Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132312e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3132312e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 3AkhGCe5Am3Ui+jjtnHJFwDRwyn4dW3993p6WyHDJrc=
Subject key identifier: D3:6C:CE:2E:8F:4F:BB:FE:D4:42:B2:3F:E0:ED:DA:1F:38:B2:6F:1F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27CBF11A0E6782CD0EBB594CDB5AFDB955F1E019
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132312e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 12 Jun 2026 20:25:14 +0000
ROA not before: Fri 12 Jun 2026 20:20:14 +0000
ROA not after: Fri 11 Jun 2027 20:25:14 +0000
asID: 137409
IP address blocks: 217.217.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cb:f1:1a:0e:67:82:cd:0e:bb:59:4c:db:5a:fd:b9:55:f1:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 20:20:14 2026 GMT
Not After : Jun 11 20:25:14 2027 GMT
Subject: CN=D36CCE2E8F4FBBFED442B23FE0EDDA1F38B26F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:6f:b0:4f:68:77:15:83:d5:98:6e:6a:f0:
a6:fb:bb:aa:b0:b0:bc:d3:8a:84:e5:4d:2d:eb:c4:
a0:b0:44:af:57:b8:27:78:bb:52:05:cf:b5:f7:e0:
e7:7a:1d:f2:db:1a:54:c8:e2:d3:30:43:8e:4f:19:
74:75:84:7a:b2:46:cf:07:25:51:aa:d2:ca:c0:03:
6a:5e:50:33:e0:d6:bb:c8:3b:2b:4d:f1:99:18:9b:
04:9f:05:f6:e9:4e:56:23:3b:0f:1f:75:04:ac:c0:
d0:47:9b:ca:60:28:dd:11:29:ee:2c:a0:13:a9:1e:
a5:24:07:7c:8c:dd:3d:12:67:86:90:03:51:9b:61:
86:58:3e:3b:f3:1b:6c:45:3a:5f:30:55:0f:44:48:
5b:16:8c:9c:83:d1:3f:23:79:1d:59:71:af:00:8c:
f4:82:46:33:30:89:d1:93:8b:9b:2f:c8:c5:d9:36:
77:fd:42:c2:17:7a:1c:c7:ca:83:b3:f6:2e:19:52:
c3:05:02:59:d8:19:49:ad:95:e4:ab:7d:06:5d:81:
cc:fc:82:76:d1:a3:32:4a:f4:77:bf:0f:2b:3c:7a:
54:85:cb:a7:cd:92:83:5b:04:70:55:47:42:02:53:
0d:e6:d3:c9:9e:3f:72:9e:98:6a:7a:2d:4a:89:f3:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6C:CE:2E:8F:4F:BB:FE:D4:42:B2:3F:E0:ED:DA:1F:38:B2:6F:1F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132312e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.121.0/24
Signature Algorithm: sha256WithRSAEncryption
03:43:11:56:32:84:6d:62:84:97:a0:93:33:d3:48:ee:4e:40:
d7:ed:d5:c7:8b:cd:19:9f:2e:bf:ba:06:ff:0e:99:ea:5d:b4:
6e:f5:a7:1a:8f:af:57:1c:fd:e2:fd:62:78:a7:f7:89:36:5f:
ea:6f:53:ff:e3:30:3e:2b:b4:ab:08:6e:d4:1b:29:1b:c1:e0:
47:83:db:a2:a4:19:7d:15:0c:73:cc:d6:f4:cc:09:0b:c2:50:
f4:af:9a:71:6b:ff:7c:84:69:8f:aa:48:8f:91:65:c7:e8:22:
4f:e0:92:cd:88:6a:12:4b:5e:17:d1:ee:55:e6:0e:11:7f:65:
83:58:aa:da:28:36:67:34:04:a2:e3:53:0f:91:c8:ed:04:7d:
12:28:31:d1:cc:aa:76:ef:3d:0b:65:77:a6:72:cb:c6:5b:d6:
49:4b:e3:c0:2c:9c:b9:c6:c7:5d:c6:ab:84:06:f4:ce:19:1e:
10:52:80:e2:b3:c0:8c:c4:36:9a:d4:8c:5e:92:e7:9a:30:98:
a3:3e:2c:cd:d4:b8:03:34:0b:96:ae:8e:4f:8d:a5:87:5f:e0:
0f:18:a8:e5:79:b1:57:98:34:21:0b:70:3f:71:88:a4:6b:2a:
05:10:86:c6:4c:df:32:69:e1:58:76:78:53:6e:f5:d3:e3:07:
11:ef:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:03:24 2026 by rpki-client