Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e20323139303031.roa
File: 3231372e3231362e3230342e302f32342d3234203d3e20323139303031.roa (raw, json)
Hash identifier: rDFqHaw3wxU+CyfjCfcjFXnp78sfcqqzTdpmLVguGQU=
Subject key identifier: F9:2E:40:D6:A4:46:9B:0B:3B:95:00:02:6A:E8:35:F4:71:F8:24:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63680917045B10573A97BF5ABEF00711DBF5613A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e20323139303031.roa
Signing time: Fri 18 Sep 2026 10:20:28 +0000
ROA not before: Fri 18 Sep 2026 10:15:28 +0000
ROA not after: Fri 17 Sep 2027 10:20:28 +0000
asID: 219001
IP address blocks: 217.216.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:68:09:17:04:5b:10:57:3a:97:bf:5a:be:f0:07:11:db:f5:61:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 18 10:15:28 2026 GMT
Not After : Sep 17 10:20:28 2027 GMT
Subject: CN=F92E40D6A4469B0B3B9500026AE835F471F824AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:17:cc:1f:c3:4a:2d:55:45:98:88:bc:23:
b7:98:19:1e:2a:bd:58:ac:a3:d1:c9:7a:8d:85:49:
d9:20:9f:e8:2f:d6:e1:1e:da:3b:6b:27:9f:96:aa:
0b:a9:ed:ef:68:c6:db:4a:77:51:18:da:3e:a6:fe:
84:b2:09:6f:07:92:cc:d0:bb:e0:72:3a:43:46:30:
46:ad:31:e6:0a:5d:35:6d:ba:a0:61:da:43:1a:4e:
74:f7:ee:70:85:aa:73:49:3c:c5:78:1c:89:45:7f:
6e:6b:86:af:df:7f:4d:16:82:60:84:14:4f:a5:2c:
93:83:59:df:fb:23:0f:75:8c:44:76:c3:eb:94:f7:
fe:b0:f7:04:e6:0d:36:3a:aa:c1:06:6e:0d:90:1b:
29:84:86:33:49:c8:3f:ed:9d:73:9b:14:62:c1:86:
09:b7:ac:26:8c:52:8f:23:07:42:3a:bb:1b:d7:86:
6f:9b:9c:9c:d6:c5:df:9b:30:9c:39:46:4c:d7:0a:
ee:7a:15:1e:f1:75:53:45:cb:57:c0:c1:be:70:80:
15:ad:fa:b2:9a:80:dc:ce:d3:3a:7d:0b:4f:45:8d:
88:4b:1e:69:fd:56:be:a8:f5:93:36:08:57:20:e0:
bc:86:49:97:95:df:46:33:a0:35:ed:c4:11:80:98:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:40:D6:A4:46:9B:0B:3B:95:00:02:6A:E8:35:F4:71:F8:24:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230342e302f32342d3234203d3e20323139303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.204.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d4:6c:b1:1c:cd:f1:75:a9:20:5b:b5:ce:77:08:7a:38:39:
b8:b3:ef:15:b2:e6:bf:e1:88:8e:49:f9:d0:b9:b2:8e:b5:f8:
ea:6e:07:6b:c0:a3:4d:65:d8:cc:08:30:86:cd:0d:94:97:4d:
08:e6:7d:01:d8:09:31:82:20:21:bc:e0:9e:b8:9f:7b:1f:7a:
a2:37:e7:d4:17:cc:81:f6:a6:f3:14:89:35:ba:6b:ae:55:12:
e1:1d:4c:20:b6:04:60:57:48:25:2d:c3:59:db:16:ae:e3:40:
cb:c2:cb:42:20:50:15:8b:75:e4:6e:20:33:1e:b8:8b:f9:d1:
e0:c3:af:49:4f:4e:a8:eb:ad:65:72:74:72:0f:08:de:a8:58:
fd:c5:e8:28:45:7a:c4:ec:de:a1:46:fa:0c:9e:22:2e:62:a5:
94:18:77:94:4b:45:2f:0b:1c:97:81:aa:0b:52:da:b9:83:2c:
dc:e7:d1:c2:97:cd:37:c3:ca:34:1c:88:33:2c:17:d6:6d:8e:
33:5e:64:5a:16:8c:fd:b3:8a:c1:a8:bd:bb:2c:cf:f0:1d:e4:
de:a3:78:4a:12:a2:96:5c:4b:dd:1c:84:51:7f:27:f3:13:0a:
70:d8:3c:9d:5d:c4:5a:f9:1b:ae:d3:54:3d:81:05:db:79:48:
f5:4c:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:25 2026 by rpki-client