Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e203331393234.roa
File: 3231372e3231372e3139352e302f32342d3234203d3e203331393234.roa (raw, json)
Hash identifier: jTNVUs4/owkN8rjuOMVqrwT4IUO4J/PGXR7kaNN5rw4=
Subject key identifier: AD:EA:63:CC:F4:14:81:EA:17:F3:9F:F2:79:47:23:39:4D:0E:55:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4673A1D97FFDCC97005059F73A46155D6CD11CE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e203331393234.roa
Signing time: Mon 27 Jul 2026 10:35:31 +0000
ROA not before: Mon 27 Jul 2026 10:30:31 +0000
ROA not after: Mon 26 Jul 2027 10:35:31 +0000
asID: 31924
IP address blocks: 217.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:73:a1:d9:7f:fd:cc:97:00:50:59:f7:3a:46:15:5d:6c:d1:1c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 27 10:30:31 2026 GMT
Not After : Jul 26 10:35:31 2027 GMT
Subject: CN=ADEA63CCF41481EA17F39FF2794723394D0E5502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:f6:aa:e6:2a:6f:76:09:26:13:7d:39:bb:
da:bf:1c:d2:8b:b8:c0:eb:30:a5:cb:2c:4f:e3:2f:
3d:91:c9:c7:3b:74:5b:2d:50:4a:a2:4d:2b:26:82:
34:18:98:30:1d:af:6a:a8:33:15:d7:9b:84:d0:c3:
00:a9:0d:53:cf:bf:db:c4:c4:dd:86:7b:8d:86:b3:
bf:d1:24:a6:0b:b3:3e:34:44:f5:bb:3c:22:02:db:
87:60:5d:7d:62:ef:91:bf:42:7c:6e:92:41:6f:5c:
23:2d:72:81:0e:97:cb:9b:44:ff:cb:e8:9c:43:8f:
bb:d7:d1:4e:8e:ae:eb:08:0e:52:81:83:68:d4:96:
c3:f5:84:78:28:bd:ce:a5:63:33:3d:9f:e9:2b:04:
71:62:63:d2:7f:ec:08:ff:1f:71:81:32:27:2f:58:
7d:d4:5c:f6:0b:52:62:6c:bb:5b:de:31:6b:85:b4:
02:f8:23:2b:e4:bb:a4:09:0f:66:48:2f:58:9c:53:
9a:36:29:f2:7f:63:fe:d7:74:15:d0:4f:e1:d6:1b:
c0:24:45:bc:ec:bd:0c:b6:7f:96:3e:24:54:5a:ab:
74:51:4e:1f:21:8f:24:e1:ce:75:15:79:c7:47:69:
83:72:15:c4:5e:3e:7e:c4:4c:58:76:22:39:0a:73:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:63:CC:F4:14:81:EA:17:F3:9F:F2:79:47:23:39:4D:0E:55:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e203331393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:dc:1c:4e:03:fb:43:88:9c:37:f9:5e:72:08:48:a1:fa:95:
80:9e:68:d7:50:07:b7:90:05:ec:15:5e:92:a5:4b:b9:af:e5:
32:f2:9d:26:c7:5d:d9:05:06:8e:41:23:d4:f5:11:dd:d5:00:
bd:77:55:ad:d4:1e:3c:2e:aa:ba:df:7b:dc:20:cd:88:10:ef:
95:2c:09:27:22:80:eb:69:2c:99:d4:8a:d2:8b:84:cd:7f:ab:
61:80:10:a4:41:1c:59:65:0d:f4:6a:50:33:a6:f3:c7:1a:a5:
a9:9f:be:0a:4d:18:72:ae:bb:e2:15:3f:e9:84:3c:6c:43:0c:
2c:37:7d:4f:1e:d2:26:16:3f:61:03:97:7a:5b:17:61:7d:4c:
a2:19:b0:de:2f:6c:16:7d:5c:51:e3:11:de:cf:18:3a:8b:d2:
16:27:51:39:70:6b:7d:0f:db:1f:e4:ec:04:61:e8:5d:2f:7b:
e7:21:c2:dd:82:ed:ef:6c:31:14:35:b4:09:29:6d:c7:8f:65:
6a:80:85:93:4b:d1:de:dd:47:87:5a:0f:89:58:e6:d9:b3:47:
64:bb:54:ed:1d:db:0a:c6:34:3d:42:23:bf:3d:4b:9f:29:dd:
e9:bb:bf:b5:f0:c1:8c:b8:b9:37:a7:ad:17:5c:7d:37:5f:3a:
d5:21:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:03 2026 by rpki-client