Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e2039333034.roa
File: 3231372e3231372e38382e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: 0tOM+Iwv43FOumPsWP24e4sVjuFkQvRGBUudbfvqBlE=
Subject key identifier: 27:D8:81:2C:BF:EF:46:79:BA:A2:43:56:E9:91:27:E6:59:BF:F5:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35612AEC4E6E1F845B9A24BAAFFE2BB53F539560
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e2039333034.roa
Signing time: Tue 13 Oct 2026 11:42:42 +0000
ROA not before: Tue 13 Oct 2026 11:37:42 +0000
ROA not after: Tue 12 Oct 2027 11:42:42 +0000
asID: 9304
IP address blocks: 217.217.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:61:2a:ec:4e:6e:1f:84:5b:9a:24:ba:af:fe:2b:b5:3f:53:95:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 11:37:42 2026 GMT
Not After : Oct 12 11:42:42 2027 GMT
Subject: CN=27D8812CBFEF4679BAA24356E99127E659BFF576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:41:08:0e:76:90:4c:6b:49:81:27:e1:46:
97:87:28:7a:45:3d:a2:d7:c8:bf:97:b2:e2:73:37:
fb:3b:ef:06:ac:c7:47:2c:b6:e9:f5:90:03:3f:3e:
9f:85:2b:01:cd:50:74:ef:81:48:a7:8c:70:21:82:
42:a1:70:e4:2f:d6:c8:51:53:d4:46:f6:dc:f6:97:
9b:3a:72:4b:5a:47:93:f5:db:e5:2e:91:31:24:33:
13:dd:f7:05:2f:a4:0a:67:62:76:91:41:1f:a9:4e:
80:71:e5:4a:db:c9:17:f3:58:4b:e1:d6:53:f9:6e:
4b:fc:95:32:71:de:8d:e2:d1:25:5d:d1:f0:b6:cb:
1d:ae:a8:b9:b5:d7:56:92:d0:30:72:34:84:30:ec:
83:ab:fc:82:0b:46:e9:a8:4e:e4:d0:5e:5e:d4:f0:
cd:de:b8:3c:5b:2f:56:1a:3c:f3:67:60:9e:75:9c:
bb:62:71:40:44:54:6a:f5:f9:07:a8:90:6f:11:29:
4b:66:86:f9:15:12:b6:88:1f:22:30:f1:4c:d8:c4:
83:c5:b0:83:ad:21:06:3b:39:66:d3:cd:3b:7b:a6:
af:a6:e1:88:fb:07:e2:63:6b:ef:92:82:d1:b1:f8:
fb:4c:28:e3:be:08:85:35:ed:82:cd:3e:05:7f:d4:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:81:2C:BF:EF:46:79:BA:A2:43:56:E9:91:27:E6:59:BF:F5:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:65:03:b2:ae:8e:7e:1f:ee:d4:1e:4b:37:86:1d:7e:b4:78:
43:14:32:d1:f5:8c:45:31:e2:29:50:fb:26:15:7f:6e:bc:7c:
58:17:7e:80:3d:16:6d:bb:d6:03:e9:73:1f:71:63:21:f8:ab:
63:17:16:d5:ae:d5:84:b8:3f:80:80:88:a3:e5:1b:1f:c6:0b:
b0:83:13:90:2f:32:13:2a:cf:40:01:e1:cb:c2:6a:2d:4d:51:
1a:7a:e7:3c:8c:2f:dc:be:cd:bb:88:81:fc:47:90:bf:c9:6f:
db:76:4c:55:9f:dd:ef:5d:89:f2:8a:ae:6a:8b:51:a0:0d:36:
fe:2a:3e:87:4b:11:52:c9:e1:11:e7:77:ab:55:d7:52:e4:5f:
21:0d:65:fb:36:75:e8:47:83:72:c0:c3:14:1f:c4:43:34:b1:
32:02:c5:6f:8d:cc:f0:e8:de:b7:8e:a5:21:93:df:99:3e:2c:
d6:b2:5a:3b:f0:bb:4e:bc:70:df:38:76:19:13:36:6a:e9:97:
a7:05:b3:1c:47:9a:ba:15:c9:12:39:34:d5:23:e0:3f:a0:ad:
ca:45:59:fb:76:cd:fd:c0:32:11:cc:85:b8:d8:5b:ff:d6:6c:
fc:d6:cb:e9:7a:b3:c9:e1:71:fc:bd:72:c5:71:52:89:8e:9e:
b2:2a:91:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:42 2026 by rpki-client