Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39302e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e39302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PL+NfGnFU01W5hFJfStUBtDgh6TA2j60eBdFV2oPJ3o=
Subject key identifier: B2:F5:53:E0:DB:A8:7F:25:14:38:FB:CC:3C:71:78:C6:8F:99:33:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C897EB593BBF7D3707FD47D6443253F591B9B4E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39302e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:41:18 +0000
ROA not before: Sat 14 Nov 2026 18:36:18 +0000
ROA not after: Sat 13 Nov 2027 18:41:18 +0000
asID: 834
IP address blocks: 217.217.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:89:7e:b5:93:bb:f7:d3:70:7f:d4:7d:64:43:25:3f:59:1b:9b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 18:36:18 2026 GMT
Not After : Nov 13 18:41:18 2027 GMT
Subject: CN=B2F553E0DBA87F251438FBCC3C7178C68F99333B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:99:72:12:27:43:70:da:d5:c2:a3:99:89:
11:a2:76:70:8f:1e:9a:25:83:dd:4e:c6:ec:f5:b3:
af:01:f7:35:71:6b:66:13:b6:5f:5d:e2:d5:4e:26:
f3:c1:60:70:bc:f6:16:ec:60:c6:63:b3:ed:29:62:
0a:b2:6d:48:f0:28:e2:98:2e:31:82:5c:08:44:18:
f5:0f:b3:86:60:8c:ac:f9:9d:8a:36:4b:22:46:70:
67:f2:8f:c5:0a:dc:52:24:eb:8e:4c:14:a2:ba:0d:
1a:bb:c8:4a:80:15:d0:e3:63:ba:b1:44:4d:4e:8a:
9b:65:e2:6d:db:3c:36:81:5e:73:ba:77:cb:a1:93:
c6:c5:a0:47:3f:af:42:be:96:07:2b:96:e0:95:21:
c0:11:fd:6b:7c:aa:10:96:40:7b:6b:fe:48:0d:25:
53:b0:ee:8f:9e:de:8f:db:06:ba:66:6d:8a:86:e1:
e6:79:e1:e9:c6:49:c0:5d:59:4b:5b:27:a6:f0:17:
6e:ed:64:1e:db:dd:04:99:d8:e2:4f:c3:00:f2:3d:
9a:b6:fd:ed:f7:d8:40:58:9f:cb:37:50:5f:00:f2:
c7:1c:15:ad:31:63:52:2b:5c:30:8c:0d:9f:98:d4:
c8:23:e6:bf:20:f8:d0:fc:44:d3:c3:ee:2f:6d:44:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F5:53:E0:DB:A8:7F:25:14:38:FB:CC:3C:71:78:C6:8F:99:33:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.90.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bb:8c:f6:c4:a5:9e:2c:fa:16:03:e1:6c:f1:b0:b9:16:25:
c7:03:d9:30:4f:8a:86:74:1e:8e:ed:0b:56:be:7a:05:f9:49:
54:c7:a0:57:ef:5c:40:97:aa:ce:4c:06:a8:ed:f2:0f:22:e3:
0b:0a:89:ba:df:37:ce:0a:7a:a3:6c:e7:70:9e:49:e5:17:18:
f3:2e:5d:bd:d2:42:18:48:fd:d0:e3:98:e8:4c:2e:45:77:f0:
b7:c4:3a:07:3c:76:d1:38:2d:1d:e7:e2:8f:11:a1:c8:d7:15:
90:2c:b4:2c:b7:eb:dc:2e:02:7a:f1:b3:fe:cd:ad:51:68:2f:
71:9e:6e:a8:9e:f1:cb:f7:c2:84:38:9a:5a:94:47:5b:37:ab:
43:42:a5:d8:87:ef:a5:7c:aa:b3:91:15:3d:3d:2c:3a:0b:36:
39:3f:8d:70:8e:43:39:65:53:42:81:c4:48:04:17:a1:e8:2a:
8a:24:da:47:e2:c0:7d:83:be:55:5d:df:2a:48:96:6a:9b:7a:
34:43:37:68:f7:69:25:dc:1c:89:de:d4:26:7a:09:3a:77:3b:
cc:46:b3:75:39:97:6b:21:0f:b1:e8:56:45:d3:10:c2:fb:b7:
0d:bb:20:b3:c4:1c:29:99:99:aa:1f:a2:92:39:d4:52:11:d4:
1e:3b:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 05:20:35 2026 by rpki-client