Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37362e302f32342d3234203d3e20313437323831.roa
File: 3231372e3231372e37362e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: Ks65HBV7HC9CS5vT0EiKspfEA4Z6U8uJpaSyCwuiAgI=
Subject key identifier: A6:70:37:5B:87:27:F1:4D:21:5A:3C:84:C1:53:5C:1C:78:40:5E:B9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52F46B00A7545D214673B9ABE9F2096D90479FF0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37362e302f32342d3234203d3e20313437323831.roa
Signing time: Tue 13 Oct 2026 20:11:47 +0000
ROA not before: Tue 13 Oct 2026 20:06:47 +0000
ROA not after: Tue 12 Oct 2027 20:11:47 +0000
asID: 147281
IP address blocks: 217.217.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f4:6b:00:a7:54:5d:21:46:73:b9:ab:e9:f2:09:6d:90:47:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 20:06:47 2026 GMT
Not After : Oct 12 20:11:47 2027 GMT
Subject: CN=A670375B8727F14D215A3C84C1535C1C78405EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:33:09:89:5f:28:a1:0c:ac:c1:6a:3d:91:
03:dc:a6:ad:59:33:21:25:ec:a0:a4:c0:f3:77:db:
63:2d:40:57:86:54:e0:b1:d0:a8:b2:89:96:fc:ee:
06:ba:28:10:44:77:d1:c7:f2:7b:8b:37:71:0b:e1:
2a:71:7a:24:69:89:dd:19:78:0b:27:73:9c:83:6e:
ba:53:eb:fe:93:c9:f3:61:89:db:08:d0:66:56:da:
1d:0f:dd:cf:b8:46:40:29:2f:27:5f:88:a8:e5:29:
f9:8c:7e:57:04:8f:06:5a:d2:ae:de:2b:02:97:7b:
6b:2a:77:4d:e8:51:e7:24:ed:69:71:4e:53:e4:e7:
48:14:97:67:93:96:65:15:d7:5d:7b:84:21:51:1f:
ab:4d:1b:e4:d4:4b:8b:ab:88:a5:69:72:0e:30:0e:
b9:6f:31:7e:8a:34:a9:c5:cf:0c:29:d6:78:ef:97:
5c:2e:a8:a3:f5:00:6a:29:4c:5a:12:c6:00:16:36:
19:74:e7:ee:81:3c:11:e1:22:7c:cf:b1:28:ec:2c:
45:ad:c6:59:78:57:97:31:00:82:63:b2:00:cc:e7:
2f:82:42:2e:51:82:99:9b:19:51:b9:a0:80:57:94:
1d:c3:6e:27:45:1d:80:f6:e8:2e:3d:bf:c8:06:ac:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:37:5B:87:27:F1:4D:21:5A:3C:84:C1:53:5C:1C:78:40:5E:B9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37362e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.76.0/24
Signature Algorithm: sha256WithRSAEncryption
97:de:62:4f:8b:4c:95:e6:01:c5:66:48:a8:b7:f6:02:f8:2a:
93:33:ad:dc:ee:08:a8:c3:2e:6f:64:2b:fc:03:d0:fa:39:f4:
96:1f:15:ac:ee:28:85:f1:95:92:54:fa:52:c4:ec:0d:a3:1e:
76:f5:28:34:e4:e4:19:dd:8a:cb:ac:20:05:5b:74:62:7a:22:
1c:fe:35:a9:94:b7:33:2b:13:97:1f:b5:9b:ed:ca:84:8f:3f:
70:3a:53:40:e0:f9:b7:34:00:d0:78:a5:8a:0a:ee:ba:ee:1b:
45:2d:ee:04:c9:06:c1:20:d6:c3:a7:81:71:7a:68:be:69:9d:
85:fe:d6:a3:14:03:02:c6:b5:8c:cf:02:5b:e8:bb:4a:d6:93:
2d:e2:51:35:6c:69:01:65:4d:28:b2:28:83:0a:ef:9e:98:78:
24:67:cf:e9:ae:d6:a3:04:ba:e6:ce:40:2c:e0:0d:42:fe:dd:
20:0a:84:24:18:59:ac:d5:df:da:9e:af:63:be:38:f5:f4:d2:
49:24:be:50:90:03:82:12:d3:47:b5:49:67:3e:b8:51:3a:84:
95:6e:66:c2:cf:c1:8b:4a:b2:49:73:ac:75:07:3c:8d:63:6b:
9a:e4:45:7c:fc:e0:e0:8a:c9:2c:cb:16:9e:fe:56:9d:bd:e1:
27:96:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:41 2026 by rpki-client