Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203232373733.roa
File: 3231372e3231372e36342e302f32322d3234203d3e203232373733.roa (raw, json)
Hash identifier: TBYB0GdcoYHe/+LmZ16R+vQOY9KdOyVXfNJ7MTuWYfE=
Subject key identifier: AC:1F:47:2B:E2:76:5E:04:78:15:41:0E:A2:C7:C6:7B:F2:CE:F2:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72973B3944E89D41F4010D9A1345C7B9B3E670AD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203232373733.roa
Signing time: Fri 27 Mar 2026 13:51:04 +0000
ROA not before: Fri 27 Mar 2026 13:46:04 +0000
ROA not after: Fri 26 Mar 2027 13:51:04 +0000
asID: 22773
IP address blocks: 217.217.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 02:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:97:3b:39:44:e8:9d:41:f4:01:0d:9a:13:45:c7:b9:b3:e6:70:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 13:46:04 2026 GMT
Not After : Mar 26 13:51:04 2027 GMT
Subject: CN=AC1F472BE2765E047815410EA2C7C67BF2CEF24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:a3:ef:05:d1:03:d5:94:a4:bf:53:65:b4:
57:c4:f8:cf:7c:1a:f2:27:30:65:fa:f6:dd:e3:cd:
d3:c3:82:06:f9:ec:e6:6d:1b:4b:fa:a0:9d:02:96:
d4:bc:71:84:7f:8c:2b:7e:a0:7a:bd:02:dd:8d:36:
4c:7a:22:f4:d9:19:08:fc:5f:ae:0f:0d:d5:41:66:
f0:dd:2c:e9:6b:5c:9c:1a:92:39:67:c3:d2:fd:1a:
6c:b4:7c:3f:bc:65:8b:9e:51:ac:5a:01:98:a4:17:
ce:9c:dc:53:e2:a4:be:0f:4e:4a:40:11:29:ac:6f:
af:4b:c3:1d:e6:3c:c8:83:e3:07:ca:4d:eb:33:8a:
4c:f5:c4:7a:a7:25:89:d4:1f:3b:5c:28:19:d9:49:
ae:67:6c:bf:bf:c7:66:19:69:bb:63:3e:d6:12:2f:
7f:8c:a4:53:ea:9b:2e:8b:85:d9:49:4a:2b:81:9d:
7e:18:ef:9b:4f:c0:ab:8e:4c:46:11:d9:00:fe:ff:
58:a7:5e:48:9b:cb:77:07:54:ad:eb:45:f2:5a:07:
1e:21:e6:be:37:43:8d:39:75:85:9a:4a:79:4d:8f:
c2:e1:3e:7d:01:90:05:05:8f:7c:9e:b5:44:73:39:
66:45:31:7a:b9:86:8b:66:98:0b:71:86:7a:72:cf:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:47:2B:E2:76:5E:04:78:15:41:0E:A2:C7:C6:7B:F2:CE:F2:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:13:95:6c:f5:8a:73:f3:7c:a7:c8:ac:ae:0d:5c:2b:ff:d4:
ec:70:10:13:01:8b:c1:5b:fa:76:03:1b:93:b8:37:45:c9:0a:
44:53:b7:c1:e5:a1:d2:c8:5e:d4:af:67:b3:15:77:fe:a6:44:
3d:0c:26:98:5c:7d:09:8c:e1:3d:5c:50:a2:05:da:50:40:27:
04:83:5e:67:6a:e6:13:14:f5:4d:0b:24:65:a3:20:15:d8:fc:
da:1d:53:ef:d9:71:f5:cf:f5:ea:9e:83:3e:1a:cf:88:f0:8e:
ab:c1:93:66:84:7e:04:1d:e2:e1:68:5a:a7:cb:d7:73:e0:58:
7a:d1:b0:87:b6:00:cd:48:40:af:9c:53:0b:42:e0:b4:65:b9:
72:15:03:68:8e:6d:9a:fc:14:02:c8:bf:01:cd:b6:c6:fa:5e:
a0:48:c0:0f:3f:d4:ff:0c:3d:b1:ad:58:9a:cd:14:31:e2:72:
4d:cc:ac:31:49:92:7e:9b:1d:a5:88:a2:3f:ab:70:d7:aa:23:
0b:f4:2f:93:7d:04:6b:d6:19:58:3c:6c:34:31:cf:37:3b:d9:
73:55:f6:64:7b:ac:bf:20:61:0f:34:a4:b1:9e:8f:61:f6:c4:
45:60:fe:33:22:65:5c:6a:f5:d3:c7:57:6b:ac:1f:11:f7:c5:
74:68:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:41 2026 by rpki-client