Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230312e302f32342d3234203d3e20323036363530.roa
File: 3231372e3231362e3230312e302f32342d3234203d3e20323036363530.roa (raw, json)
Hash identifier: Pmr/Hw9x6vwzxT5SuZ1Ih9zAZYnYvjTMMYwaSYArwDg=
Subject key identifier: AD:1E:A1:C9:C1:87:0F:3A:88:A0:DE:FC:C8:3E:EC:DA:4D:57:53:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4271494FBB0A7428035CDB4DFBB5E708F5CBB85D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230312e302f32342d3234203d3e20323036363530.roa
Signing time: Wed 28 Jan 2026 10:05:47 +0000
ROA not before: Wed 28 Jan 2026 10:00:47 +0000
ROA not after: Wed 27 Jan 2027 10:05:47 +0000
asID: 206650
IP address blocks: 217.216.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:71:49:4f:bb:0a:74:28:03:5c:db:4d:fb:b5:e7:08:f5:cb:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 28 10:00:47 2026 GMT
Not After : Jan 27 10:05:47 2027 GMT
Subject: CN=AD1EA1C9C1870F3A88A0DEFCC83EECDA4D5753C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:d5:ca:f5:a9:77:29:47:87:04:88:7d:4e:
86:43:7f:72:a3:5c:d5:d6:27:27:89:0e:20:90:b9:
22:ee:fb:04:61:c6:c0:6e:23:62:39:22:8d:fe:82:
6f:17:4d:8c:73:13:33:08:a8:83:48:bb:38:f5:62:
3c:83:02:d9:44:0c:35:0a:57:a5:2c:03:44:6d:eb:
b4:d7:7d:db:81:ff:f4:3c:d6:99:64:7d:ad:8c:44:
01:4e:51:66:50:9a:b6:a3:0d:7e:01:53:6f:41:b6:
c7:b0:68:4d:3a:74:9e:9c:ae:af:27:45:0b:92:71:
ab:d1:04:e1:09:ac:17:f4:6b:7d:00:ae:ce:8b:95:
04:b3:b3:ec:9f:4d:10:76:53:79:39:7e:ab:e1:f7:
52:b1:76:56:57:cb:bf:19:f8:35:67:48:28:8b:a3:
77:47:04:e0:84:1b:1c:17:ba:f0:20:66:3f:cc:ea:
3e:b7:8f:4b:e4:57:89:7a:05:a4:04:68:ba:f7:7a:
1d:3c:e6:73:65:4d:f9:24:52:89:83:fc:3b:86:fd:
70:2d:1c:d3:45:e6:e0:27:91:dd:04:1d:59:7d:e3:
e5:bc:88:67:0a:4c:31:31:9a:f1:8a:f3:41:63:3a:
7c:dc:41:48:c2:de:78:be:1e:53:4d:5b:02:2a:c3:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:A1:C9:C1:87:0F:3A:88:A0:DE:FC:C8:3E:EC:DA:4D:57:53:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230312e302f32342d3234203d3e20323036363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.201.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f5:e0:b6:0b:c9:ab:44:7e:5d:e5:ef:d6:e4:4b:9c:d2:64:
29:7e:ef:0b:f2:6d:3c:27:5a:cb:d3:d8:6a:1c:d5:d1:d3:4f:
0a:7c:ae:ef:ba:28:40:e7:ec:60:13:5d:44:0c:57:7e:02:e5:
97:41:0d:aa:c6:d0:86:8a:0d:cf:be:d3:f9:2c:87:cd:d1:eb:
fd:d3:35:d0:04:f9:57:46:76:ae:29:08:93:67:9c:91:3f:5a:
5e:fd:b7:7e:75:63:ff:69:4f:a6:ea:51:7f:5f:86:c3:4a:48:
5b:ae:1e:7d:ad:ec:b2:a8:c2:1c:dd:01:d2:f4:d2:bd:31:33:
67:59:55:12:aa:a3:31:08:b8:76:c1:39:c0:a5:a4:f1:97:be:
09:b5:10:31:c5:81:52:10:da:35:6e:a0:53:ea:ce:b9:f4:97:
40:6d:9b:96:e5:e6:03:ba:4d:88:26:57:53:70:69:ff:ef:57:
61:4c:6f:21:e5:b5:02:60:76:c3:0d:20:8c:90:e8:df:77:77:
d2:60:11:09:ce:f7:b9:45:71:b1:86:f1:ec:e5:5f:de:84:61:
b6:3e:49:b1:26:7c:e2:2f:12:05:14:df:5b:ce:4f:ae:46:1c:
c3:87:fa:30:52:07:cd:2f:ca:49:45:d3:43:3d:4b:48:79:fb:
4e:c3:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:03 2026 by rpki-client