Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20323031373234.roa
File: 3231372e3231372e3230372e302f32342d3234203d3e20323031373234.roa (raw, json)
Hash identifier: 9f5LtfO4+e2ezJTB4mZTfGML5xy2Oup2P7q9MeOuwDQ=
Subject key identifier: FC:5A:0E:98:50:48:70:12:58:D7:56:BE:83:84:58:C2:E2:B3:FC:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B25A3DF7F8BE931D425EB6D1B980B5364E2E327
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20323031373234.roa
Signing time: Mon 27 Jul 2026 10:35:38 +0000
ROA not before: Mon 27 Jul 2026 10:30:38 +0000
ROA not after: Mon 26 Jul 2027 10:35:38 +0000
asID: 201724
IP address blocks: 217.217.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:25:a3:df:7f:8b:e9:31:d4:25:eb:6d:1b:98:0b:53:64:e2:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 27 10:30:38 2026 GMT
Not After : Jul 26 10:35:38 2027 GMT
Subject: CN=FC5A0E985048701258D756BE838458C2E2B3FCB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:b9:ec:62:73:00:bb:1a:46:7b:42:2b:ac:
81:34:9c:a8:74:a6:00:b9:d9:1c:8e:80:4e:24:d1:
ec:03:a3:e9:10:52:ca:3c:ed:0d:b8:ec:4e:3d:c1:
c1:26:29:34:a3:de:ad:f6:f5:b0:7e:4a:10:35:e4:
82:82:3a:52:2b:a8:df:74:8a:aa:7b:da:71:ad:be:
9a:94:4d:7e:2b:91:08:37:80:36:be:a9:16:a3:a4:
08:47:20:8c:d0:79:f5:66:2e:2e:cf:b6:6a:79:ee:
cb:12:a0:a7:ec:53:14:e5:6e:90:c2:55:ad:fb:0e:
82:7b:a5:08:cd:1a:e9:d6:c8:73:76:42:56:90:0f:
d3:58:6a:a5:2b:72:d7:42:45:f9:7c:22:70:be:a3:
dc:27:15:fb:db:8d:7b:1e:c7:1c:53:9c:96:f4:5c:
ff:c5:ed:6f:65:53:b2:a4:12:a6:de:d0:92:32:a3:
4a:56:b1:e0:e4:61:4e:b1:fb:3e:a7:ad:91:15:cb:
c3:8c:d6:76:be:64:7e:2e:fc:6a:08:fc:46:a8:30:
0c:85:18:00:91:bc:7d:e9:ae:e0:ca:eb:d2:0b:08:
43:72:11:22:be:40:be:4f:8d:95:00:8c:e4:6f:59:
98:7f:04:a4:56:74:2c:5c:6c:5c:91:77:bb:4c:63:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:0E:98:50:48:70:12:58:D7:56:BE:83:84:58:C2:E2:B3:FC:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20323031373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.207.0/24
Signature Algorithm: sha256WithRSAEncryption
01:50:fd:4d:67:72:17:4f:a2:12:57:ca:54:6b:31:d4:0c:59:
b7:c6:af:31:87:ae:1c:74:69:99:33:ac:4d:6b:01:e9:9e:e1:
06:39:a7:65:a0:24:99:e6:8d:87:9d:33:6b:53:ab:63:0a:44:
65:1e:1d:c7:0d:0e:8f:32:26:87:d3:e8:9a:dc:a2:4c:07:b1:
21:68:1f:f9:1f:31:6e:65:5d:48:e3:c4:46:22:f1:46:03:5a:
f6:27:11:45:73:8c:05:74:ce:e3:80:fe:8c:9f:f5:1c:c8:38:
c9:b2:d4:ad:6b:36:5c:7b:e1:a9:b5:7d:68:e1:da:3e:28:a6:
4b:b1:83:c7:a6:64:07:fe:4c:00:49:b8:ce:11:e4:fb:13:eb:
43:0c:1e:a7:84:8d:56:7c:cd:b7:40:79:00:68:f3:b1:6c:e4:
5e:84:bc:c1:4e:57:53:5d:e6:82:0f:6e:35:82:d5:d7:22:e1:
4c:5c:6f:e9:52:7f:dd:2c:d6:3b:e3:dd:27:2f:6d:9d:bf:97:
e6:5f:87:ab:98:cc:63:6d:fc:b2:ad:1e:04:12:e8:e6:a4:97:
73:e0:5a:50:ad:af:29:1b:15:5f:56:a1:94:a7:ef:a3:86:c6:
73:3c:63:2b:1a:48:9e:63:bb:b7:0d:ef:4c:fc:df:37:dc:76:
d3:03:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:51:06 2026 by rpki-client