Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38362e302f32342d3234203d3e20313939373431.roa
File: 3231372e3231372e38362e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier: fBI37Wqb3soGJKx3jFZEHB2sdQPtiQ3BK1HqkidrvmU=
Subject key identifier: 86:29:DC:C3:C0:F7:B9:B6:58:E1:82:60:BC:FA:A3:2D:C4:DD:98:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2462D82B52A545072520347DF487D1BEF395D224
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38362e302f32342d3234203d3e20313939373431.roa
Signing time: Thu 15 Oct 2026 12:34:30 +0000
ROA not before: Thu 15 Oct 2026 12:29:30 +0000
ROA not after: Thu 14 Oct 2027 12:34:30 +0000
asID: 199741
IP address blocks: 217.217.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 21:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:62:d8:2b:52:a5:45:07:25:20:34:7d:f4:87:d1:be:f3:95:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 12:29:30 2026 GMT
Not After : Oct 14 12:34:30 2027 GMT
Subject: CN=8629DCC3C0F7B9B658E18260BCFAA32DC4DD9884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:b7:d0:4b:a6:3f:e9:6a:e3:b0:e9:83:03:
97:fe:37:ed:04:8a:2a:33:79:42:2e:c2:c0:6c:78:
49:96:55:13:9e:1d:8e:fe:c2:86:6b:95:b1:1a:59:
db:f4:ea:d9:43:23:b9:b7:03:f1:0d:57:b1:f0:d5:
14:29:45:d3:e5:1b:9b:8f:86:9c:d5:b9:78:b8:c0:
31:4c:1a:e4:40:2c:73:50:01:94:26:b6:f3:6c:2d:
f9:60:8b:1c:88:48:7d:5c:71:ef:61:71:3d:47:0d:
bf:00:75:b3:10:78:e7:77:3c:21:ec:99:59:6f:ea:
a6:eb:04:1a:5a:f6:3b:94:9f:09:64:5e:53:d6:47:
45:e5:a7:7e:e3:be:7a:20:05:52:98:fd:90:18:9d:
9a:47:17:7b:3b:e8:20:fe:fa:1d:74:8a:2f:6c:23:
dd:f3:d6:7f:d7:68:51:e2:1f:fc:ef:49:08:61:8e:
42:c2:4b:ac:b0:02:a0:2c:0c:27:ad:0f:ed:43:7a:
c8:57:37:98:7d:43:00:25:15:30:18:6c:fd:d3:43:
9f:76:20:96:13:cb:71:ed:27:b9:3d:05:60:31:a5:
dc:79:7b:52:ed:2a:10:84:95:d4:cf:0e:95:80:30:
d9:78:9f:6f:ec:3a:02:f9:ea:99:81:03:32:25:1b:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:DC:C3:C0:F7:B9:B6:58:E1:82:60:BC:FA:A3:2D:C4:DD:98:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38362e302f32342d3234203d3e20313939373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.86.0/24
Signature Algorithm: sha256WithRSAEncryption
22:88:b8:53:07:07:ca:6a:11:67:bf:a6:98:02:ca:3e:f6:42:
7c:03:9a:3f:61:4a:87:f7:04:11:65:a9:15:cc:aa:7c:b8:5a:
58:29:d5:62:9a:45:18:84:8f:60:56:c6:c7:9a:07:06:d9:79:
5e:3f:3e:e5:f9:88:aa:2f:2d:55:52:03:9a:ae:2d:2c:d7:83:
46:53:ee:ee:b1:32:15:c5:1f:00:6e:82:68:1f:de:94:76:05:
51:e1:76:ca:4b:8e:79:09:8a:11:e0:0b:79:5e:9c:e5:d3:76:
a4:b0:cb:32:6e:5e:4c:f8:ba:d8:6c:b2:9e:d0:fd:1e:ba:0f:
85:b5:a0:03:c8:d2:47:c4:4b:9b:28:05:9a:50:4f:d6:e4:20:
01:e1:87:0e:a1:42:2c:cd:ba:f6:b1:96:55:30:36:dc:ed:11:
7f:03:35:51:96:19:e0:d2:98:ef:d5:43:43:4f:b3:f8:2d:fd:
06:aa:e6:37:b4:a4:81:a0:48:45:49:d1:d2:d6:37:46:ed:12:
51:cb:6b:4e:c2:bb:85:03:cc:d3:75:14:4e:11:64:12:57:4a:
37:36:bd:1a:3c:ee:3a:85:88:86:12:e8:dd:e8:de:c9:a6:b2:
02:dd:d8:65:7f:85:e1:9c:94:1a:ba:5c:52:c3:c4:56:fc:2e:
21:5a:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:59 2026 by rpki-client