Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e38332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zHlE/0rG+zmYIC/168GK8NL/jzW8SlHGsQzgv5BVA9I=
Subject key identifier: F9:55:74:52:2B:10:CE:B5:41:61:CB:3A:3A:9D:FA:68:EB:09:91:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77A8F8700AF27C859F3A049FA77E473436EC825C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38332e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:41:11 +0000
ROA not before: Sat 14 Nov 2026 18:36:11 +0000
ROA not after: Sat 13 Nov 2027 18:41:11 +0000
asID: 834
IP address blocks: 217.217.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:f8:70:0a:f2:7c:85:9f:3a:04:9f:a7:7e:47:34:36:ec:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 18:36:11 2026 GMT
Not After : Nov 13 18:41:11 2027 GMT
Subject: CN=F95574522B10CEB54161CB3A3A9DFA68EB099159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:f4:11:78:e2:63:67:16:09:89:36:68:2b:
32:b8:3b:a2:d4:7f:f8:3f:41:25:c3:f5:6b:e1:5b:
8a:a1:b3:cf:17:94:0f:b2:96:74:11:19:c3:d1:89:
c4:4c:06:0a:62:4c:16:58:a9:50:06:ed:f8:61:24:
2e:ca:bc:d2:de:d5:24:12:ac:87:15:ca:87:ae:42:
c6:c5:f6:e1:53:09:7c:3d:62:7f:fb:0e:cd:9f:45:
15:e8:3f:9c:c2:d6:09:7c:71:52:73:ae:f6:d0:8e:
99:4e:3d:dc:ac:ec:9d:c8:dc:fc:ac:03:c4:58:8f:
44:4f:ae:4e:64:2b:75:ea:c3:89:61:ee:51:fc:04:
e4:c9:a6:31:d1:46:6e:92:d6:b2:e2:44:8d:91:b3:
c6:6b:06:e6:94:47:19:1c:66:ff:ad:2d:07:28:0a:
11:9d:a1:92:15:8e:31:81:2a:fd:d4:e1:12:eb:98:
34:33:32:0c:2b:9a:cb:fa:69:d6:f7:3c:fe:9f:e6:
ad:10:9e:5b:f4:45:8d:16:1b:45:c5:82:2b:51:43:
eb:be:f1:18:63:f2:b9:37:3e:f3:78:d5:67:7e:51:
9c:33:83:e7:63:8f:f5:c7:fe:05:9e:f3:fb:40:71:
e3:76:ce:63:73:57:4a:a0:c9:7b:03:b2:88:02:8f:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:74:52:2B:10:CE:B5:41:61:CB:3A:3A:9D:FA:68:EB:09:91:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.83.0/24
Signature Algorithm: sha256WithRSAEncryption
91:85:b9:76:33:af:39:77:32:99:ba:4a:bd:ff:f6:77:9c:71:
e5:23:b7:59:9e:3e:e7:48:b4:96:60:43:91:64:48:6c:ee:0b:
b6:aa:d8:5f:c5:ed:7a:df:c1:00:f1:52:90:12:07:b4:b3:4a:
1a:81:8c:8f:06:76:20:da:f9:67:91:54:35:2f:0e:9c:a1:0c:
db:10:87:44:1b:ce:7e:b0:fb:3c:da:c6:72:58:4e:19:d5:d5:
dd:d1:56:11:3b:04:1b:31:58:b7:d6:bf:11:54:b0:3f:65:4a:
17:01:e0:5c:e9:11:b6:56:c9:59:d3:8a:dc:14:e7:80:7d:8d:
da:f3:07:9c:cb:a8:d6:2c:d5:b6:5f:a8:ce:6e:b1:c6:0e:c0:
02:38:33:1a:80:70:b6:7c:1c:d6:7d:81:88:de:ad:c0:3a:dc:
43:f0:33:49:ee:d1:e7:ea:8d:bc:26:d2:ab:23:11:3c:44:26:
5e:6e:a8:8b:ce:09:fb:23:1a:20:dc:a0:bd:c6:6b:6c:a5:9b:
fe:c2:9a:03:38:f4:c3:99:42:61:e6:67:e5:5a:a7:6a:ad:b7:
76:0a:e8:c7:ce:a3:a7:07:2b:db:fa:84:bb:1f:dd:5d:45:72:
1b:ab:81:1b:c7:9b:1c:23:ba:77:63:5c:50:20:bc:23:dc:40:
37:dd:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:21:51 2026 by rpki-client