Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20323138383639.roa
File: 3231372e3231372e3139352e302f32342d3234203d3e20323138383639.roa (raw, json)
Hash identifier: 3pEuJIm/MoUwcZ0wYFBhGaoqy1Dn5Wkk6KQRQ/F5DCM=
Subject key identifier: 5E:54:EE:EA:15:82:D5:CF:6E:32:AE:15:E0:C2:2C:EF:5D:96:A1:A9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77346C668739EF1ED8D8B120EDFCFC491656EF98
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20323138383639.roa
Signing time: Mon 07 Sep 2026 06:55:24 +0000
ROA not before: Mon 07 Sep 2026 06:50:24 +0000
ROA not after: Mon 06 Sep 2027 06:55:24 +0000
asID: 218869
IP address blocks: 217.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:34:6c:66:87:39:ef:1e:d8:d8:b1:20:ed:fc:fc:49:16:56:ef:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 06:50:24 2026 GMT
Not After : Sep 6 06:55:24 2027 GMT
Subject: CN=5E54EEEA1582D5CF6E32AE15E0C22CEF5D96A1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:60:5a:cd:13:9c:45:42:8c:21:0c:7b:64:
49:87:72:d2:f1:5e:4e:bf:21:d5:33:80:c4:72:c5:
48:a0:2c:69:f1:28:9e:65:fd:ed:c9:9b:20:29:fb:
c3:63:d6:32:61:0f:a2:2c:85:76:8f:8d:4b:e2:29:
69:de:13:d7:d1:32:16:f5:ca:3d:1a:a6:97:aa:6c:
97:b6:a0:b8:08:25:eb:cc:7b:96:44:fb:59:f1:7d:
6a:af:c1:e1:06:10:38:25:44:6f:9f:be:d9:a1:54:
2a:51:1a:18:8d:6f:e3:d0:6a:08:9a:17:d2:8c:c2:
0a:81:e0:a0:a8:19:4d:24:f5:8a:aa:16:98:95:8e:
04:60:a7:06:71:83:80:06:ba:2c:37:49:7b:9f:07:
66:c0:a7:16:4b:62:71:14:fc:87:fd:a2:0b:99:44:
64:67:b9:03:f2:fa:cd:fe:dd:82:1e:be:81:e0:9c:
90:8c:9e:7f:2c:f6:70:7d:58:f1:d2:23:53:5a:21:
0d:44:c9:5f:39:c4:ae:98:d0:d6:ee:72:ea:59:94:
1f:6c:d2:bd:d8:d3:99:f4:69:2d:9a:ce:15:ba:f4:
0c:ac:d4:69:51:f0:17:77:92:ad:19:a2:34:26:71:
ad:81:7b:a3:ad:56:72:bd:8a:b6:97:46:a1:1c:3c:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:54:EE:EA:15:82:D5:CF:6E:32:AE:15:E0:C2:2C:EF:5D:96:A1:A9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20323138383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
32:66:72:5b:5f:59:f7:5f:67:cd:70:d1:9e:8b:98:78:a2:a3:
ac:45:d8:fe:01:36:77:4e:5f:c1:7d:a5:cf:c3:10:8e:8e:22:
36:74:9a:c8:ab:e1:44:ae:e7:6d:3d:62:62:71:1f:1f:1f:82:
55:e1:79:bf:32:1d:7a:dd:22:92:1e:78:58:b7:17:83:6b:6b:
72:05:02:ca:f5:62:d5:f1:5f:43:c8:e5:74:c4:5a:e8:80:fc:
4f:4f:e8:78:63:55:ea:18:b0:f2:39:bc:b5:50:67:29:99:fe:
e1:62:e5:5f:3c:f8:94:5d:b5:45:84:0d:d9:49:1b:77:91:98:
58:4d:af:5f:33:91:6a:c4:e4:b3:c0:20:8e:bc:25:8b:82:0d:
3c:e0:2b:ab:d5:2a:88:26:3e:8a:3f:b9:32:e4:d6:ad:a3:7a:
d9:1c:19:03:70:4d:cb:e4:df:c2:69:f0:7b:3a:fe:85:7a:f4:
5c:84:e4:16:42:4b:a0:a3:cd:47:6c:b2:a1:9e:5b:5d:a4:20:
e2:31:9b:af:71:51:82:b2:0f:f4:12:47:1b:45:1b:8b:22:fc:
11:6a:30:aa:ba:48:99:d8:03:ab:a3:95:db:9c:23:e0:3f:65:
e4:fc:4b:4f:2a:57:8a:5c:da:e4:87:d2:6c:0d:cf:b9:d5:29:
05:f8:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:49:22 2026 by rpki-client