Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e35322e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: 65IJXrNQAXPpAbpaVvTQIEjDOZIUPVx/nVl9t6Eg7jk=
Subject key identifier: 95:78:15:7E:7E:E4:3A:39:A6:87:67:D2:FD:02:84:FA:BA:07:CB:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 052ECB4FC8686EF8DC1E028E69D62DC8053CBF54
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e2037303239.roa
Signing time: Thu 18 Jun 2026 19:25:25 +0000
ROA not before: Thu 18 Jun 2026 19:20:25 +0000
ROA not after: Thu 17 Jun 2027 19:25:25 +0000
asID: 7029
IP address blocks: 217.217.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2e:cb:4f:c8:68:6e:f8:dc:1e:02:8e:69:d6:2d:c8:05:3c:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 19:20:25 2026 GMT
Not After : Jun 17 19:25:25 2027 GMT
Subject: CN=9578157E7EE43A39A68767D2FD0284FABA07CB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:0e:2a:0c:27:32:6e:bd:1e:7d:42:c4:63:
06:df:9b:16:63:8b:be:eb:6c:fc:da:f8:8f:6b:35:
6b:63:d3:b2:f7:86:59:bf:9b:82:e8:72:c5:c6:87:
89:9c:e1:0a:72:41:13:32:40:aa:6b:cf:6f:20:76:
f3:93:9d:f2:cf:0d:d2:41:dc:8c:51:4a:e1:02:13:
b1:3c:aa:64:f7:31:13:7b:a6:15:28:6e:ca:37:22:
4d:9a:34:61:7f:b7:ee:48:e2:9a:21:fd:a7:7e:d7:
dd:00:45:38:f7:93:ad:fe:42:7a:22:cd:0f:1e:82:
64:78:8c:50:64:77:0e:67:00:10:bf:bb:e5:b4:47:
44:36:69:b5:e3:80:9a:50:19:5e:c3:f0:fa:12:aa:
44:fd:83:23:3d:59:f6:31:cb:57:5a:ef:6a:52:3b:
6d:d7:0a:67:b9:96:81:3a:98:af:12:78:26:4e:d6:
57:78:e7:21:7a:d5:b4:05:52:9a:2b:c5:a8:4a:31:
b5:1f:28:32:2c:08:95:8b:a2:d4:27:f5:b3:b7:c3:
ed:d9:9c:fc:70:8a:42:65:61:d6:81:48:54:1a:c2:
79:02:a8:a0:d2:59:0d:2c:bf:35:2a:0a:e6:bc:3a:
9d:60:36:47:d2:e9:86:3c:54:b8:b2:b9:2b:96:17:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:15:7E:7E:E4:3A:39:A6:87:67:D2:FD:02:84:FA:BA:07:CB:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:95:b0:eb:8e:f6:e2:60:fe:db:65:1e:7e:f8:7f:12:64:c5:
0f:e7:50:20:df:19:ea:6c:bf:42:64:20:d9:d6:4a:26:45:96:
63:18:1b:a7:02:60:91:f3:69:8a:ba:37:e1:bc:8c:93:2f:fc:
2b:93:c1:08:7c:e8:fe:27:3c:2e:8f:24:23:a5:ed:a8:38:5f:
7c:6d:07:e2:be:ca:7f:d3:9b:5c:90:c0:1f:72:8e:cf:41:e0:
0d:b2:b2:1b:f4:5e:f3:34:c5:ac:d6:87:8d:76:6e:9f:94:6a:
a8:cd:a6:72:7a:53:39:69:3e:2f:2c:5b:b2:70:4c:98:2f:51:
ba:35:e3:79:5a:d1:c1:46:bf:9c:ba:8a:c9:bf:29:6b:9d:0d:
c4:83:8e:f5:16:1c:54:cc:e7:89:5d:ae:fa:41:99:73:03:ce:
ad:35:b3:78:1e:43:8f:3a:89:96:9a:db:b9:6e:5b:62:bc:0d:
76:a1:b6:e4:75:fa:f8:dc:87:f9:4d:7b:27:af:3e:29:51:11:
d9:46:5e:1e:be:0f:0d:05:ec:ab:f2:dc:a9:1b:61:52:5c:ac:
4a:d0:6e:b9:93:57:bf:06:cc:bb:64:9e:db:0a:e8:97:d6:8e:
60:b0:82:47:6d:46:ab:66:38:1c:8c:86:5d:d2:fe:1d:34:ac:
8a:e6:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:46 2026 by rpki-client