Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231372e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: abe7oxiuC4D0kMjz1Q3mdpYLAkRl9qEY3yO/cW9zNoU=
Subject key identifier: 5F:4B:46:45:DD:97:BB:25:A3:C5:07:63:B3:6A:65:56:EC:E8:6C:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 553F67E060B5C3A1A45F5614B6B308B52D29B322
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231372e302f32342d3234203d3e20383334.roa
Signing time: Sun 26 Jul 2026 10:08:06 +0000
ROA not before: Sun 26 Jul 2026 10:03:06 +0000
ROA not after: Sun 25 Jul 2027 10:08:06 +0000
asID: 834
IP address blocks: 217.216.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3f:67:e0:60:b5:c3:a1:a4:5f:56:14:b6:b3:08:b5:2d:29:b3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 26 10:03:06 2026 GMT
Not After : Jul 25 10:08:06 2027 GMT
Subject: CN=5F4B4645DD97BB25A3C50763B36A6556ECE86C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:1d:71:2e:b6:e7:85:43:55:3d:6f:f8:cc:
21:a6:8d:41:d7:8b:0d:fa:3c:74:a5:1d:5c:e1:c1:
ff:52:d8:8c:a3:13:a7:83:a6:2f:d2:db:60:3e:66:
88:2f:ee:77:0f:78:1b:ca:f9:4f:a0:52:85:f9:60:
8f:4a:79:06:8c:91:1d:96:e1:b5:c0:84:12:b8:1f:
a4:1e:8e:ba:5b:a0:ce:e9:42:33:07:10:f3:a6:13:
f5:e4:b1:c2:a8:d0:ef:42:7d:62:c6:5f:dd:8e:0f:
e0:f7:04:34:0a:78:cf:6c:de:56:db:74:df:09:a4:
6f:28:4f:79:2f:00:84:63:ac:5f:9a:e6:aa:49:2f:
ef:be:73:fe:08:f9:e7:56:bf:a9:46:a1:41:04:9f:
15:b6:75:9f:51:f8:a8:15:37:01:ae:0b:f0:5d:4a:
2d:27:87:46:8f:9f:e3:43:51:c7:b7:56:36:b2:2a:
97:cf:da:ee:ad:d2:3a:9f:e9:6d:74:42:5c:d1:ce:
5a:09:20:ee:d4:fc:85:f7:07:39:47:91:c2:52:e7:
80:8e:da:c1:56:67:55:d6:2e:7f:cc:02:03:00:e5:
77:f0:18:45:48:97:34:2f:21:13:b0:fa:fd:19:79:
5d:82:68:a2:89:46:e2:08:3c:56:2a:00:ef:2e:6d:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:46:45:DD:97:BB:25:A3:C5:07:63:B3:6A:65:56:EC:E8:6C:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:42:2b:bb:ef:46:47:4f:af:f9:e5:7d:1a:ad:96:81:07:9e:
77:37:00:22:6b:33:81:75:7d:4b:69:34:1c:a1:3d:07:df:6b:
fb:51:3b:1b:ee:02:f3:07:f3:71:ea:45:c2:35:4e:62:f0:17:
d5:c8:e6:df:a6:c5:bb:37:1e:2d:41:75:23:92:c5:15:f2:ee:
53:33:bb:ff:4e:ea:ed:ec:41:88:68:d6:27:7d:b6:1f:5f:4e:
08:aa:cd:ee:13:d2:48:d3:77:8e:ac:26:d5:7f:8d:53:38:30:
b9:96:79:a4:19:41:23:da:07:38:5f:05:7d:1f:23:2a:d8:e8:
03:8c:14:d4:c8:72:da:35:12:cf:2f:5e:ac:9e:66:f7:db:3c:
b4:a5:2b:cd:cd:d7:4c:dc:40:06:52:d2:26:80:ee:00:43:51:
98:bf:c2:01:d2:41:4e:42:b6:bf:31:6e:50:36:27:0a:ce:a2:
48:03:84:27:69:ce:36:b8:75:e4:25:73:9c:be:0a:95:d5:63:
a0:fc:db:f3:37:c3:95:46:aa:ca:66:39:0a:a4:bf:c9:14:3c:
6f:c3:18:8e:94:bf:42:3b:b5:28:fd:05:bc:af:98:b4:ad:c0:
f1:c2:a7:0e:8a:62:dd:4a:bf:3d:45:d0:5e:0d:e6:4b:d3:3b:
0e:66:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:05 2026 by rpki-client