Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131392e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3131392e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: nGjpNaNqfsdlXYc9QSw9sBLNjHeOFZbO6ufQXeUFZGI=
Subject key identifier: 9D:A3:C1:EE:DA:C7:B2:F0:42:5D:C2:27:7F:9A:03:C0:24:5D:57:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7BEA3A41D1D6A009A2054996C92DBEA0F6747BAC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131392e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 12 Jun 2026 20:25:14 +0000
ROA not before: Fri 12 Jun 2026 20:20:14 +0000
ROA not after: Fri 11 Jun 2027 20:25:14 +0000
asID: 137409
IP address blocks: 217.217.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ea:3a:41:d1:d6:a0:09:a2:05:49:96:c9:2d:be:a0:f6:74:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 20:20:14 2026 GMT
Not After : Jun 11 20:25:14 2027 GMT
Subject: CN=9DA3C1EEDAC7B2F0425DC2277F9A03C0245D57EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:cb:8c:6a:af:24:6a:65:67:f3:1c:74:f4:
41:cb:d0:aa:23:b0:c3:0b:41:84:d6:64:16:b4:56:
6b:5d:66:33:c6:d8:cb:d7:25:c0:68:d0:12:22:2f:
4c:0e:2d:94:d8:2e:61:b0:6b:7c:38:ea:53:b0:71:
33:f6:b2:ee:38:00:7a:1b:db:48:20:ef:53:18:60:
0c:4d:19:47:e2:e2:38:fe:6c:0a:0b:4b:29:79:ab:
bb:74:b5:87:10:51:02:22:c0:27:03:2d:58:0f:14:
3a:14:e8:58:07:57:d0:4b:9a:f5:3c:97:15:15:bb:
bd:ee:4d:7f:57:d3:89:a7:fb:f0:4f:5f:f3:be:f5:
07:db:cc:60:36:80:6a:ab:a3:8a:b2:43:0c:c6:82:
0d:9d:97:1c:a1:9d:74:f7:ed:4b:d7:68:d3:0e:c2:
c6:68:bf:eb:bb:1c:df:94:23:06:1d:3e:43:92:02:
43:53:fc:c8:97:9a:21:73:b5:3e:73:d8:44:63:c0:
03:c2:ed:ad:f4:01:17:df:d2:51:ad:31:c9:6a:e5:
8d:15:f8:78:0d:69:64:fd:6c:b7:89:76:8e:6b:84:
9c:81:5e:0d:92:1c:56:e5:a6:cc:a5:64:58:c2:6a:
8d:11:aa:aa:f5:d7:36:e3:27:b1:a9:41:f9:c4:b4:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:C1:EE:DA:C7:B2:F0:42:5D:C2:27:7F:9A:03:C0:24:5D:57:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131392e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9b:bc:5c:6d:5f:66:b8:74:18:6a:47:3e:92:7b:99:1c:b6:
92:fe:c1:bb:ba:db:12:dc:90:28:81:ad:6d:ba:04:b5:66:25:
13:fb:8a:b1:22:af:02:33:40:e3:d9:86:87:88:37:cf:d5:9d:
84:5a:a9:e1:35:37:99:22:fe:95:e8:42:d7:8f:65:f4:0f:e6:
f0:73:fa:9e:27:2b:21:2e:1a:c9:41:61:3c:b0:bf:1c:81:74:
6c:ef:9f:fd:b7:14:e8:df:35:ca:7f:5d:84:eb:51:9d:a0:48:
87:c6:14:be:81:69:de:ff:3f:c0:3a:7d:ca:52:fb:f2:97:65:
33:24:65:fd:6a:50:97:f6:7d:fd:49:0d:83:e2:77:f8:17:8a:
52:c2:ce:87:c9:47:dc:01:89:74:ee:93:c5:54:9c:9e:ba:ea:
d8:08:15:87:41:f8:71:19:ec:6f:92:7e:32:96:ae:ac:3e:d2:
11:cd:d4:91:cb:37:81:86:67:ab:91:81:f0:7c:bd:5e:6c:ca:
52:70:4f:50:12:05:3c:f8:66:1a:fe:aa:8f:e7:b5:fb:1d:b2:
0e:85:e0:17:8e:1f:49:7a:30:0f:bd:90:6e:6f:01:a4:d3:16:
e9:90:63:1e:c0:ab:03:1d:e6:84:fd:58:ee:15:8d:30:bd:5c:
01:97:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:42 2026 by rpki-client