Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230332e302f32342d3234203d3e20323030343634.roa
File: 3231372e3231372e3230332e302f32342d3234203d3e20323030343634.roa (raw, json)
Hash identifier: IKEutuqK89gb6kHJmFXcVKOUMVPxXknKSp8Sob5WxY4=
Subject key identifier: BE:E5:6D:2E:6B:57:76:59:70:9F:FD:53:37:93:D0:F8:C8:11:95:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6EF3BA35BDD729D54347B01288643D8D92F45589
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230332e302f32342d3234203d3e20323030343634.roa
Signing time: Mon 07 Sep 2026 18:39:33 +0000
ROA not before: Mon 07 Sep 2026 18:34:33 +0000
ROA not after: Mon 06 Sep 2027 18:39:33 +0000
asID: 200464
IP address blocks: 217.217.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f3:ba:35:bd:d7:29:d5:43:47:b0:12:88:64:3d:8d:92:f4:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 18:34:33 2026 GMT
Not After : Sep 6 18:39:33 2027 GMT
Subject: CN=BEE56D2E6B577659709FFD533793D0F8C8119563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:af:95:e0:74:be:df:b4:bb:6e:2a:9e:9f:
fe:78:f5:60:23:4a:a9:ef:e8:64:4a:0f:b8:4b:75:
48:f3:7e:cf:e8:9d:e9:ff:02:07:8e:fd:8f:94:24:
32:ec:1c:11:30:b1:88:59:34:6f:12:16:db:94:2f:
25:a3:20:1c:ee:c2:d5:fe:e8:2a:3b:44:dd:cb:9d:
f3:ab:46:98:11:c3:6b:0d:b1:c8:6c:9b:e7:8a:a5:
29:95:1e:a6:92:ac:21:13:ac:2a:52:a4:e2:81:4b:
d5:3d:2f:e2:b7:f4:9e:c3:d5:a8:7d:82:c5:68:5d:
91:41:df:cb:cb:d4:b5:41:f8:75:90:20:dd:12:75:
34:58:9a:63:98:2e:cd:3b:49:e3:e0:fc:7b:90:00:
ac:8c:ca:6b:3f:d7:1d:95:f6:9c:ba:90:48:f3:ea:
b7:ec:d6:39:dd:cc:5c:70:b2:23:5f:a9:2f:8b:69:
78:41:12:95:6a:09:41:3b:bb:00:23:e8:4f:2c:42:
db:c5:bc:0f:f0:e4:a3:17:fa:f9:b0:37:69:71:c8:
7d:7f:56:e4:d1:d0:5f:8e:a4:f2:07:42:35:09:7a:
89:ed:df:9a:6a:22:9b:1a:95:bc:be:cf:0a:06:65:
ff:0d:c1:ea:dd:0e:2c:f2:c2:bf:07:f9:93:1e:f3:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:6D:2E:6B:57:76:59:70:9F:FD:53:37:93:D0:F8:C8:11:95:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230332e302f32342d3234203d3e20323030343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.203.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:59:64:b9:14:07:bb:3c:62:e1:ec:a6:8c:eb:8b:a8:e7:
a8:83:ff:d2:19:51:d8:62:e1:55:6e:5c:c8:e5:e3:d9:a0:0d:
e9:73:1b:0e:14:7f:19:b2:54:92:31:de:75:dc:0c:41:3e:4b:
91:f6:94:24:24:f2:85:1f:06:91:a7:8d:e7:c5:87:d1:76:03:
42:ff:85:65:37:4f:87:a7:4d:30:36:0c:28:3f:9c:4b:77:34:
ec:72:01:49:65:11:f9:63:63:98:5f:04:95:0f:91:60:e7:d0:
87:c0:ad:1d:5e:07:81:5d:6a:2c:13:53:35:50:84:8b:59:1d:
15:23:01:ca:7b:69:ce:8f:eb:30:38:dd:45:5e:a8:aa:6e:4b:
72:db:33:0b:87:d8:53:55:a7:a9:e4:71:8a:d2:a4:97:ec:3f:
cd:31:39:03:10:f8:c2:35:93:f4:e5:c6:db:7a:69:f6:eb:d0:
54:1a:1d:3c:2f:2e:57:f1:75:ec:c3:2c:5b:e8:18:7c:be:ab:
ff:97:c1:b1:50:68:4e:fb:c2:f3:69:62:37:28:a4:4f:27:4b:
77:45:5c:98:fb:88:49:f3:c2:04:55:b0:1e:94:fa:ad:83:84:
43:21:95:e9:29:fa:b3:d2:b1:c8:37:ba:36:f5:d5:98:68:cb:
02:fe:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:08 2026 by rpki-client