Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39362e302f32342d3234203d3e203134363138.roa
File: 3231372e3231372e39362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: 2QENaWsFpgTmuM2CF4z7cD+5tLdnRY8l6lHZMLJ5mMc=
Subject key identifier: 02:03:9F:E1:64:65:04:DB:34:1E:9F:76:9F:AD:6C:54:85:3D:69:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 750FE223F41DAC019BC9B63C17440131D5395A67
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39362e302f32342d3234203d3e203134363138.roa
Signing time: Mon 29 Jun 2026 08:46:01 +0000
ROA not before: Mon 29 Jun 2026 08:41:01 +0000
ROA not after: Mon 28 Jun 2027 08:46:01 +0000
asID: 14618
IP address blocks: 217.217.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0f:e2:23:f4:1d:ac:01:9b:c9:b6:3c:17:44:01:31:d5:39:5a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 29 08:41:01 2026 GMT
Not After : Jun 28 08:46:01 2027 GMT
Subject: CN=02039FE1646504DB341E9F769FAD6C54853D695C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:53:c9:a5:69:d0:d5:b1:9c:50:51:77:af:
f7:47:7c:bb:36:38:09:97:77:d7:25:d6:2d:b9:cd:
7f:48:93:89:be:8c:38:af:2c:f5:ed:cd:f8:8f:09:
7b:2c:fa:f0:6b:c7:52:f2:9d:16:d1:5d:cc:01:e8:
5d:fc:9c:69:4b:5e:5f:13:a3:72:00:69:0b:02:d6:
51:c2:35:05:b7:cb:a4:f0:12:55:80:58:3c:1e:52:
89:8e:6b:2f:59:15:cf:7f:86:94:ee:15:1f:73:93:
73:19:fd:3f:84:c5:04:c2:26:3d:ba:e4:7d:e2:21:
af:da:fe:66:ff:f8:61:8d:a3:a0:29:5a:ae:84:98:
a9:a4:af:ca:bd:be:1e:9b:5d:fc:d5:13:77:77:9c:
a5:bf:85:bb:86:8a:7a:0f:ea:53:63:42:fe:0a:ac:
ca:5f:f8:8b:47:f1:5a:c7:7a:07:3f:05:7c:c4:74:
65:5e:87:8d:90:af:28:4d:cc:38:ba:c1:18:dc:40:
cc:42:4a:32:4c:0c:a8:5f:e5:b6:07:3c:67:95:26:
c5:4d:e5:7b:8c:4a:52:ee:03:f3:30:84:b9:90:8d:
ad:4b:f2:35:07:9b:79:3a:de:b0:8e:e1:01:1f:10:
8d:c2:03:0f:65:06:86:ef:fa:fd:0e:80:b5:8a:7a:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:9F:E1:64:65:04:DB:34:1E:9F:76:9F:AD:6C:54:85:3D:69:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39362e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:96:f4:f1:5a:52:9b:62:c4:25:35:36:25:cb:85:07:89:96:
fc:86:7e:f1:7a:ce:6f:54:a7:c0:eb:fb:4c:9c:14:5a:cc:54:
0b:6c:cd:43:31:87:eb:d8:b4:e1:a7:e0:9b:11:60:3f:98:10:
ad:8b:9e:89:ef:92:92:1a:9f:00:68:b4:2c:12:c7:9c:e4:01:
e1:c5:77:92:0c:bf:60:60:51:e2:da:40:9e:1a:42:4b:75:95:
4e:1c:2f:c5:08:f6:53:8f:d5:9f:b3:0c:77:db:ba:64:cc:32:
5f:6d:8d:76:b1:69:10:1e:e7:43:db:ec:1b:55:f4:00:81:82:
25:28:5c:fa:d3:24:36:70:4d:71:9d:7b:4a:50:1b:e6:c3:7c:
fe:49:4d:fc:c8:9c:2e:23:3f:a0:b7:7b:80:87:ac:a6:76:76:
4e:04:fc:46:8d:68:e9:ae:1d:41:9f:9c:74:35:bb:9d:0d:ba:
e2:48:8a:ff:d8:08:76:33:52:07:ba:29:cb:ef:71:7e:92:d7:
a7:3d:8b:50:27:8e:e5:37:29:92:e9:34:62:a0:7d:42:4a:a5:
8b:ab:9d:b3:15:6b:78:02:cb:60:74:97:af:fe:e1:10:89:79:
b6:8e:a9:75:21:12:71:f9:f2:ac:ae:ee:db:0b:d7:96:79:ed:
5b:b0:9f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client