Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dt/keFBNOcYQF9GzeMgIrCm0XSfmoX3YFvCbyEsFh6o=
Subject key identifier: B0:47:56:AF:C3:DD:0C:2D:3D:28:FF:28:E5:73:D6:25:E9:0B:F0:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F5CD368F4A300AF9FB3B1A3AE9EEE180F5604FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Feb 2026 09:29:09 +0000
ROA not before: Tue 24 Feb 2026 09:24:09 +0000
ROA not after: Tue 23 Feb 2027 09:29:09 +0000
asID: 834
IP address blocks: 217.216.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:5c:d3:68:f4:a3:00:af:9f:b3:b1:a3:ae:9e:ee:18:0f:56:04:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 24 09:24:09 2026 GMT
Not After : Feb 23 09:29:09 2027 GMT
Subject: CN=B04756AFC3DD0C2D3D28FF28E573D625E90BF070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:8e:be:ca:4f:48:75:8c:c6:c0:c3:0f:02:
13:33:55:73:5b:4e:3c:37:95:a6:57:25:a5:ce:53:
69:47:19:a1:c0:43:81:5c:f0:65:2d:87:d6:5e:45:
ba:54:49:9d:a7:88:5f:3e:fe:8e:a0:a4:e4:1d:f5:
68:45:63:ae:15:37:94:3f:bb:40:49:dc:e9:fb:95:
ec:c8:bc:bc:3d:70:bf:2e:0c:8a:50:50:2c:5b:cb:
c8:ef:6d:36:89:4a:04:f8:1e:ca:4f:03:5d:c5:55:
13:62:ff:d1:f0:81:47:4c:e2:43:b1:70:ce:db:33:
05:7b:90:ae:5f:ac:8e:ec:43:82:6b:e5:9e:55:60:
f4:4f:fe:ca:0f:76:a3:57:df:af:79:63:61:2a:2f:
5f:17:0b:59:9f:1e:3a:8e:ff:09:31:0c:76:e9:6b:
03:1b:d2:2e:40:03:36:cd:b7:ee:e5:a1:6d:5a:49:
4e:af:7f:27:12:30:8c:7f:b1:84:76:26:2c:00:15:
e9:41:0c:ab:02:34:5c:6c:c4:9f:dc:1e:0f:10:ab:
47:cb:85:a9:02:b6:b5:48:de:bc:67:39:e9:3f:d2:
ac:07:f6:9a:ea:a5:7a:6c:d8:2c:d0:00:6b:cb:3c:
f0:4f:be:71:ad:da:90:f7:a0:91:bf:60:1e:54:c7:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:56:AF:C3:DD:0C:2D:3D:28:FF:28:E5:73:D6:25:E9:0B:F0:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:62:31:d1:42:e4:ab:b9:1b:f9:da:94:08:79:f8:31:08:b3:
3d:f1:57:e5:5e:51:1b:0f:0d:d6:02:49:b2:b7:77:6c:fa:ae:
b5:c1:f2:1f:08:c5:75:d7:b3:71:a5:f2:b8:70:06:74:aa:cf:
04:54:27:1d:f4:5b:4a:fe:1e:e7:0f:78:9b:76:f7:9e:29:46:
b0:06:16:9a:21:d7:29:35:f5:5d:bd:d3:80:cc:ff:b3:47:ae:
b3:98:4f:10:b5:1e:25:85:1d:34:c3:db:71:98:10:eb:20:32:
32:c5:d2:dc:5e:f0:2f:a3:fd:94:a1:ae:98:24:48:07:39:cc:
cc:85:32:1b:10:2d:e7:3f:65:5b:97:f1:1c:28:c4:8f:f7:e3:
c0:ec:c5:9a:0b:82:f2:69:64:64:ab:68:7a:0d:88:84:0d:56:
94:fb:34:97:2b:4e:a2:48:84:58:6d:b6:cc:e9:d8:f1:d7:ef:
cf:a9:ad:a8:90:52:69:ec:bb:2b:fd:69:05:4d:4b:13:95:c8:
f0:39:3c:6d:41:cf:ca:a0:5c:4e:a5:ad:fc:f5:cf:3d:00:df:
b4:25:42:f7:16:bd:ce:dd:34:10:c0:64:ef:08:38:6c:2c:a9:
8e:43:21:99:c1:12:8c:44:e3:84:7e:09:3f:f6:3a:37:60:83:
f8:41:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:07 2026 by rpki-client