Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132382e302f32302d3234203d3e2037303239.roa
File: 3231372e3231362e3132382e302f32302d3234203d3e2037303239.roa (raw, json)
Hash identifier: 8+EBxK67/2P2/Zq5iyrWBDrBXY8eSzV+zonj5jCF7MI=
Subject key identifier: 42:5A:DA:6A:67:77:7E:A2:74:D3:26:BE:75:2C:1D:E4:B8:4D:19:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61CB33CA5B0382976695B5BAE3DE55A54463D7D6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132382e302f32302d3234203d3e2037303239.roa
Signing time: Thu 09 Apr 2026 08:32:38 +0000
ROA not before: Thu 09 Apr 2026 08:27:38 +0000
ROA not after: Thu 08 Apr 2027 08:32:38 +0000
asID: 7029
IP address blocks: 217.216.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cb:33:ca:5b:03:82:97:66:95:b5:ba:e3:de:55:a5:44:63:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 9 08:27:38 2026 GMT
Not After : Apr 8 08:32:38 2027 GMT
Subject: CN=425ADA6A67777EA274D326BE752C1DE4B84D199C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:08:11:d4:08:ae:bb:4c:1a:8b:39:27:32:
ec:f4:5c:40:49:c9:29:9b:c9:34:f3:ab:79:17:03:
a9:7f:66:c0:38:cb:89:fc:cf:c8:69:de:95:81:f7:
06:aa:6c:78:02:c4:b3:64:01:bb:3c:30:14:a6:2b:
51:15:05:be:c7:2d:e1:91:41:82:87:1d:f0:0d:fd:
af:e2:87:ee:cd:01:e9:7c:2b:a5:13:50:45:e3:99:
9e:af:6f:7d:a4:37:98:e8:5e:a0:2b:3a:e2:ae:b8:
82:9d:99:45:b4:a0:07:4b:8b:f9:54:9c:99:03:87:
f5:de:5d:cc:5f:16:4f:f3:ff:a7:b5:f6:bf:73:dd:
34:29:97:aa:a5:a6:12:a6:16:ea:96:2d:e4:d2:48:
be:13:3f:cf:27:a0:e1:c2:cc:be:95:c0:c1:d1:6b:
98:61:16:33:7e:5f:df:db:2f:04:62:69:b8:47:01:
31:bc:92:24:d8:44:f1:82:fe:a7:60:41:80:da:ab:
30:f0:10:b6:21:40:21:04:d2:61:72:a3:23:06:1b:
f5:d2:c0:87:f9:34:4c:a0:35:a8:6a:a2:82:c9:e5:
55:d0:88:45:a7:76:6b:9d:84:ee:b6:86:22:b1:ac:
c3:46:d3:28:42:58:c4:f3:85:6a:cf:56:ca:79:44:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:DA:6A:67:77:7E:A2:74:D3:26:BE:75:2C:1D:E4:B8:4D:19:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132382e302f32302d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:5f:51:61:b7:3d:b8:fc:95:83:04:38:a9:3e:69:72:36:a1:
fe:53:12:28:09:95:1e:96:88:cb:fa:71:27:48:b1:a0:b7:de:
d1:7e:7d:3e:07:48:7e:13:4f:2e:08:57:93:16:fc:0e:65:0e:
a2:32:30:9e:86:8c:6b:d7:db:78:b9:ef:34:fa:6c:a7:56:b0:
9a:c6:8b:5b:51:21:b6:42:a6:a3:31:de:21:c6:b2:2b:fd:ab:
eb:05:37:96:2f:4c:18:75:6a:37:08:68:75:05:26:24:20:3a:
9a:d6:e8:08:ad:eb:87:e3:4f:89:09:19:76:bb:38:ff:40:22:
5d:55:fd:ba:68:2e:e8:03:cd:78:71:88:5b:68:68:44:2a:39:
a1:43:a6:d0:4a:dc:23:3a:06:da:48:7a:94:a0:63:18:da:6f:
42:63:6e:f2:b2:9a:7a:d8:73:41:00:a8:12:9f:73:fe:39:81:
96:cf:9d:7d:f2:ae:60:e3:56:a5:4d:38:29:56:c7:ab:4c:8e:
d1:b8:74:25:a7:80:3d:1a:7a:b9:bc:09:29:a4:a7:86:f1:5b:
b0:1f:33:02:13:c4:7e:48:31:cc:f1:d0:52:04:88:7a:0c:22:
e9:31:50:2f:73:b2:31:51:6f:38:89:90:19:41:1d:aa:18:4d:
7c:0a:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:24 2026 by rpki-client