Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38352e302f32342d3234203d3e203136323736.roa
File: 3231372e3231372e38352e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 5e1jJyxeJhcR0cKjV7+jPj7cLh1q24fao4RkSuvtVMs=
Subject key identifier: 88:F6:D9:64:AB:3C:FF:71:16:2B:C1:B8:A4:E9:CD:1F:8C:C3:6E:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B5365FFF71438009986ED3DEC5D6D81D46354E3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38352e302f32342d3234203d3e203136323736.roa
Signing time: Sat 17 Oct 2026 19:45:04 +0000
ROA not before: Sat 17 Oct 2026 19:40:04 +0000
ROA not after: Sat 16 Oct 2027 19:45:04 +0000
asID: 16276
IP address blocks: 217.217.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:53:65:ff:f7:14:38:00:99:86:ed:3d:ec:5d:6d:81:d4:63:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 19:40:04 2026 GMT
Not After : Oct 16 19:45:04 2027 GMT
Subject: CN=88F6D964AB3CFF71162BC1B8A4E9CD1F8CC36E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:08:40:34:f3:7b:7b:a4:3a:cc:69:ad:52:
32:56:2e:1e:6b:2d:5a:80:d9:c3:3f:38:9d:c3:10:
3b:ae:68:17:98:62:b7:07:ab:d4:bf:1e:26:a3:47:
bf:e3:76:d0:13:1d:e2:df:13:41:10:9c:88:a5:f6:
a9:39:8f:5b:95:5c:5c:00:76:4e:a0:d9:79:9f:91:
c6:88:8c:5c:32:99:12:70:51:0f:03:d3:fb:94:28:
ab:93:20:6b:c9:6b:f5:08:73:b8:8f:a6:9a:a0:19:
ec:cb:a5:44:28:e9:52:77:fa:80:22:20:6a:ac:30:
c0:b3:42:af:4a:c5:3c:33:64:14:c7:56:ab:f7:cf:
c8:0c:59:4c:76:c2:bc:b5:26:ed:83:00:67:7e:31:
51:47:5a:19:56:dc:e4:7b:1e:34:86:18:1c:2a:4c:
3d:9b:a3:81:6f:d8:53:53:72:f5:04:b5:58:c2:ea:
68:c1:af:6e:0d:c3:15:f9:59:fd:44:ad:4d:53:e9:
60:43:0f:13:33:96:aa:75:de:43:ce:09:38:18:06:
b5:c7:6a:ff:21:30:4d:bf:ca:8c:d5:b7:66:fa:40:
07:f1:22:3f:fe:70:44:6e:f9:50:09:3b:a2:d3:de:
bf:e2:62:d4:9d:08:20:3d:5c:e1:5b:0f:ee:b0:ff:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:D9:64:AB:3C:FF:71:16:2B:C1:B8:A4:E9:CD:1F:8C:C3:6E:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38352e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.85.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ba:ed:09:87:12:14:0d:79:43:09:db:3d:6e:1a:86:a5:1d:
e2:4b:a6:4b:4a:18:08:b0:db:62:48:c9:ee:66:16:7b:ca:01:
b6:0d:9a:94:4c:a9:e9:2a:a4:10:57:ae:c1:91:18:6a:fb:67:
2c:27:c1:cd:8f:85:4b:06:d9:5d:5c:8b:4e:12:e2:d8:b4:b6:
0e:d9:1f:59:7e:47:1a:76:57:d0:82:e7:10:35:36:1e:32:2f:
5a:97:b9:c0:d1:fe:db:74:82:16:0b:cb:c8:1e:ba:9e:6a:04:
5e:62:80:1f:2b:9f:1c:cd:56:6e:3d:4c:dc:92:8b:f1:47:63:
e3:d9:39:4d:d1:a9:53:e9:9d:25:cb:dd:8f:36:58:0f:c1:a0:
85:1b:73:ac:2d:e4:d8:5b:a0:df:f9:64:48:50:97:ab:5b:46:
8e:68:2a:52:f0:23:0e:fe:47:25:24:43:13:cc:fc:f9:77:34:
8e:0d:64:b2:bb:4c:db:d1:be:9d:19:20:58:17:1f:7d:bc:88:
96:2f:d6:e0:19:9e:dc:2a:d5:86:3a:cc:ad:a2:9e:ba:82:8e:
ff:cc:4f:08:90:60:bb:4f:d0:61:37:09:c7:17:df:db:36:c3:
c9:d2:c7:f2:9f:7e:a7:98:43:a4:a5:31:66:51:3f:73:ba:c7:
c7:07:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:14 2026 by rpki-client