Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139382e302f32342d3234203d3e20323138363633.roa
File: 3231372e3231362e3139382e302f32342d3234203d3e20323138363633.roa (raw, json)
Hash identifier: UMpE45gTyweqA9KNvIBY/4LoAmvlg0bNFSSOy9gCnTQ=
Subject key identifier: 20:8D:83:36:C3:C9:57:CA:1D:E3:84:3B:6C:DA:FB:2A:AA:40:A7:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 391BF3FA433522D0BF8435165EC566F6B0E029D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139382e302f32342d3234203d3e20323138363633.roa
Signing time: Fri 18 Sep 2026 10:20:26 +0000
ROA not before: Fri 18 Sep 2026 10:15:26 +0000
ROA not after: Fri 17 Sep 2027 10:20:26 +0000
asID: 218663
IP address blocks: 217.216.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1b:f3:fa:43:35:22:d0:bf:84:35:16:5e:c5:66:f6:b0:e0:29:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 18 10:15:26 2026 GMT
Not After : Sep 17 10:20:26 2027 GMT
Subject: CN=208D8336C3C957CA1DE3843B6CDAFB2AAA40A7DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:a3:ec:c5:9c:17:5e:4c:f4:0f:71:10:f2:
c7:df:94:04:64:4e:cd:b0:28:4d:81:b2:58:4a:ed:
5f:7c:7e:52:43:d3:72:ea:05:c5:3f:ac:73:99:cc:
cc:e2:45:9a:a6:22:a6:7b:71:99:51:ea:6a:dd:9f:
c9:2a:fb:39:54:d1:90:b7:97:4e:7f:c7:93:fc:4a:
7f:12:a4:10:9f:25:46:b0:56:1a:60:d0:45:be:73:
47:bb:73:d8:f3:a9:b4:9d:03:8d:8d:1f:7a:37:d4:
f6:43:a9:a0:3f:93:32:58:d2:fd:07:4e:ad:20:2d:
58:c8:9f:22:06:a2:33:1d:b8:a2:0c:ae:51:81:73:
02:5c:05:86:b1:39:66:08:a0:e0:a8:9c:e3:2a:d9:
cb:43:70:a8:9c:8b:54:1c:e0:2b:e8:58:8d:fb:e1:
df:52:6d:ec:9b:12:80:28:0d:29:0d:bf:1e:a9:53:
d9:f0:af:42:4e:40:d6:4b:8d:fb:30:8d:02:30:a6:
50:1b:8c:2a:58:39:ca:52:e5:dc:3a:a8:ba:7b:28:
53:b0:20:3c:6a:7c:c7:f9:4d:66:cb:f4:c9:d8:fe:
7b:75:3f:e9:64:2b:1f:e9:81:d0:09:6f:1f:47:51:
d0:f7:f4:0c:7e:0e:3c:31:63:55:02:9f:92:6e:e7:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:83:36:C3:C9:57:CA:1D:E3:84:3B:6C:DA:FB:2A:AA:40:A7:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139382e302f32342d3234203d3e20323138363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3f:01:d9:0d:7d:de:a2:bc:49:fa:82:52:cb:73:78:e3:cc:
b2:62:b6:f9:a6:3c:80:11:9d:8b:10:5f:c4:f9:ec:c6:f6:65:
2f:1e:de:59:fc:56:dd:0b:f4:7b:b8:bd:23:dd:7b:0c:35:bc:
98:dc:17:cb:6e:26:a7:e9:44:26:3f:d5:b8:46:be:a6:00:c5:
6e:23:03:20:12:95:06:5d:f9:80:55:49:9b:84:2a:f0:51:48:
9a:f1:58:84:8c:79:fd:2c:b1:da:34:d1:b4:da:87:24:93:a3:
60:2a:68:e6:cd:20:52:be:fb:ef:54:32:dd:c9:c4:15:6b:c9:
89:4c:dc:7b:49:af:2f:f6:9f:39:93:23:b8:ae:a6:f3:c1:30:
25:08:c9:70:a7:62:33:38:7e:e6:0a:4a:a4:92:e3:8a:96:5a:
44:f5:4a:60:8f:cf:76:e0:97:90:8c:1e:a7:da:cc:88:aa:24:
3d:24:7f:a6:85:0a:0d:76:90:5f:88:10:ce:bd:2f:7d:70:1b:
fd:10:f2:7b:ef:e7:61:e2:23:80:02:c2:fb:3e:ea:3d:6c:5a:
2a:47:72:b1:6f:c1:70:c6:88:2b:d3:3f:ca:f9:7b:b7:46:8b:
27:76:eb:be:c4:fd:47:d1:bb:74:b1:72:eb:79:13:5b:3f:c2:
63:d0:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:50 2026 by rpki-client