Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e36382e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: sAsZrMHoVDQr0/LdSI4qf2pqEvgSrUVWiC1KJd1w3jc=
Subject key identifier: 12:F6:BD:23:BF:22:30:97:F8:5E:B7:6F:4C:33:13:A3:7D:4D:2B:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B23264E9DAF73B20EC35AC18545D11299766978
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e203230313135.roa
Signing time: Wed 24 Jun 2026 18:25:41 +0000
ROA not before: Wed 24 Jun 2026 18:20:41 +0000
ROA not after: Wed 23 Jun 2027 18:25:41 +0000
asID: 20115
IP address blocks: 217.217.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:23:26:4e:9d:af:73:b2:0e:c3:5a:c1:85:45:d1:12:99:76:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:41 2026 GMT
Not After : Jun 23 18:25:41 2027 GMT
Subject: CN=12F6BD23BF223097F85EB76F4C3313A37D4D2BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:b7:43:44:b6:b9:f7:38:4d:26:04:be:32:
1e:31:d2:c8:00:f5:46:4e:d3:87:28:8d:45:c9:b0:
18:99:1c:55:e5:74:98:22:be:6b:d4:3d:08:a1:28:
ff:75:f4:2e:1e:de:4f:c4:b1:b3:38:99:cb:a9:dc:
db:a1:d9:60:1b:ed:94:55:eb:4b:74:9e:de:cc:f4:
ce:0d:f2:ba:ed:16:52:fe:be:db:51:0c:92:e6:b5:
d7:fb:82:50:66:c9:51:75:cb:81:85:b6:9a:0f:b3:
70:00:d8:f5:99:86:a0:65:fd:70:13:b2:25:04:03:
db:bf:60:a5:4e:a1:39:78:01:d3:f1:f0:4b:60:2e:
77:79:2b:7e:4b:a1:8e:44:75:6d:2c:77:0d:ef:f3:
36:fb:96:17:9b:93:d1:a1:8a:d5:00:60:e1:4f:1b:
13:bb:44:27:37:60:b9:11:18:87:3d:54:39:6c:b7:
05:11:3d:13:78:c5:ee:e9:a6:55:b6:2f:03:36:74:
59:0b:2d:c6:ba:08:a1:13:03:6e:c2:a2:79:c4:eb:
56:59:39:e1:84:ab:89:86:bd:66:93:9c:24:2d:5d:
13:d7:17:3b:8c:ee:de:69:05:4b:e9:5e:ee:98:61:
be:7d:e8:a5:25:95:e1:53:48:41:e8:ec:1e:64:c7:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F6:BD:23:BF:22:30:97:F8:5E:B7:6F:4C:33:13:A3:7D:4D:2B:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.68.0/22
Signature Algorithm: sha256WithRSAEncryption
26:3b:73:1c:77:b6:bd:ea:15:47:16:74:ae:ee:e8:fe:4a:e2:
5c:f0:00:28:91:97:2d:56:df:2b:74:f7:4f:fc:9d:0d:ab:a1:
0a:c3:24:20:f8:67:7f:43:89:1f:a1:62:c7:7e:51:29:48:dd:
7c:6b:14:7b:fe:47:8a:64:bb:73:ea:18:71:89:06:f9:94:1b:
49:15:95:72:41:14:7f:e0:c1:91:ad:27:e4:e5:e4:10:77:7d:
8a:82:8d:2c:91:0d:df:26:11:38:70:bd:65:c5:a4:29:f1:10:
fe:d0:af:67:f3:7d:23:e4:00:ac:fe:e5:b5:53:e5:ab:d7:a1:
7d:24:7c:29:1f:bf:3f:7d:f9:f4:34:54:e1:e7:e7:80:f6:ad:
2c:90:1a:78:6e:f4:39:8c:4e:25:52:07:26:f1:6e:1b:fa:88:
f4:18:28:87:07:ee:06:df:03:6f:16:e7:df:89:8f:fa:61:dd:
13:db:e0:6c:91:06:b7:c2:b0:a7:ce:11:0b:20:7b:db:5e:f8:
6a:01:04:93:a9:27:d3:fb:9d:b5:ee:01:4c:58:69:31:dc:44:
66:dc:be:ee:cd:6b:6e:2c:c6:7e:9d:c1:55:b1:aa:73:7d:e8:
2c:a8:91:12:9e:2c:c5:65:9b:35:e3:7b:ea:d1:33:9a:0a:0e:
8a:03:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 05:08:57 2026 by rpki-client