Signing time: Thu 18 Jun 2026 19:25:25 +0000
ROA not before: Thu 18 Jun 2026 19:20:25 +0000
ROA not after: Thu 17 Jun 2027 19:25:25 +0000
asID: 7029
IP address blocks: 217.217.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:dd:3f:10:7e:85:c1:ba:f3:af:26:c3:e9:37:97:ea:93:ba:80:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 19:20:25 2026 GMT
Not After : Jun 17 19:25:25 2027 GMT
Subject: CN=15A2CD421F81DC613302E41DBAEC29F1C8C41B8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:b5:27:fd:ef:9c:ed:88:b0:0b:e0:56:8c:
24:94:34:25:43:43:e8:92:e8:12:af:dc:7a:e7:aa:
3c:00:0b:05:6e:ba:19:93:60:64:34:b7:df:8f:08:
f5:0a:66:37:96:15:c7:b5:af:d0:2a:cd:c0:e1:a5:
3c:e3:32:5b:5e:c3:e6:5a:fe:5a:f6:85:e4:92:ba:
3b:59:1e:98:89:d6:8c:59:24:36:fe:6b:e5:68:b6:
24:a5:a4:fe:97:0f:88:34:93:93:1f:af:67:05:23:
fb:1e:2c:e4:cb:97:2f:ac:ee:de:61:a5:94:77:58:
01:fd:92:69:f9:3c:6e:be:87:91:d4:77:b4:bf:00:
60:02:fe:8c:1f:69:37:ae:39:00:d9:00:06:c9:49:
10:78:99:ee:ec:80:f7:fc:52:cc:5f:45:e9:aa:17:
37:64:5b:30:cc:df:bb:02:03:45:4d:e4:0f:0e:f7:
5a:6d:67:76:a0:16:47:95:b0:95:83:4f:85:4d:9a:
e6:2c:2f:95:e6:30:72:b5:97:30:b5:ca:05:de:54:
e2:43:59:2c:03:0c:de:6c:6b:e4:d8:be:f7:ab:be:
3c:c4:84:f0:20:14:59:15:4b:4a:83:8b:82:cb:b7:
f5:a7:53:70:61:e8:52:60:c4:df:43:57:7e:79:bc:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A2:CD:42:1F:81:DC:61:33:02:E4:1D:BA:EC:29:F1:C8:C4:1B:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:07:39:f4:ad:1a:05:e8:dc:48:08:cc:06:53:fb:e6:e7:fe:
f1:ce:da:2e:d3:d4:97:8d:7e:70:d4:27:60:ec:64:d1:9a:cf:
4a:2f:f2:1e:1f:93:9e:86:0b:7c:89:df:fb:56:ed:39:91:98:
c7:f8:03:bc:5c:61:99:b0:7b:e3:a9:5e:05:69:f9:7f:20:26:
81:aa:a2:ef:d0:06:4f:2a:85:87:1d:61:2e:01:c1:cc:b2:5f:
59:ff:95:c0:b5:1b:6b:83:bd:61:33:4e:53:96:d8:6e:3f:e9:
9b:87:b8:89:a0:9f:b0:5c:cf:f5:17:2c:4c:37:fa:77:d6:32:
7b:52:ce:19:bc:75:6c:d3:df:13:70:6e:6b:78:9d:70:a1:1d:
22:80:10:19:84:65:99:c1:86:3a:e9:2d:b7:55:0e:32:76:10:
a6:30:dd:83:d9:09:f4:f0:59:7b:bb:c3:81:d5:b8:61:5c:41:
69:6f:d7:0b:1f:63:1d:d0:76:b1:37:54:94:7e:09:a0:e2:18:
11:16:47:16:af:63:50:ec:d5:0b:91:34:e1:b8:2b:b5:e9:cd:
76:ac:1c:e6:59:5f:8c:87:22:1c:b2:80:8a:df:26:04:82:14:
cb:1e:f6:e6:9f:c9:02:42:57:51:df:4a:38:29:5a:ac:b3:ff:
8e:2b:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:47 2026 by rpki-client