Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: fns3CbRavSMtof7H4+JBabF2DmkHki5ekrgjgS5k6A0=
Subject key identifier: EB:BD:3C:75:6F:D0:25:61:0F:88:9C:78:2A:E2:9F:3F:57:9C:87:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26B236FC3C3BE3C765C7F5665414CAA3921DF42F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 06:55:36 +0000
ROA not before: Mon 07 Sep 2026 06:50:36 +0000
ROA not after: Mon 06 Sep 2027 06:55:36 +0000
asID: 834
IP address blocks: 217.216.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b2:36:fc:3c:3b:e3:c7:65:c7:f5:66:54:14:ca:a3:92:1d:f4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 06:50:36 2026 GMT
Not After : Sep 6 06:55:36 2027 GMT
Subject: CN=EBBD3C756FD025610F889C782AE29F3F579C8762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:03:c3:6e:89:cc:c7:8c:e3:75:48:a3:db:
fc:ff:46:e5:cb:7c:39:37:aa:64:f8:54:4c:91:6b:
e9:48:6e:26:6c:c0:10:88:2b:b0:dc:c4:0b:2b:9f:
39:d1:00:5d:d7:19:ef:93:53:20:65:5c:1b:5e:0c:
9f:b7:84:47:09:78:62:a7:0f:be:05:e9:6f:b6:4e:
40:54:ee:24:d0:be:a4:ee:bb:5a:28:e1:66:2d:9e:
cd:6f:43:74:6a:2d:82:84:3e:0f:15:73:2e:8b:d8:
4c:96:dd:da:bf:4a:4f:70:34:c5:82:6c:1f:71:f2:
db:12:0c:24:71:2a:49:b9:79:87:48:d2:fb:de:b9:
da:b2:4d:fb:77:59:94:fc:3e:86:d8:d9:e2:50:a6:
3b:9a:3e:f2:8c:9c:8f:f6:51:5e:00:c5:95:85:2a:
40:b9:64:a4:f8:6c:f8:51:44:03:d4:51:a4:50:22:
8a:83:54:1b:7e:5b:4b:b3:45:2f:74:5d:ba:92:b8:
11:cc:72:26:f6:bd:64:27:27:8a:47:04:ac:be:0b:
b7:89:28:57:d8:14:30:29:d3:b9:7b:e1:08:4c:20:
4e:3e:d9:f2:a9:d0:12:54:e9:6f:05:e9:eb:74:ca:
c6:84:d1:13:63:38:b9:e8:5d:2f:c9:9a:9b:7e:a3:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:3C:75:6F:D0:25:61:0F:88:9C:78:2A:E2:9F:3F:57:9C:87:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.216.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ac:8a:fc:93:35:07:30:26:b2:30:d6:de:b3:9d:b0:fb:94:
1e:6e:6f:e7:bd:90:25:37:11:29:68:53:c7:09:29:74:37:fd:
3a:3f:9e:b1:cb:a9:42:e8:44:5b:d6:cd:20:2f:af:06:44:2c:
f7:10:1c:16:22:a3:4e:d3:99:b7:3e:a1:b6:e9:59:6b:90:5f:
e7:82:34:f3:b5:73:bb:7e:6e:f2:36:32:e6:10:48:c7:68:87:
47:e1:ee:f4:dc:36:6d:23:66:5b:1e:c5:58:f3:25:76:26:9d:
74:14:c9:ee:10:76:99:77:e9:a0:c4:76:c9:9e:e5:27:68:44:
d4:ce:6a:68:43:fc:a4:40:f9:64:d1:63:c6:e7:ee:69:7f:b8:
c2:32:14:cf:66:b4:09:69:2d:ec:9f:23:51:61:b1:de:bf:9e:
c3:48:21:2a:87:6a:3f:b9:9b:2a:0c:7c:57:9d:3e:79:6f:0c:
67:41:49:ba:58:fa:a0:b6:4a:95:ec:be:b5:01:79:98:32:98:
cc:4d:d6:60:1c:04:d9:53:37:56:d4:ad:40:2a:93:81:63:db:
3a:56:55:05:0f:ba:ba:0a:72:cb:41:e3:45:09:a8:f9:da:f2:
27:23:f0:80:ef:e8:91:96:59:68:f8:02:2a:8f:37:38:4f:d8:
03:b5:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:51:11 2026 by rpki-client