Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131322e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3131322e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: dcyJF9G3NkbJfcAHpHyW/PQGQgNn5YJY30YCMZC8YKE=
Subject key identifier: 03:8E:F0:7A:6C:76:CD:16:9D:72:63:2D:33:2C:79:13:5B:91:A4:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0AD3EAC6BFB65E2B2900BFCFFC0AAABAAD3CC99E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131322e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 12 Jun 2026 20:25:13 +0000
ROA not before: Fri 12 Jun 2026 20:20:13 +0000
ROA not after: Fri 11 Jun 2027 20:25:13 +0000
asID: 137409
IP address blocks: 217.217.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d3:ea:c6:bf:b6:5e:2b:29:00:bf:cf:fc:0a:aa:ba:ad:3c:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 20:20:13 2026 GMT
Not After : Jun 11 20:25:13 2027 GMT
Subject: CN=038EF07A6C76CD169D72632D332C79135B91A4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:65:85:da:f5:dc:c8:d3:e8:b1:0e:cb:cf:
83:18:6e:a9:44:3c:ff:66:d2:10:61:f4:6c:49:3a:
76:0a:a7:4f:be:7a:7a:44:b0:a1:fd:79:71:4f:6a:
1b:b2:8e:30:16:36:cd:99:d7:a4:1b:09:8b:a2:db:
87:c7:95:cb:9c:0e:d2:14:85:00:09:aa:09:6a:90:
46:55:90:5a:65:88:d3:a2:24:98:ff:60:af:c9:1a:
a0:8e:cc:dc:c9:44:17:fc:b7:49:8c:ac:76:fb:4f:
5d:74:c5:6d:97:d9:11:ea:04:23:38:3e:32:93:ea:
96:e7:42:38:87:63:b7:49:81:58:c8:4f:0b:94:5a:
b0:bc:a6:9f:a8:65:22:b6:3c:2b:eb:d5:92:cb:25:
4e:0d:6b:76:92:b6:b5:75:27:56:f0:12:c4:f5:26:
e4:ca:9b:b9:41:a0:3c:a5:da:03:f5:51:ea:4d:05:
6d:54:4a:25:c1:d8:63:b9:5a:6c:b7:a9:fe:90:89:
50:c2:08:17:31:11:61:b6:c6:53:41:a6:ba:0e:86:
8d:d0:32:7b:d4:37:eb:77:a5:9b:19:eb:70:3d:f3:
c2:48:31:6e:7f:da:5b:8f:b2:9a:8a:cc:a6:91:84:
73:33:b8:b4:02:ec:76:dd:2d:b6:57:76:cc:17:02:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:F0:7A:6C:76:CD:16:9D:72:63:2D:33:2C:79:13:5B:91:A4:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131322e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.112.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ca:fb:2a:85:1e:2c:b0:38:da:4c:4f:9d:01:18:55:02:12:
58:02:85:b6:28:4c:e1:1a:8b:93:bc:7e:dd:ab:a8:0b:e4:13:
a2:40:99:49:49:18:10:2f:2b:c4:2b:34:3e:ad:c8:b5:cd:a2:
ab:63:4c:10:6f:b7:88:5e:1e:90:29:cb:c2:87:b2:3f:e6:35:
c6:e0:a7:61:1d:76:29:49:73:f0:3d:65:5d:71:bc:6d:5f:44:
82:db:72:08:05:86:2a:59:be:af:9d:7c:22:17:37:b8:05:bf:
af:3f:cd:b9:e1:0d:63:16:ee:57:eb:1f:b9:4e:40:d6:39:ba:
1b:14:7c:65:bf:36:2d:76:56:bf:5b:d6:ab:9e:9c:d0:1f:06:
1b:82:2e:36:c8:82:f2:7e:3b:39:d1:f6:ae:de:99:ec:f0:cc:
4c:4f:f3:e3:2c:87:ca:1d:25:88:1c:9e:81:70:13:17:e0:50:
0a:88:13:0f:fd:9f:5f:be:4b:8e:87:8c:6a:45:33:4b:1c:ab:
87:6a:c9:b1:ce:63:13:d9:8d:88:93:31:96:23:b5:12:21:1b:
5f:ab:35:c8:1b:07:df:dc:99:c0:67:c6:b0:39:06:4e:95:79:
57:b7:0f:38:a2:cf:08:85:c9:b5:be:42:59:5a:d3:c5:0b:d8:
53:2c:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:04:27 2026 by rpki-client