Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20323131343433.roa
File: 3231372e3231362e3231382e302f32342d3234203d3e20323131343433.roa (raw, json)
Hash identifier: i7n6F++fg+L38CBkStf8nY28WaeDECZgAQ+Ej4VcY7E=
Subject key identifier: A7:43:5F:90:8B:A4:3E:03:7A:A4:63:F6:87:7E:8B:6F:87:B4:B8:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 118B63357AB501DAF43F8362E4FCF289FDFD9C0F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20323131343433.roa
Signing time: Fri 18 Sep 2026 21:46:51 +0000
ROA not before: Fri 18 Sep 2026 21:41:51 +0000
ROA not after: Fri 17 Sep 2027 21:46:51 +0000
asID: 211443
IP address blocks: 217.216.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8b:63:35:7a:b5:01:da:f4:3f:83:62:e4:fc:f2:89:fd:fd:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 18 21:41:51 2026 GMT
Not After : Sep 17 21:46:51 2027 GMT
Subject: CN=A7435F908BA43E037AA463F6877E8B6F87B4B85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:20:a0:e6:f2:90:01:34:71:49:01:df:e0:
39:2b:2a:a3:be:6f:b3:b4:4c:0f:d2:a6:f0:47:32:
02:fa:c0:ee:74:c1:e7:7b:21:be:44:0e:3a:fe:36:
59:7a:80:a5:cf:cd:81:6f:6d:97:3b:42:08:38:8a:
b8:c9:33:1b:da:f9:12:29:92:36:1c:2d:9f:9f:b3:
9e:30:0b:d1:4b:66:cb:36:42:5b:f3:db:cc:7c:b5:
99:96:11:84:2e:f9:59:0e:cb:cc:10:ee:ae:78:35:
7f:42:54:c2:a5:60:0f:a2:c6:23:1d:41:73:cb:39:
46:69:5f:be:43:a9:71:2b:1d:7e:cd:c5:54:47:d6:
ab:8a:6c:2a:5a:95:b7:85:6c:4d:bb:68:95:b1:d5:
5f:41:b9:60:03:0d:f9:fe:9a:d8:f7:99:39:4b:51:
d1:bd:4c:9a:54:46:4c:b0:84:63:34:01:63:89:8a:
6b:d6:ae:5e:38:da:9f:03:dc:5c:50:ef:09:af:b7:
92:c4:80:f0:e2:ee:e7:99:68:51:22:d0:43:56:0a:
2a:57:95:64:8f:5f:ba:c0:27:8e:c3:4e:46:3f:25:
66:c2:cf:ca:be:59:a4:66:46:9b:fe:1d:cd:9d:cb:
99:d8:d5:97:4a:ce:ff:54:8a:7d:24:be:eb:d9:ff:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:43:5F:90:8B:A4:3E:03:7A:A4:63:F6:87:7E:8B:6F:87:B4:B8:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20323131343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:97:46:ad:16:47:d4:ea:59:63:aa:93:1c:35:e9:33:7d:b1:
10:3b:a6:aa:3a:73:65:9c:92:dc:b0:f6:95:76:9a:82:9a:5c:
19:c7:94:09:3b:f0:26:f3:70:27:db:78:40:05:04:ce:da:e8:
f1:ea:34:99:5d:df:8a:02:ba:b7:cf:5a:2f:12:a5:94:30:f7:
89:bc:7b:b7:4e:24:06:22:96:05:18:3c:a8:48:ae:08:7c:21:
74:e2:de:ad:ff:09:ab:e6:31:d6:bc:d7:bb:e2:9f:64:99:1c:
c7:27:fc:40:52:c7:14:37:37:5c:7d:75:64:8c:5e:d6:d2:c7:
15:40:08:ba:aa:c4:1e:5f:f3:d4:bc:45:7b:5f:8b:32:d4:aa:
1f:9d:4a:40:7d:ae:80:b6:e0:a5:67:a6:eb:e4:6f:1b:e1:16:
b9:30:e4:4a:94:ab:68:3c:f0:9d:68:a7:ec:6b:fe:58:b4:a0:
b9:b2:e5:13:cd:4e:b0:0a:04:26:42:81:f3:54:7f:b2:5d:ac:
6a:c3:59:10:5e:a6:2d:41:ab:f0:76:38:ef:10:9a:73:5e:d1:
0d:a9:13:a5:9b:7b:ef:d0:c4:41:17:60:23:28:a6:6a:c1:be:
a3:fc:9c:55:62:a1:49:b7:4e:a5:75:68:c5:6d:01:b0:fb:b6:
9c:0c:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:33 2026 by rpki-client