Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20323039383838.roa
File: 3231372e3231362e3231362e302f32342d3234203d3e20323039383838.roa (raw, json)
Hash identifier: Wf+m95Du4KwmneVt6THAwzA0GV5a0/pPnTZomaWZhLw=
Subject key identifier: C5:EC:13:F7:1B:9F:9F:31:A5:2A:C4:C8:D5:88:DB:17:B2:F5:86:6F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66F01EA45DDE5F4FD89BF52557AA681B3DEDF065
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20323039383838.roa
Signing time: Mon 08 Jun 2026 14:55:10 +0000
ROA not before: Mon 08 Jun 2026 14:50:10 +0000
ROA not after: Mon 07 Jun 2027 14:55:10 +0000
asID: 209888
IP address blocks: 217.216.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f0:1e:a4:5d:de:5f:4f:d8:9b:f5:25:57:aa:68:1b:3d:ed:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 8 14:50:10 2026 GMT
Not After : Jun 7 14:55:10 2027 GMT
Subject: CN=C5EC13F71B9F9F31A52AC4C8D588DB17B2F5866F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:f6:ec:84:d3:c8:e4:e9:16:a6:4d:8e:1b:
86:32:61:2b:4e:e2:9d:ba:32:74:2d:a7:e1:d9:17:
8b:65:32:ef:e0:e6:e3:f2:80:35:19:bf:fa:3e:dc:
18:36:af:b8:a7:2b:c0:b5:6d:2d:4f:32:af:f4:d7:
c1:c2:57:c2:73:43:44:93:b4:95:d8:5f:f6:77:9a:
d4:a1:d3:3c:a7:00:f7:16:28:4e:04:82:b1:e8:3c:
d6:e5:ca:31:26:8f:6b:e3:19:db:ba:bc:ce:07:aa:
d6:0f:a8:70:c0:7b:b3:1c:15:3a:53:bb:8f:9b:d1:
ca:c5:97:39:23:73:cd:b9:54:ad:fe:50:fa:78:b1:
74:33:ff:e6:ef:5d:a3:82:d9:09:69:5d:68:c0:a8:
82:03:3c:01:66:10:90:56:27:2d:4b:92:da:64:9f:
b3:8b:ff:08:2c:0b:40:42:58:8e:c7:c0:7d:9b:c7:
bf:00:93:70:9b:77:b2:7b:39:d9:a9:81:10:9d:15:
88:66:68:4b:5e:51:c4:02:4f:38:78:62:7c:32:0f:
72:79:5f:77:ba:14:20:af:b4:4b:0a:3e:53:4b:fe:
ec:a1:bb:02:0d:25:c0:d4:bf:ef:56:bf:a2:dd:d0:
bc:d2:1a:f8:54:52:47:92:83:85:ac:aa:b9:b2:1c:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:13:F7:1B:9F:9F:31:A5:2A:C4:C8:D5:88:DB:17:B2:F5:86:6F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20323039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.216.0/24
Signature Algorithm: sha256WithRSAEncryption
05:53:05:fa:c5:db:de:c9:ef:8e:e7:9c:6d:d2:e6:b9:8c:e3:
00:c2:7f:d4:f6:9e:aa:5c:35:09:93:e1:1c:c6:26:f9:b0:40:
4c:d0:15:2e:2c:72:d2:65:03:70:c1:e7:ff:98:70:1b:28:ce:
a8:7f:16:54:40:64:91:c2:6e:15:be:1b:75:0c:57:49:07:81:
8d:c7:73:75:f4:ed:2d:66:fb:f4:f5:39:e3:74:66:3d:f6:ec:
eb:72:15:26:66:28:73:bb:10:e5:89:2d:e1:c2:b7:d6:b8:4c:
bc:94:da:45:92:d9:dc:b3:89:f9:7e:f8:7b:59:50:07:99:17:
96:2b:32:18:15:c5:c1:ff:a1:a1:e1:66:c7:4c:65:7a:3c:d8:
2e:43:6e:4c:ec:60:75:d9:46:82:ee:d0:eb:90:5f:83:41:6e:
b6:bc:6c:4c:58:6c:ca:a4:5f:44:32:55:de:da:3c:a2:2e:b8:
b2:e1:d1:30:2c:00:57:b1:4d:df:0e:94:61:cb:0e:6b:90:2c:
21:d3:dd:cd:f8:a8:2d:f6:02:1a:f9:f0:43:b5:37:8b:b6:17:
28:9f:0e:85:6a:a2:50:0a:73:ff:72:3a:b7:e2:49:e2:b4:25:
25:cc:a6:62:7a:17:2f:10:e4:79:89:b7:d3:f8:2c:c6:42:a6:
f1:82:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:12 2026 by rpki-client