Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: f8FuqfWiMXV+ygXm+pneijh3xHmXXcHUWZvU0n4BlwM=
Subject key identifier: FD:FA:E9:28:2D:95:FF:9B:88:4B:1B:EC:88:62:1D:71:EC:F6:9D:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FEF78979149462C0B1BC3DF8851BC362448907A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 12 Jun 2026 20:25:13 +0000
ROA not before: Fri 12 Jun 2026 20:20:13 +0000
ROA not after: Fri 11 Jun 2027 20:25:13 +0000
asID: 137409
IP address blocks: 217.217.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ef:78:97:91:49:46:2c:0b:1b:c3:df:88:51:bc:36:24:48:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 20:20:13 2026 GMT
Not After : Jun 11 20:25:13 2027 GMT
Subject: CN=FDFAE9282D95FF9B884B1BEC88621D71ECF69D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:93:42:0f:91:ee:7a:92:1f:1c:dd:fe:92:
0b:49:94:81:8f:d9:01:66:0e:99:10:ad:72:7f:3d:
7e:a2:aa:a2:de:94:60:27:16:91:eb:e7:3e:03:c3:
0f:e2:6b:c8:48:02:d8:77:c3:0a:e2:8a:83:36:7d:
53:76:77:b8:b6:72:b2:1c:2a:6f:80:5e:a4:20:72:
3e:c7:f0:ba:62:d7:2a:72:7f:3f:2e:18:b0:d2:28:
b2:39:45:d6:28:d1:bc:45:3d:c5:fe:92:7a:62:cd:
19:dc:a6:f7:b6:03:df:03:84:f8:29:9d:6a:fe:fc:
1c:69:6b:db:a3:8f:f4:5e:46:77:83:c0:62:58:d4:
eb:71:ca:fd:32:11:da:8b:84:4d:f6:3b:25:c8:b4:
5e:6e:c6:7a:27:68:08:1a:1a:5e:74:3d:f7:42:d7:
33:f6:e7:5d:fc:96:ca:6b:79:7c:96:fb:1e:5c:d6:
4f:2b:cd:7f:2a:ac:05:cb:7c:4e:99:04:bd:6b:36:
7c:4e:ec:34:d8:33:5e:e3:d2:ec:54:9e:29:1b:5d:
57:d2:c9:25:3b:24:f7:6e:88:fd:e8:7c:46:91:cf:
e3:3f:29:cf:eb:36:4f:39:80:0d:72:10:ed:ea:a7:
2f:47:8e:33:29:1c:92:d3:e6:2c:0d:4b:40:0e:18:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:E9:28:2D:95:FF:9B:88:4B:1B:EC:88:62:1D:71:EC:F6:9D:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.114.0/24
Signature Algorithm: sha256WithRSAEncryption
78:78:f8:76:ef:96:39:74:e7:03:2a:09:4a:41:93:62:a7:ad:
34:94:64:4c:50:37:05:a7:ad:bc:5b:5b:b8:ad:60:0b:01:98:
6d:c9:b1:af:9d:63:bc:7d:a8:d1:cb:d0:e9:87:e7:91:62:0a:
24:77:be:ba:30:e4:5e:4f:87:c4:57:4e:2f:53:9e:81:ed:25:
b3:6e:f3:32:56:3e:77:16:1a:b6:95:f5:55:b2:b6:09:1d:49:
b6:7a:a8:15:28:a0:fe:b0:75:e3:5e:56:d1:01:05:25:db:50:
c0:4f:4c:f1:d2:8f:1f:67:78:da:17:17:0e:93:6a:7d:aa:69:
e4:e2:0b:70:e9:2b:83:a0:3e:77:c4:2e:63:01:d2:43:37:63:
08:a9:4d:1b:8d:25:14:38:c2:9a:52:a2:bc:3a:1b:a8:24:e0:
1a:bd:86:ec:8e:cc:0a:8e:7c:55:d3:94:05:79:72:85:71:88:
4b:b7:a0:6b:f1:6f:12:c3:62:52:03:cc:f9:90:64:a7:05:5b:
29:27:a6:b9:1a:d0:20:5c:ad:c5:05:af:6a:6f:06:10:e8:7a:
2e:6a:08:e5:05:ba:a4:5f:18:b7:fb:32:9f:6d:c6:5a:2f:68:
f1:1e:07:a7:e3:25:a6:99:bc:de:0c:7d:ad:ec:b1:a2:8c:c9:
84:00:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:04 2026 by rpki-client