Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230332e302f32342d3234203d3e20323139303031.roa
File: 3231372e3231362e3230332e302f32342d3234203d3e20323139303031.roa (raw, json)
Hash identifier: rWRM27+6LQMsBW+B03sSEVfgX4I1bh70HNivPEfr8hE=
Subject key identifier: 7A:6C:AA:C3:66:DD:51:EA:64:F2:EA:13:17:D6:21:C0:FF:B1:EA:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A448718C42E8E7C18A0117C74C2BA522DDB9A3B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230332e302f32342d3234203d3e20323139303031.roa
Signing time: Fri 18 Sep 2026 10:20:30 +0000
ROA not before: Fri 18 Sep 2026 10:15:30 +0000
ROA not after: Fri 17 Sep 2027 10:20:30 +0000
asID: 219001
IP address blocks: 217.216.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:44:87:18:c4:2e:8e:7c:18:a0:11:7c:74:c2:ba:52:2d:db:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 18 10:15:30 2026 GMT
Not After : Sep 17 10:20:30 2027 GMT
Subject: CN=7A6CAAC366DD51EA64F2EA1317D621C0FFB1EA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:bc:ad:57:84:8e:12:5c:40:a1:44:e8:b8:
6e:5f:49:4a:3b:f9:6d:44:66:85:b2:e2:77:96:0b:
59:e6:9e:0c:41:c0:42:55:ce:84:0d:6e:dd:7a:b8:
fc:cf:d4:a2:c2:d7:cc:ce:07:86:63:3b:78:cd:88:
d3:5e:16:94:b6:4c:3c:7f:69:3f:6c:ae:e7:1d:ba:
d7:e0:23:0e:37:2e:87:56:b4:54:79:2a:1b:93:b7:
5b:b3:1d:f3:74:e5:ea:18:c2:ba:00:87:da:6b:7a:
78:fd:32:ca:97:75:9c:97:4e:6e:ee:b4:0e:eb:c9:
fe:0d:e3:15:cb:ef:82:0f:ed:8b:4e:af:a1:80:e9:
69:eb:20:8c:3c:b0:60:90:40:65:d5:46:fe:cb:a4:
13:19:12:6c:a6:4a:dc:c1:ba:29:c2:76:aa:1f:c5:
a9:0c:13:f1:ef:72:5c:17:73:88:e5:f0:2e:96:79:
4f:12:65:94:72:5c:5a:9f:2f:7f:5c:57:fb:09:b3:
87:78:2d:63:83:dc:f4:ca:ac:27:4c:ca:3b:34:2c:
7b:66:b4:ca:12:9d:3a:a5:ae:13:ea:69:45:af:91:
5e:25:c3:63:aa:11:95:e7:ee:94:b3:38:19:32:eb:
03:52:94:94:5c:d0:6d:65:5a:34:2b:50:9c:c2:64:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:AA:C3:66:DD:51:EA:64:F2:EA:13:17:D6:21:C0:FF:B1:EA:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230332e302f32342d3234203d3e20323139303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cb:b0:16:64:54:7f:04:b6:5b:5f:4b:e7:ec:eb:2e:b4:24:
18:45:e7:8d:13:71:b6:c3:67:03:b3:7e:0c:a0:c1:4f:20:89:
41:e7:1f:73:8e:11:8e:37:d4:a2:68:b4:ba:05:6a:ca:5b:f1:
cc:54:77:91:2c:c0:98:81:0c:23:d9:75:15:d9:8b:14:68:19:
17:3f:91:48:9e:5f:9a:c1:b9:14:0b:0d:00:6f:71:d2:71:9a:
1f:22:9f:08:11:f5:eb:61:4a:bb:0b:fa:72:25:43:09:3c:f3:
5a:ab:9a:19:0e:64:ea:cd:43:47:63:41:42:01:c3:c0:c9:15:
62:df:c5:43:a3:00:6f:7a:5d:45:28:cc:ed:07:a2:0f:66:9c:
ee:e4:fb:43:5b:ec:1c:42:0d:8f:db:2c:59:52:35:1b:e4:74:
1a:84:ed:7b:a0:30:cd:5a:da:c7:51:d9:63:5f:d7:f2:02:36:
63:52:72:21:75:ab:6a:d1:de:5a:c2:e2:01:37:7c:9d:05:6b:
27:fd:37:1e:af:96:a1:81:8c:05:2b:b8:a9:61:5b:22:f0:62:
9a:ac:29:45:f2:99:3a:f4:8d:e5:89:a5:e5:a7:13:85:67:e4:
36:00:ca:bc:99:5f:0b:b0:ee:5e:04:3e:ab:5d:b9:10:5d:c1:
e4:10:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:36 2026 by rpki-client