Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e36342e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: NdtkvTPVUw5O2eIYkEt+kocMZ76pxkc1v0yJfUCroys=
Subject key identifier: 10:22:8B:BE:14:B9:A2:02:E2:F2:57:78:33:1A:2A:A7:14:79:03:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72D3C98BA4670F53CE57328D0E0EB62FC7C5166E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203230313135.roa
Signing time: Wed 24 Jun 2026 18:25:41 +0000
ROA not before: Wed 24 Jun 2026 18:20:41 +0000
ROA not after: Wed 23 Jun 2027 18:25:41 +0000
asID: 20115
IP address blocks: 217.217.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d3:c9:8b:a4:67:0f:53:ce:57:32:8d:0e:0e:b6:2f:c7:c5:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:41 2026 GMT
Not After : Jun 23 18:25:41 2027 GMT
Subject: CN=10228BBE14B9A202E2F25778331A2AA71479033C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:ae:b1:61:17:52:9f:60:14:b7:ce:c8:7a:
0c:f6:4d:15:5c:b7:97:1c:2d:00:82:3e:74:b1:f3:
0c:28:1d:fe:ef:4b:8f:17:fb:18:d5:6c:a4:a4:d5:
c0:4e:2d:1c:73:dd:cc:41:43:77:ad:05:b5:f3:64:
b2:21:0b:56:b5:16:e1:ce:cd:48:6d:b5:33:ce:61:
0f:6b:50:e2:43:27:bb:a5:4c:b0:a1:43:c0:6f:af:
60:47:17:b6:b3:79:e1:08:f6:b5:32:48:89:f1:ea:
37:78:7b:57:a4:52:1e:0e:ce:ad:34:29:49:1e:45:
b0:6a:b3:cc:75:2c:e6:d9:6b:2b:28:0d:5f:a5:0e:
f6:7a:83:2b:06:80:5c:3c:ef:9e:8c:e2:fa:46:a5:
2e:9a:37:77:00:ae:15:31:1c:d3:ff:11:e0:f6:30:
00:2f:a1:12:3d:2c:c0:0a:dd:c3:ed:e3:12:2b:be:
1b:0e:70:f6:c4:3c:cd:7e:a4:d7:cc:a2:f7:8d:ba:
88:4a:0b:ca:e3:f4:dc:0c:44:d6:99:56:aa:d7:18:
18:35:55:bf:e3:16:7c:21:2a:d0:60:4b:46:c8:20:
24:20:bc:0e:79:5c:a2:1d:a7:71:ef:5b:a6:a6:bf:
48:23:29:0e:1c:83:df:ef:be:4e:9b:80:71:96:d3:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:8B:BE:14:B9:A2:02:E2:F2:57:78:33:1A:2A:A7:14:79:03:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:d0:b5:af:04:e9:b0:d6:18:54:0e:3d:fe:84:4b:ef:f3:9f:
46:0d:68:79:af:26:1e:98:d0:49:48:ab:63:eb:c8:ca:d8:91:
20:83:27:a1:e5:7f:f7:fe:89:ac:46:60:2a:52:ad:a8:1d:51:
cf:a3:5f:94:dc:32:04:c0:d9:8d:3e:58:06:b0:97:7a:84:7d:
5b:08:fc:37:b1:00:a2:0e:d1:44:ba:11:0a:0a:76:c1:e8:75:
a3:b8:64:4c:0d:13:1c:6e:be:b9:b4:bd:d8:18:81:16:d8:dc:
af:cf:9f:f3:ad:ea:93:7f:a3:fe:82:21:39:95:70:d7:9f:33:
3f:78:a7:d8:57:7b:21:83:e3:d1:9f:4f:5a:58:ad:ab:be:0a:
95:db:73:a0:06:fe:ea:90:d3:6a:2d:9d:8f:2e:d6:d5:47:c7:
74:20:fc:57:0a:3d:2e:20:f3:6e:a4:50:7f:c4:b5:4d:63:e9:
b1:f7:a1:2e:ce:49:9b:a1:44:b8:f7:df:06:1d:71:fe:89:ae:
8e:5b:ad:60:a8:d1:7c:50:6f:a2:7b:4e:aa:b3:fa:59:bd:73:
56:c6:c9:48:3a:9d:a0:11:f1:79:74:57:47:4c:33:ca:1b:19:
55:ac:a1:2e:ea:fc:73:f0:a9:da:de:32:18:c8:a2:cd:45:ff:
26:d0:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:36 2026 by rpki-client