Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31342e302f32342d3234203d3e2039333034.roa
File: 3231372e3231372e31342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: ExCUNAT7Fop6fw+wytAww/B+Yz+tLpnp3EfFKDr6/do=
Subject key identifier: 2A:20:59:46:66:F0:C1:CE:FF:71:78:57:08:B0:1F:D6:DE:9A:93:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7DF54A151EE110714E99EF86DF18AD12BEE6BD49
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31342e302f32342d3234203d3e2039333034.roa
Signing time: Thu 10 Sep 2026 11:26:13 +0000
ROA not before: Thu 10 Sep 2026 11:21:13 +0000
ROA not after: Thu 09 Sep 2027 11:26:13 +0000
asID: 9304
IP address blocks: 217.217.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f5:4a:15:1e:e1:10:71:4e:99:ef:86:df:18:ad:12:be:e6:bd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:13 2026 GMT
Not After : Sep 9 11:26:13 2027 GMT
Subject: CN=2A20594666F0C1CEFF71785708B01FD6DE9A93D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:11:29:1e:72:20:a0:1e:d2:f8:3b:c0:2b:
93:39:10:2e:82:c8:00:d1:01:e2:e3:61:90:06:d8:
2d:db:1d:13:26:50:e9:7f:5f:8c:04:22:9b:03:9a:
bd:4b:64:e7:7f:b2:7f:a3:85:e0:ba:39:63:b8:12:
e9:e6:07:ed:82:a0:04:17:96:62:ac:36:27:da:a9:
09:7f:ae:1c:24:5a:f2:32:53:84:2e:a7:05:a7:c8:
79:97:d8:4a:a5:ef:e1:77:96:4c:54:aa:21:49:7b:
b7:43:13:bb:28:24:4d:54:a9:7a:4b:71:b4:75:00:
bb:92:2b:fe:4d:13:b3:ee:b2:92:9b:9d:47:97:1c:
51:68:16:65:24:98:bc:c0:e2:b2:3e:96:2d:d2:07:
24:87:cd:a0:be:4d:a6:46:f4:97:02:db:68:99:3b:
92:6c:68:8a:7e:65:52:09:8e:c6:01:38:fb:d9:15:
d0:c8:55:f1:ab:10:61:03:19:13:c7:46:d5:6b:7b:
db:5a:a2:77:8d:a5:aa:82:33:e9:78:66:77:91:85:
ce:32:be:95:c1:c5:b3:14:50:cd:d2:18:ce:a4:bc:
4b:56:67:e9:90:51:8b:c2:47:40:04:6e:da:3a:c7:
12:93:c3:fa:a1:65:98:10:46:60:98:00:8b:60:95:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:59:46:66:F0:C1:CE:FF:71:78:57:08:B0:1F:D6:DE:9A:93:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.14.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b9:8a:7b:bd:38:63:f4:b2:eb:cd:94:a0:a5:87:24:b8:42:
4f:3c:af:58:9a:fd:fe:41:3c:01:b3:37:53:e2:d6:69:c5:29:
e3:f1:14:c3:8e:e3:65:1a:9b:02:66:74:be:34:ef:4a:f4:c9:
8c:7a:18:f0:c5:5e:36:d6:bd:44:3b:ae:40:c2:13:8d:ff:3c:
3a:c1:37:24:cf:32:75:b7:86:0c:ff:ca:0e:46:d4:4c:e7:ec:
98:34:9d:54:42:55:5c:90:9b:04:b6:44:da:55:3a:37:fb:05:
36:f2:1a:40:42:2d:95:b6:7e:99:2b:b1:27:bf:4a:30:6e:34:
e6:d8:69:fb:8e:f0:78:35:ed:83:57:68:34:49:22:57:0e:1d:
a6:03:a2:b3:81:7d:2e:9e:f2:e8:be:aa:0d:ca:19:fb:19:33:
bc:87:c5:7a:59:af:15:ab:d5:f1:e4:80:50:c3:d4:41:e1:d5:
13:fd:d5:4f:0c:d0:5c:e5:dd:50:35:60:e2:db:5e:7b:f1:7a:
73:f3:4a:7f:a3:32:d9:22:f9:b5:1e:50:16:11:31:46:37:dd:
cc:80:e5:85:c9:92:a1:2d:2f:72:27:f5:ee:8f:53:d7:9e:58:
28:33:aa:04:5e:3e:46:b4:5a:92:78:62:1f:b7:1c:e4:ed:59:
78:91:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:13 2026 by rpki-client