Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e203136353039.roa
File: 3231372e3231362e3230322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: ZZP528+hWRTcXIUUOqCLDY+32CyWxwf9fbonmeZ29RE=
Subject key identifier: 45:F1:82:7F:95:7D:18:28:51:E6:5D:98:11:27:A0:DD:C5:F4:9B:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28050635EA8E3922BA05A9E6BAE7546849E1B14D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e203136353039.roa
Signing time: Thu 17 Sep 2026 12:48:57 +0000
ROA not before: Thu 17 Sep 2026 12:43:57 +0000
ROA not after: Thu 16 Sep 2027 12:48:57 +0000
asID: 16509
IP address blocks: 217.216.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:05:06:35:ea:8e:39:22:ba:05:a9:e6:ba:e7:54:68:49:e1:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 12:43:57 2026 GMT
Not After : Sep 16 12:48:57 2027 GMT
Subject: CN=45F1827F957D182851E65D981127A0DDC5F49B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:12:e0:bf:05:1c:62:b7:66:08:ba:05:18:e8:
29:cd:dd:b5:9a:50:11:93:a8:b5:50:d3:a8:f9:5f:
0f:cf:58:91:91:78:33:41:0a:e6:f2:42:f8:e8:ca:
a5:b6:55:f1:5b:5f:01:db:b4:92:7d:9d:5d:8d:c0:
65:05:a2:11:07:be:e4:4a:fe:35:35:b4:71:56:d1:
77:a3:8c:9f:f4:e3:69:bd:55:f9:02:0f:e4:00:fa:
ba:74:40:e1:a4:27:8a:25:91:ae:cb:0b:63:a2:63:
cd:fb:9c:8d:f8:4f:ce:db:fc:a1:32:05:0f:ae:e9:
bd:17:5b:df:2e:92:88:2e:76:ab:be:95:93:61:31:
0f:63:5e:dc:2b:d2:ee:18:11:e8:b7:2a:c9:44:fc:
70:4a:96:e5:a6:ed:04:6e:2a:fb:3b:87:24:db:67:
0c:13:1f:c8:5e:9b:3d:b6:27:b5:85:6e:da:a4:aa:
15:6c:ab:24:4d:d0:3b:a8:ee:83:b2:4c:dc:36:66:
dd:aa:aa:9c:5b:c9:4e:b0:22:5e:de:47:0d:6f:12:
0f:4f:5c:c8:0e:ed:71:3c:93:3d:0b:06:b7:8f:e5:
da:0a:b5:65:78:f2:fc:02:3f:6c:a6:37:fb:ac:c2:
72:dd:af:bb:ff:59:72:65:bb:db:cd:64:fe:0f:ff:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:82:7F:95:7D:18:28:51:E6:5D:98:11:27:A0:DD:C5:F4:9B:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:77:c5:8d:62:16:af:ce:df:fd:6e:97:c1:b7:f4:99:dc:
93:3c:fa:1d:e2:d8:bb:8b:54:b2:f8:58:4c:7a:6c:70:5b:43:
f6:c4:5d:83:51:26:fb:29:38:88:9a:69:88:21:46:f6:50:e9:
b8:2e:10:8d:b9:99:b5:ca:53:11:06:89:20:59:ab:e3:e6:d6:
fe:43:c8:3b:8e:a3:3a:de:f9:fc:4f:cd:1d:21:73:fd:55:a1:
4e:df:ad:78:a0:74:10:ab:f4:f7:ff:4c:8d:1a:52:50:e8:84:
63:0d:64:11:8f:1f:b2:a4:61:70:ff:6e:55:1d:fb:e6:e8:ae:
08:7c:4f:d6:8d:a6:cd:7f:80:6f:ee:fc:0c:bb:18:21:97:1d:
3d:09:30:a4:62:92:e2:02:d3:f3:93:ab:10:e2:93:ce:1f:9b:
b5:9f:93:1e:a5:49:e2:98:58:13:b2:b5:a2:63:bf:90:b1:7b:
8d:6f:67:74:ae:a0:b6:92:e1:1c:20:d5:9a:ea:d0:46:eb:a0:
e8:5a:51:46:d0:0a:e4:a0:23:d0:39:36:76:9e:82:18:9a:39:
de:32:6f:ec:b6:65:b5:23:35:4b:f8:a2:b9:3d:a2:01:12:19:
dd:c1:98:6e:1c:31:a3:f3:bc:2d:05:7b:2a:30:c4:e2:00:32:
57:e4:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:16 2026 by rpki-client