Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37382e302f32342d3234203d3e20313439353133.roa
File: 3231372e3231372e37382e302f32342d3234203d3e20313439353133.roa (raw, json)
Hash identifier: tIyyky8lNtBc1C2xHHYiSLfvNiTT79nd3KK2/7UsMk8=
Subject key identifier: E7:F2:02:38:D3:93:68:53:0D:1D:AF:1A:5E:5A:4E:AC:FF:C6:2D:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 489A2824B17B389BC9AC4B188DBD6A2F07816732
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37382e302f32342d3234203d3e20313439353133.roa
Signing time: Sat 10 Oct 2026 19:45:46 +0000
ROA not before: Sat 10 Oct 2026 19:40:46 +0000
ROA not after: Sat 09 Oct 2027 19:45:46 +0000
asID: 149513
IP address blocks: 217.217.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9a:28:24:b1:7b:38:9b:c9:ac:4b:18:8d:bd:6a:2f:07:81:67:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 19:40:46 2026 GMT
Not After : Oct 9 19:45:46 2027 GMT
Subject: CN=E7F20238D39368530D1DAF1A5E5A4EACFFC62D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:fe:58:08:35:86:bd:6f:fb:e8:31:55:8e:
20:a7:fc:0d:6a:29:91:8e:c2:f2:06:53:28:b3:b2:
e6:ec:e6:9c:7e:65:75:cd:40:63:12:52:44:96:c7:
dd:53:47:7d:b6:08:f8:72:aa:32:fa:0b:3b:fa:5f:
8b:81:ef:6c:bf:7c:cb:53:f2:c6:61:f5:77:bd:48:
5f:6d:4f:e3:fa:85:74:47:6b:12:be:70:68:36:12:
eb:13:c4:e0:b3:22:fb:a3:0e:27:13:aa:6b:92:35:
ca:8b:0f:99:48:c1:5d:f2:95:81:d3:e4:b3:d4:70:
38:d1:14:ff:f1:e9:e5:09:e1:c7:70:b8:65:ca:b3:
07:1e:ec:29:2a:cc:48:6b:9e:5f:c2:e7:cc:cb:75:
e4:e4:af:b1:d3:58:f2:64:7e:58:9a:a5:57:a1:f1:
b9:61:48:9c:b8:4f:de:44:19:ba:57:84:55:65:c3:
27:5c:c4:58:90:8f:62:e9:a2:dd:46:bd:fe:37:ba:
e2:88:2e:e8:63:e9:25:29:db:61:31:aa:82:ab:69:
2e:44:b6:9d:29:91:37:ba:58:48:44:93:53:88:2a:
1e:88:ac:99:71:fe:a3:91:be:23:37:34:75:61:aa:
e5:c0:c3:a4:05:ce:cc:39:72:0e:9d:1a:33:7d:94:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F2:02:38:D3:93:68:53:0D:1D:AF:1A:5E:5A:4E:AC:FF:C6:2D:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37382e302f32342d3234203d3e20313439353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.78.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7f:20:7e:fd:66:95:c0:3d:23:8f:c5:0a:b9:94:c8:5e:90:
f1:bf:98:70:52:22:6f:8c:ba:22:ac:f7:a6:13:c1:56:7e:12:
a0:7d:22:97:0d:9a:7e:c8:78:32:c0:65:4b:02:18:fe:d9:25:
af:48:8c:92:87:05:4b:61:b3:17:df:ff:66:11:cf:0d:f3:84:
0f:ab:9d:10:dc:4c:2a:da:7c:e3:68:74:21:a3:a4:b9:26:f5:
c0:dc:d7:98:f0:83:41:22:fa:e7:f6:38:e5:53:a9:38:3d:f3:
09:9e:72:df:70:5c:7f:46:b4:81:99:13:0d:df:ae:a4:2c:aa:
a4:72:6f:f2:5a:c4:77:7d:6c:52:2e:1f:64:c1:ec:f9:2d:c6:
6b:78:29:51:c6:89:f8:2a:9b:57:6d:24:63:58:ba:0b:b6:37:
18:a9:49:00:04:e8:ec:53:3d:0d:27:dd:2d:0c:1a:e5:de:11:
92:f7:73:45:e3:e9:2f:8e:73:94:35:08:73:47:8d:eb:62:ba:
2d:cf:19:47:cd:02:5b:14:8b:e9:fd:61:eb:f8:1a:8d:5e:2b:
eb:bf:6b:be:a5:e0:34:32:e6:20:ac:ea:25:4f:d5:84:0f:d7:
3c:42:93:29:f4:f8:b9:7e:16:32:06:52:46:b7:a9:f3:05:20:
1f:11:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:40 2026 by rpki-client