Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e203130373533.roa
File: 3231372e3231362e3139362e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier: pzs247YoGsTWbFsfYGriXbo+MVdAX0E2MDNPFB9IUmc=
Subject key identifier: B7:DB:85:1F:47:7E:62:35:50:0E:A8:7D:00:74:B9:9C:35:8B:DE:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36D3BD715B1C0C3663AAAD2D116CF7C3065DD047
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e203130373533.roa
Signing time: Tue 15 Sep 2026 12:11:09 +0000
ROA not before: Tue 15 Sep 2026 12:06:09 +0000
ROA not after: Tue 14 Sep 2027 12:11:09 +0000
asID: 10753
IP address blocks: 217.216.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d3:bd:71:5b:1c:0c:36:63:aa:ad:2d:11:6c:f7:c3:06:5d:d0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 15 12:06:09 2026 GMT
Not After : Sep 14 12:11:09 2027 GMT
Subject: CN=B7DB851F477E6235500EA87D0074B99C358BDE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:d8:fe:2e:d6:4c:61:61:fe:35:f6:4b:f3:
81:34:94:a7:61:d1:1e:57:b5:6e:d0:fe:78:81:21:
f3:62:26:1e:2a:92:47:5c:11:7e:ad:49:a4:c4:11:
2d:ad:d5:86:af:21:0c:42:0a:3a:c4:55:cc:84:fa:
52:05:d8:5a:ef:5f:5b:b3:39:63:49:c8:84:b7:9f:
48:67:67:71:f0:78:e4:1d:f8:5c:8b:45:1d:b7:a7:
87:c8:78:5e:40:aa:6b:54:88:d7:2e:77:70:b1:8e:
8d:92:8d:91:13:5b:9f:19:4c:7b:47:38:58:82:1f:
08:97:fc:b9:ef:ab:ed:48:50:17:d4:8b:3c:5a:bb:
ea:77:ff:02:65:2f:ad:d2:8a:67:0b:a8:e4:fe:00:
e2:d7:75:b3:31:12:38:5b:1b:42:ac:79:d9:6b:06:
49:75:ff:43:f5:33:e8:19:f1:8f:80:98:91:10:f5:
12:22:5e:c4:ea:70:f5:92:4a:59:e7:a0:47:bd:b4:
88:7d:fe:26:97:14:e8:ba:11:d2:75:bb:22:10:2d:
32:1d:79:41:35:f8:ae:a7:13:a5:3d:56:b2:3c:34:
40:36:a0:9a:55:82:df:5c:79:69:5d:d2:91:bf:22:
8f:32:67:87:04:55:a9:ea:65:31:0f:ec:c3:45:0e:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DB:85:1F:47:7E:62:35:50:0E:A8:7D:00:74:B9:9C:35:8B:DE:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139362e302f32342d3234203d3e203130373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
55:67:20:01:12:d4:46:f9:4c:2c:d0:e4:15:64:ea:ff:f6:96:
50:d2:0b:c0:ca:b8:6d:a7:72:a6:7e:d2:6e:49:91:ad:e3:5c:
d1:00:56:79:89:26:40:d3:16:7d:92:3e:d1:a6:ce:75:c4:d4:
8d:f8:68:f4:61:99:39:c6:85:1e:7d:c5:9e:6c:b8:7c:cf:e9:
0d:84:62:76:8b:5c:ba:73:a4:bd:e8:e0:fb:27:f6:d6:24:51:
11:54:32:01:42:3c:24:9f:46:ad:c8:3f:01:ec:bf:c8:20:27:
a2:17:8b:72:52:b0:0d:e3:1b:7c:a0:15:c2:bb:ef:64:cb:03:
76:f2:1d:65:87:83:09:18:0b:03:ec:84:ba:ee:a8:ac:c8:61:
2b:e5:f7:b8:2e:34:19:c0:c8:76:39:bb:de:e5:fe:56:9c:be:
38:10:99:bb:da:b6:c2:88:3d:c1:3e:83:6a:a1:bc:1b:af:5e:
4e:98:98:f8:78:89:b3:c9:22:71:67:13:e0:14:e3:31:5d:77:
56:f9:18:33:f5:a1:72:84:0e:75:9a:a4:95:c3:02:bb:88:89:
b6:40:62:a4:4f:23:72:f4:a9:41:92:bc:41:40:33:cc:f3:90:
f8:3a:ba:4d:9d:9e:55:1c:8a:8c:46:7c:a7:f5:b9:c9:c4:a3:
c1:b9:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:07 2026 by rpki-client