Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230392e302f32342d3234203d3e20323037333433.roa
File: 3231372e3231372e3230392e302f32342d3234203d3e20323037333433.roa (raw, json)
Hash identifier: j7SGi+GvkK4ZtJLfey8UNFuAJHT0iqKyC/NU51EBN8A=
Subject key identifier: C9:5E:D7:C7:FB:32:A3:DD:28:85:40:D5:6C:17:F7:E1:00:1F:02:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A2B200F592F41C920C835D6B3E1339F8C4E7E42
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230392e302f32342d3234203d3e20323037333433.roa
Signing time: Mon 27 Jul 2026 10:35:40 +0000
ROA not before: Mon 27 Jul 2026 10:30:40 +0000
ROA not after: Mon 26 Jul 2027 10:35:40 +0000
asID: 207343
IP address blocks: 217.217.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2b:20:0f:59:2f:41:c9:20:c8:35:d6:b3:e1:33:9f:8c:4e:7e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 27 10:30:40 2026 GMT
Not After : Jul 26 10:35:40 2027 GMT
Subject: CN=C95ED7C7FB32A3DD288540D56C17F7E1001F02EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:0e:e2:a2:e2:1b:59:eb:28:41:7f:48:f1:
b6:40:d1:03:39:81:cc:16:ab:a7:1b:bf:ec:79:a9:
d1:0c:d3:0a:ae:d1:a0:bd:3f:ab:67:34:a9:fb:7a:
55:9e:a7:f6:76:9e:bf:68:32:51:45:ed:5b:f9:ae:
de:73:f9:6a:99:91:60:48:23:e0:00:94:34:37:6d:
86:72:7c:39:3e:0e:0b:d0:e4:24:51:fb:58:ad:d8:
1a:00:ca:f7:f2:7d:40:22:f0:ad:c7:a8:96:5f:b9:
bb:36:d5:74:8c:9f:21:94:f3:34:ca:85:4f:bf:a3:
5d:44:17:b3:60:34:a0:a3:d7:7b:dc:39:72:88:91:
ae:19:a6:b4:aa:b0:f0:b4:23:f6:c6:b6:ec:02:44:
ff:3b:fe:e1:79:0d:74:cb:6f:67:e0:85:5a:30:ad:
08:19:5d:75:26:ed:79:7c:7e:12:58:98:1f:7c:c0:
bb:be:92:eb:91:33:39:ef:ad:12:c2:f6:54:42:42:
04:ea:2e:c0:34:dd:5e:f5:0f:67:8a:fe:62:37:8e:
4f:88:6e:2f:d5:ac:17:f2:25:c1:65:ae:1e:8b:63:
a0:f8:2e:0d:f3:11:2a:61:11:8e:87:f8:05:30:d9:
03:c1:07:a0:a7:9a:01:f6:8d:8d:59:86:35:d8:3e:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:D7:C7:FB:32:A3:DD:28:85:40:D5:6C:17:F7:E1:00:1F:02:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230392e302f32342d3234203d3e20323037333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.209.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c1:db:a0:fa:c7:60:1f:4f:64:ff:8a:66:af:e3:70:9b:08:
8e:45:67:57:90:ae:48:56:4c:4e:90:92:bc:60:e6:c3:43:bb:
3a:8f:b6:a1:22:e7:bf:99:fb:4f:41:39:d1:9e:bd:f6:8c:fc:
e2:9f:2b:20:f7:db:7b:4c:f1:9c:00:e7:03:63:a4:8b:59:80:
13:c7:2a:7f:b6:0d:10:16:7f:da:47:39:41:b6:c9:c7:fd:30:
12:ff:a9:b8:8c:c3:9d:fb:1f:7c:32:db:cf:7b:7a:f4:2c:2f:
c3:54:6f:51:30:b9:42:5e:d5:b0:2e:4c:0d:1f:6a:02:af:43:
1b:e5:85:14:4f:b3:70:7d:8f:d3:a9:7b:e9:c1:df:b7:0b:d7:
68:73:1a:d3:38:05:99:7d:70:12:87:20:50:79:6b:1d:fd:38:
41:5d:5b:39:94:58:31:ca:fc:6b:dc:28:7f:7b:d7:56:7c:87:
b5:a5:1c:19:7c:ab:c0:90:45:0f:3c:10:d0:d6:d8:ee:60:b7:
ef:6a:f3:3f:bd:5e:d5:b9:7b:9d:7a:c0:73:28:7f:8c:88:f6:
2f:38:48:09:03:17:f8:b1:e7:b1:9b:15:50:2b:cc:1f:8e:b3:
df:3f:98:f0:18:34:84:18:12:ad:6b:37:22:d8:8e:f2:17:6e:
45:3a:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:45 2026 by rpki-client