Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3234203d3e203437353833.roa
File: 3231372e3139362e34382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: qbF+REwicHQETBkiciI7Q6qMK10U6pFQguZoTXODNzE=
Subject key identifier: 60:FE:07:84:4F:59:A3:BF:2D:46:52:11:82:18:E1:5C:A2:EF:52:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50707152DD9AE1006A3C1F1BF51D316C0E45E359
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:43 +0000
ROA not before: Thu 16 Apr 2026 11:18:43 +0000
ROA not after: Thu 15 Apr 2027 11:23:43 +0000
asID: 47583
IP address blocks: 217.196.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:70:71:52:dd:9a:e1:00:6a:3c:1f:1b:f5:1d:31:6c:0e:45:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:43 2026 GMT
Not After : Apr 15 11:23:43 2027 GMT
Subject: CN=60FE07844F59A3BF2D4652118218E15CA2EF52CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:61:fb:5d:ae:dd:84:4b:e9:4e:d3:be:df:
55:a7:f2:28:f4:57:1d:38:42:18:7b:86:e5:99:0d:
53:9d:d7:5b:78:76:35:9e:29:a0:bd:b6:9a:35:82:
99:f7:cb:fb:85:fa:d1:c3:07:6b:7f:7f:5a:b1:5f:
17:96:2d:2b:2a:ad:bc:28:ca:a7:2d:f2:b4:9c:e8:
05:1f:53:6b:86:f4:28:9d:ba:ab:b5:68:19:73:2e:
4b:52:53:b3:ab:27:3d:f1:0c:19:ba:d5:97:ae:e8:
ba:b2:6a:db:09:4a:ed:24:51:b3:33:37:48:6b:2c:
bc:a3:16:83:f8:1f:fd:93:02:c7:0d:e2:a1:81:4e:
15:65:37:f1:60:ef:ff:92:e8:76:5a:fb:e9:3f:1f:
e1:b2:12:a0:12:72:58:47:86:46:f7:f9:2f:69:94:
aa:64:04:99:c6:21:03:5f:3e:8c:be:a4:a2:e3:23:
c0:3a:38:d3:a6:88:41:19:b1:c2:b4:d6:fe:d5:e2:
62:34:98:b2:08:26:04:b1:1c:9a:27:3c:78:ca:47:
da:72:6a:d7:c0:60:88:60:7c:c2:9d:76:85:6f:3b:
3e:cc:b9:bc:a9:4e:f9:6e:35:63:ec:68:56:14:8c:
d3:6a:62:3d:b9:dd:60:15:7b:e7:65:48:f4:92:45:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:07:84:4F:59:A3:BF:2D:46:52:11:82:18:E1:5C:A2:EF:52:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.48.0/21
Signature Algorithm: sha256WithRSAEncryption
36:c7:b7:64:e1:f0:90:d8:ec:59:39:fc:2a:b7:76:d3:2e:19:
3d:fe:f3:72:23:97:d5:86:55:ef:54:94:ae:bc:58:ec:78:ff:
ab:5c:23:bd:ab:7d:fb:a8:eb:5b:7d:8a:65:b3:bb:ca:cf:91:
ad:76:fe:50:46:31:39:b6:55:cd:d6:56:e9:a7:64:bf:be:50:
be:7d:79:72:5d:be:a0:9e:87:25:6b:c8:21:05:86:a9:1e:db:
9a:74:54:23:d5:7b:3c:86:42:ea:1c:d8:25:11:ee:10:a3:fa:
b5:f0:f5:1b:d7:55:c1:29:94:26:1f:b5:11:0e:7d:7c:9d:ec:
73:83:61:77:c2:3e:ac:65:2f:3e:ef:c8:31:d0:6d:5c:d9:12:
41:cc:9f:28:2e:a7:8a:a3:84:cd:6b:f8:09:39:34:89:10:f2:
f1:f6:48:8a:c3:fa:c9:c2:f5:82:5b:5f:68:bd:fd:9a:78:c0:
ca:d6:6a:0f:10:d4:42:42:23:ae:be:d0:bf:bd:ca:17:e2:a5:
81:e7:04:cb:7b:6e:30:9c:70:4a:ed:51:22:3b:6d:0e:89:e2:
12:18:e8:5a:ef:b1:48:39:31:1c:d6:3a:62:f8:81:f6:c1:cd:
a0:32:11:11:73:db:d0:98:cf:bd:0d:3d:f3:48:2c:6f:89:43:
05:9e:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:00 2026 by rpki-client