Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e20323132333335.roa
File: 3231372e3231362e3230302e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier: 2X7IaS33zu9FcmA3wxXIOK3ApWfDpqCI6WwZP86PdvA=
Subject key identifier: 1A:E1:6A:BF:73:77:F5:61:CE:69:1B:FB:86:70:06:C9:CE:98:F8:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24E9A7629E7FDB2FDF046A86F2896E659159284D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e20323132333335.roa
Signing time: Thu 17 Sep 2026 12:49:03 +0000
ROA not before: Thu 17 Sep 2026 12:44:03 +0000
ROA not after: Thu 16 Sep 2027 12:49:03 +0000
asID: 212335
IP address blocks: 217.216.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e9:a7:62:9e:7f:db:2f:df:04:6a:86:f2:89:6e:65:91:59:28:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 12:44:03 2026 GMT
Not After : Sep 16 12:49:03 2027 GMT
Subject: CN=1AE16ABF7377F561CE691BFB867006C9CE98F8BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:b6:88:0e:0b:ad:4f:38:f8:15:44:bf:eb:
13:dd:a5:da:5b:47:5e:7c:a6:1e:93:2f:d0:19:67:
b8:e3:a3:27:b5:9d:ff:69:a8:26:12:58:9c:ea:76:
44:97:de:49:a1:d2:2a:f0:0d:71:e3:8a:94:bb:1e:
ca:4c:33:4f:ee:da:07:cc:25:d9:1a:d9:6d:65:59:
8b:d7:25:8d:2c:cc:63:3c:cb:36:cf:b1:72:83:e4:
62:f5:cd:ff:ed:24:2d:6b:69:d3:6e:42:f4:ed:a6:
b7:b6:5e:0a:fd:eb:50:5c:31:e6:61:89:f8:29:31:
7e:ed:24:c4:d4:8e:b3:19:bd:f1:43:d5:c8:17:07:
c9:cc:c3:4d:b8:a5:fa:13:19:5d:bb:07:21:a7:6a:
ce:28:ea:60:09:32:b8:70:00:9c:c1:bd:c2:fd:81:
51:31:17:f2:4a:d7:49:cf:13:12:6e:0a:ee:37:f2:
30:28:5a:2f:d7:f9:ac:1b:60:4c:43:df:1f:8d:c9:
3a:5a:02:e4:5f:22:a7:11:7e:6c:5e:97:57:25:64:
49:7c:a3:f3:51:a7:d1:42:6a:f7:d2:de:a7:42:6f:
6f:a9:c6:2f:27:63:a2:25:5d:d9:f3:f3:0f:d6:fc:
da:73:c4:2f:88:ad:67:5e:74:2e:70:a6:7c:98:59:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:6A:BF:73:77:F5:61:CE:69:1B:FB:86:70:06:C9:CE:98:F8:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e20323132333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.200.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0d:6f:4f:2d:e7:90:33:b3:83:7f:9a:7a:c1:79:07:30:e4:
1f:fd:cd:87:7f:eb:66:60:ff:3b:48:3b:5f:d8:64:43:f1:f1:
28:77:fa:ab:6c:37:0e:7f:a4:b4:37:cb:0d:d9:22:00:1c:84:
58:5c:21:18:4e:20:70:1f:48:5b:84:44:51:1a:09:97:63:ea:
f7:a8:69:d2:5c:af:7b:55:e9:07:9f:17:19:88:7e:15:66:ec:
31:a3:d1:4a:f1:76:87:3b:00:b0:fe:94:63:01:e5:d9:1a:6b:
95:91:5a:d3:c9:cd:81:29:a3:cf:b3:de:32:e5:93:7c:2f:29:
de:ce:28:0d:b0:03:00:39:fa:b7:0b:f8:15:aa:8c:ef:12:43:
7c:f5:6a:93:12:55:38:7f:c5:5f:6d:4a:b5:f9:8c:2e:06:ce:
06:8d:af:07:10:2b:6a:54:8f:0a:a2:c8:64:fc:6d:c6:10:1a:
d4:77:38:ef:d7:cc:25:be:22:dc:d3:28:23:d0:87:a1:4a:ac:
65:41:08:24:d3:4c:d3:ee:27:07:de:e2:06:10:12:42:2f:ed:
5e:4d:ec:11:52:5b:ef:28:a4:e3:04:0b:c6:53:1c:79:6e:a9:
dc:76:26:41:06:86:99:9f:75:8e:69:bc:33:99:7e:1e:fe:15:
27:80:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:45:30 2026 by rpki-client