Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e2032393134.roa
File: 3231372e3231372e38382e302f32332d3234203d3e2032393134.roa (raw, json)
Hash identifier: Jh1rH8GvlKb08eTpeRaXz0yl9HGT8Mu5p5NWfNR4ue0=
Subject key identifier: BF:81:1E:AA:6E:3B:7C:97:30:95:EE:2D:B5:86:00:A5:5C:1F:53:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F4213008EE49235AA543E951BEF3692DF91BCC2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e2032393134.roa
Signing time: Tue 13 Oct 2026 11:42:43 +0000
ROA not before: Tue 13 Oct 2026 11:37:43 +0000
ROA not after: Tue 12 Oct 2027 11:42:43 +0000
asID: 2914
IP address blocks: 217.217.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:42:13:00:8e:e4:92:35:aa:54:3e:95:1b:ef:36:92:df:91:bc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 11:37:43 2026 GMT
Not After : Oct 12 11:42:43 2027 GMT
Subject: CN=BF811EAA6E3B7C973095EE2DB58600A55C1F533D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:23:4e:c8:5a:03:b6:15:ff:dc:89:23:f5:
10:bd:de:90:ee:c9:70:d6:42:a9:2d:af:eb:2e:ed:
c7:cf:da:81:59:cb:87:a1:c9:fb:4c:65:f4:1d:bd:
6c:f2:3d:4f:08:91:7a:68:2b:50:10:dd:b6:9b:af:
f5:b7:58:b6:9c:af:a1:89:5c:a4:df:5b:2a:6e:48:
43:50:c2:23:4c:af:d3:a7:e4:f1:b9:9d:bc:30:cb:
70:26:09:f8:9e:d5:0e:59:42:16:63:c4:87:80:04:
22:d6:35:66:20:49:ce:97:f9:92:0c:7d:dc:3c:cc:
3f:47:24:77:3d:e1:a7:7f:d2:7a:d1:ce:2a:af:8d:
27:bb:48:a5:86:30:f0:ea:3e:98:58:32:ca:02:f2:
e4:c1:86:9e:70:6d:27:cb:f2:f9:b9:5e:c5:ba:ab:
d7:f4:3d:07:07:d9:59:1c:3b:f2:16:94:ff:07:f2:
5a:bf:54:c7:86:af:b4:01:d1:19:05:3c:1d:c9:1c:
37:d2:64:c6:97:6d:a3:f0:b6:fa:8a:fc:cc:f1:c5:
92:3a:f2:06:c7:bf:37:b2:92:9a:7f:ab:55:59:c9:
b6:a7:6b:cd:8b:6a:27:3e:a2:f7:1f:6b:49:47:1b:
4a:66:85:6e:ba:cc:91:5a:89:67:fd:a7:ee:6e:e6:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:81:1E:AA:6E:3B:7C:97:30:95:EE:2D:B5:86:00:A5:5C:1F:53:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.88.0/23
Signature Algorithm: sha256WithRSAEncryption
27:07:2c:98:95:74:10:70:ef:db:9c:2f:a3:68:35:9d:b3:ed:
49:87:83:30:21:3e:0e:56:3b:46:b3:5f:c1:92:c1:8c:5b:ec:
46:cb:65:17:a7:c8:6c:2c:f4:d8:fc:f6:8a:0a:5f:3d:90:52:
c8:57:c5:22:3c:23:04:83:3d:c2:1b:95:fe:55:2b:c8:d9:40:
d3:13:aa:01:da:9c:1a:aa:8d:3c:9f:47:4f:2d:bc:0a:a8:c9:
f5:98:0c:ee:3d:81:2b:46:43:51:63:93:81:14:d1:7a:4c:4b:
9e:42:53:07:9d:d4:62:7c:05:70:ee:ef:2c:86:95:4e:c1:e6:
1d:9f:7d:37:af:b2:16:d9:ef:43:24:37:7a:27:0c:2b:4b:38:
c1:8c:83:4e:4e:bd:2a:b2:27:8f:c5:7a:5a:af:1a:f3:ec:60:
e4:43:24:db:7b:d3:52:07:94:4a:16:f6:73:ed:f5:6b:5e:80:
17:20:36:23:3c:c5:a4:5b:9d:08:01:3c:7a:b9:8e:b8:c6:e0:
5b:f3:74:15:7f:9d:50:2b:c7:bc:53:53:f9:62:19:cc:96:3f:
a3:a9:83:f1:84:b9:69:c3:b1:f1:36:c5:1b:33:b6:6e:10:da:
46:ff:de:5e:c0:23:bf:68:91:5a:8c:84:12:bc:ba:71:ef:82:
92:35:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:36 2026 by rpki-client