Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231372e3139392e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: l4MAAvzB1xP2RQQ8B440Sa4UAwBXJ/ldPbLwsigO6Xk=
Subject key identifier: B3:83:D2:59:2B:15:51:A0:30:55:85:73:B1:3D:F7:B4:75:40:67:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 536423E3B8C68E47EE9FC94AAB9F422A9B378C55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e20323139303735.roa
Signing time: Mon 07 Sep 2026 06:55:31 +0000
ROA not before: Mon 07 Sep 2026 06:50:31 +0000
ROA not after: Mon 06 Sep 2027 06:55:31 +0000
asID: 219075
IP address blocks: 217.217.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:64:23:e3:b8:c6:8e:47:ee:9f:c9:4a:ab:9f:42:2a:9b:37:8c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 06:50:31 2026 GMT
Not After : Sep 6 06:55:31 2027 GMT
Subject: CN=B383D2592B1551A030558573B13DF7B47540673C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:99:fa:0d:91:e2:c2:5e:91:63:53:3b:76:
8c:e5:db:3c:95:e6:1d:a8:ec:be:72:34:ff:7f:1d:
f8:5e:e0:58:05:a6:b3:f9:b0:43:4e:8f:15:dc:89:
dc:88:a2:42:e9:98:d2:c9:a2:74:8a:bc:2f:04:f6:
7d:93:d0:71:54:46:e7:36:ad:4d:9f:bd:d7:f5:b2:
b6:9d:81:40:86:74:51:f9:a7:56:2a:c9:cb:fa:34:
1a:d7:dc:35:14:be:96:bb:bc:56:ea:f3:cf:db:52:
cd:97:d0:d9:af:3c:41:a6:7c:f0:cf:c5:31:1b:20:
24:1b:08:ea:7b:57:df:db:d8:a6:9b:d1:0f:32:46:
0a:88:b8:79:23:e1:7a:50:91:27:2d:b5:1a:2b:1d:
11:fa:19:af:5b:64:c4:38:1c:47:3f:40:a6:1d:23:
22:53:9b:02:b8:49:7a:c6:53:ff:90:5e:14:46:89:
d0:51:88:97:2e:20:2d:f8:f5:db:30:42:90:96:eb:
cd:f3:b2:6c:d0:99:6b:c0:c3:a4:5d:cf:1f:35:18:
5b:7d:28:f1:0a:20:a2:59:16:bb:87:20:6f:07:76:
b0:75:67:81:b6:32:17:0e:ac:5f:46:b1:c9:e1:96:
07:e4:e1:ba:51:df:95:41:8d:43:81:02:53:9e:1e:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:D2:59:2B:15:51:A0:30:55:85:73:B1:3D:F7:B4:75:40:67:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9c:4c:6a:f5:43:0e:ef:7e:cc:09:e2:cc:ca:bd:dc:bf:54:
7e:12:0f:62:fc:82:b2:66:d8:6e:97:0c:9e:1c:a3:40:b3:de:
d5:ef:39:24:1e:df:d8:f3:f8:c7:43:2e:2e:9f:85:4f:bd:3f:
00:a4:f4:0c:5f:2b:99:c1:91:c6:d3:41:57:12:86:26:0b:df:
bf:8e:f0:d4:13:6b:87:af:20:0f:8d:1c:4c:7f:db:74:45:04:
c0:8c:15:49:f2:e5:16:df:0d:5e:6b:e6:10:57:69:7e:75:27:
7e:f3:61:8c:eb:3f:e0:29:f9:05:ca:3c:1f:b5:54:24:5f:0b:
df:a5:36:c4:1a:70:14:50:28:fc:d8:98:c3:06:99:d9:f1:cc:
78:ba:ca:87:22:44:3c:b2:47:c7:86:96:41:90:d4:db:d3:f3:
51:47:53:28:cf:26:cc:3c:9a:3a:0d:34:47:e7:43:17:d5:65:
20:a2:67:81:a2:97:29:6e:ab:5b:12:32:d7:f8:6f:40:e7:ef:
9c:b5:7e:bc:1d:37:1f:2e:df:21:3f:38:f8:52:20:5e:23:e0:
ba:47:43:8c:e0:cc:d8:37:0a:e5:72:ff:bc:5a:b9:53:12:e1:
36:4a:60:13:13:d2:6b:f3:be:bb:66:f2:bd:63:e8:72:c7:aa:
24:0d:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:06 2026 by rpki-client