Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37322e302f32342d3234203d3e20313938383331.roa
File: 3231372e3231372e37322e302f32342d3234203d3e20313938383331.roa (raw, json)
Hash identifier: 2SSEtLZ/f4B5+YgxycRDSOFNd9ZlwPQIWCKOV43jAAg=
Subject key identifier: 96:8A:9D:E8:83:EC:F3:F8:06:06:73:AB:B8:3B:18:2E:48:E6:7C:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B4700E5E7CABB191C3B089DC29C6D59577DF3B8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37322e302f32342d3234203d3e20313938383331.roa
Signing time: Mon 05 Oct 2026 12:30:26 +0000
ROA not before: Mon 05 Oct 2026 12:25:26 +0000
ROA not after: Mon 04 Oct 2027 12:30:26 +0000
asID: 198831
IP address blocks: 217.217.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:47:00:e5:e7:ca:bb:19:1c:3b:08:9d:c2:9c:6d:59:57:7d:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 12:25:26 2026 GMT
Not After : Oct 4 12:30:26 2027 GMT
Subject: CN=968A9DE883ECF3F8060673ABB83B182E48E67C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:d2:78:e2:36:2b:41:f1:59:ed:93:0a:12:
56:2e:c4:e4:dc:d2:df:bc:10:62:42:24:83:af:df:
6b:e4:f4:e3:7a:11:5d:ac:45:76:fd:46:98:b7:27:
3d:00:d1:1c:59:a9:a2:89:c3:3e:d2:d6:5a:f0:34:
61:4c:a9:07:13:6f:ff:55:5b:8f:47:5b:fe:78:de:
bb:f0:1b:4d:ec:fe:2c:68:8a:ed:07:43:ac:e5:5d:
ed:10:77:43:de:9c:d7:af:f3:30:70:c7:6b:89:56:
89:a8:46:57:3b:06:f7:84:8b:de:3c:63:20:b4:95:
ec:d9:f8:c2:8f:80:f1:86:6a:35:69:08:5b:06:f5:
b9:4c:02:50:3f:0d:e3:14:c5:f4:c7:d8:af:5b:a7:
e4:9c:70:67:10:ae:c8:ba:12:cb:13:15:de:bb:d8:
b1:89:9e:21:97:f7:a9:28:14:ab:d8:e0:2d:d8:ac:
70:5c:a0:43:03:49:f6:2c:1c:f8:b7:8d:08:50:7b:
40:24:1d:d7:bd:fd:91:a9:c2:22:50:fb:e3:3c:96:
d3:de:71:58:f4:f9:85:1b:e4:93:8b:7c:32:59:0e:
a4:b0:33:eb:23:c9:47:c8:63:94:19:17:e8:6f:6a:
03:e7:de:de:11:ce:ca:98:28:a1:77:8d:6e:be:a1:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:9D:E8:83:EC:F3:F8:06:06:73:AB:B8:3B:18:2E:48:E6:7C:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37322e302f32342d3234203d3e20313938383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b1:75:be:2e:b6:85:c5:3c:10:a7:57:22:9b:e0:73:86:7c:
24:6b:1b:91:d1:7d:d5:e0:54:50:88:32:ab:7e:27:c7:16:0a:
0c:40:31:21:94:53:ac:15:05:38:cb:6f:66:85:4f:0b:59:e3:
f4:5c:e1:2a:5f:22:7b:13:03:79:84:27:30:a5:39:7a:58:9d:
8c:4e:d3:b3:25:22:df:ed:25:56:9b:46:cf:0e:30:91:b3:e6:
54:9f:02:63:6d:24:fc:6c:c8:98:8c:4b:d6:89:59:91:be:a9:
57:ec:3b:b7:d7:7c:39:53:9e:64:31:cc:f0:65:63:33:cf:09:
ef:9a:86:b7:19:3f:80:3c:4c:15:6e:c1:da:5f:12:9b:c4:a7:
30:92:3a:43:fc:e8:21:05:e9:6c:75:5e:86:98:1b:75:e9:d4:
47:53:d5:c2:2e:04:2d:80:e3:05:f3:e3:3a:cb:3d:89:6d:be:
45:d2:53:d5:c2:4a:e5:01:8f:de:c2:4c:b0:3b:58:30:57:4f:
50:a4:d4:76:eb:cc:1b:f3:6b:38:16:6c:77:2c:87:35:37:b8:
59:e7:a8:00:52:c4:95:a5:60:24:75:5e:a1:b8:91:81:ba:12:
a1:c6:e3:20:c8:a7:92:ed:46:86:c7:09:2f:4e:fb:03:f6:a6:
ff:32:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:49:57 2026 by rpki-client