Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20313532313739.roa
File: 3231372e3231372e3139362e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: KNPfMozul3G736hIiHgUR1zsW3fjXyQVc33ioMmjgQc=
Subject key identifier: D0:A7:5E:AD:8D:40:8B:81:DA:A1:C5:B3:9E:C7:85:71:6A:45:0D:D8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27A7BABB9FE0031D73544EF28418DEC5C579AE60
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20313532313739.roa
Signing time: Mon 27 Jul 2026 10:35:51 +0000
ROA not before: Mon 27 Jul 2026 10:30:51 +0000
ROA not after: Mon 26 Jul 2027 10:35:51 +0000
asID: 152179
IP address blocks: 217.217.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a7:ba:bb:9f:e0:03:1d:73:54:4e:f2:84:18:de:c5:c5:79:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 27 10:30:51 2026 GMT
Not After : Jul 26 10:35:51 2027 GMT
Subject: CN=D0A75EAD8D408B81DAA1C5B39EC785716A450DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:af:a7:6d:9a:07:e5:06:33:8f:74:cf:ad:
51:15:3e:a8:a1:c1:d0:50:72:4e:a2:ad:17:54:72:
df:ae:3a:ef:a7:6b:f8:76:63:bf:ab:88:f7:11:aa:
c4:98:09:9a:91:20:95:18:19:4f:6a:01:09:5d:6e:
26:03:ba:ac:34:c1:55:9a:34:13:aa:c7:1c:b0:91:
10:6d:9c:36:a0:56:9b:63:4a:f7:70:b2:3f:f9:11:
1a:cd:83:51:3e:b9:8a:95:57:76:c6:bc:fb:f6:16:
6d:86:3c:e9:66:9d:cb:d3:d5:7e:e5:09:17:36:1f:
73:29:2b:f8:ba:0b:1e:4d:4e:86:79:00:15:2d:cc:
54:26:87:4c:f1:51:02:d8:b9:64:63:5d:22:2e:0b:
d3:25:e3:97:fb:5c:2a:eb:89:30:36:39:76:71:47:
94:f5:25:e9:58:4c:41:55:ab:28:1d:1b:98:9e:61:
9e:4b:3d:06:a3:f6:99:df:4d:48:dd:11:fc:12:41:
85:4d:b9:1a:44:a6:e7:b9:2b:d6:3f:4c:d1:27:8b:
30:64:80:64:da:7d:0b:08:b6:7d:85:59:16:78:0f:
d1:12:1b:58:7d:33:66:d0:c0:8b:3b:f9:89:e4:1c:
ec:58:8f:5c:64:0c:bb:49:e7:49:ff:f0:39:84:6d:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:5E:AD:8D:40:8B:81:DA:A1:C5:B3:9E:C7:85:71:6A:45:0D:D8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.196.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0a:06:93:1c:70:2b:59:b9:7f:f8:e1:be:25:55:51:ff:91:
83:0d:dd:89:8a:3f:d6:4f:f1:d4:a3:10:02:43:03:7c:ef:09:
1b:82:38:be:3c:75:e2:de:7a:4e:7f:69:95:9a:9b:52:7b:1a:
2c:71:bc:9e:aa:a9:03:ee:88:75:cb:2c:9c:68:6b:62:b9:c9:
a9:ba:57:04:ab:2b:79:bf:4e:4b:a1:eb:af:69:50:06:65:9b:
39:41:98:ce:8c:e7:58:7e:af:74:b6:8f:c4:61:ce:d0:10:7d:
23:3b:43:5e:0c:41:a7:3c:45:74:65:e2:56:f9:5a:5a:25:a4:
3f:fb:c5:90:ca:34:72:55:ce:c1:25:28:eb:9a:09:ec:67:53:
ab:cb:a6:9f:15:c4:d5:95:02:a7:df:19:e9:dd:93:b4:64:fc:
0e:fa:73:05:16:c6:39:1b:03:dd:a8:64:31:f8:84:50:5e:4d:
ab:c7:e4:5c:2d:db:c3:a7:10:66:9b:5e:df:f1:67:0b:21:a4:
0d:e2:33:6a:6e:29:38:cb:d2:11:f9:ee:5b:79:19:73:cd:33:
68:45:de:30:22:ec:e6:40:5b:04:20:6d:80:db:e3:bc:8e:4d:
b8:21:35:c1:2f:6e:ab:c0:f2:a0:52:cc:07:80:df:84:37:a3:
76:84:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:32 2026 by rpki-client