Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230392e302f32342d3234203d3e2039333034.roa
File: 3231372e3231372e3230392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 3OV0bpnxjb3bl4njpPuGPo+JUr3HfjASOVdrPr10/sA=
Subject key identifier: 97:06:9A:40:68:94:71:A2:55:21:0C:84:8B:2F:DA:4E:26:58:D4:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25D8AD8E5BB440A330F980C0E745E092455D9ACE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230392e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 08:06:51 +0000
ROA not before: Tue 08 Sep 2026 08:01:51 +0000
ROA not after: Tue 07 Sep 2027 08:06:51 +0000
asID: 9304
IP address blocks: 217.217.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d8:ad:8e:5b:b4:40:a3:30:f9:80:c0:e7:45:e0:92:45:5d:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 8 08:01:51 2026 GMT
Not After : Sep 7 08:06:51 2027 GMT
Subject: CN=97069A40689471A255210C848B2FDA4E2658D497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:67:0c:f3:ff:5f:12:f0:78:33:e7:03:93:
6d:83:ba:60:2c:96:8b:0b:db:9a:8f:2c:40:44:69:
de:f3:dd:0c:0f:2b:88:de:7c:cc:d1:ca:35:77:b6:
67:52:05:af:d1:3e:d5:74:57:2a:ed:3c:f4:c4:4c:
1f:a3:4e:0d:21:bb:35:35:54:ba:54:65:d3:b5:8e:
d5:b7:2c:d5:c3:ed:ed:68:e6:e6:be:5d:1a:3d:13:
ff:19:ef:87:af:c7:72:ff:7e:a9:ae:46:3d:6e:1b:
79:75:ba:ea:41:21:03:2e:32:d2:15:c7:4b:b6:d2:
cc:7b:a7:ad:31:41:2b:b5:6e:79:6b:fc:2a:85:be:
71:92:59:a5:ca:55:ca:06:3b:9a:4d:d7:f1:f4:dc:
a0:23:06:eb:2b:a8:2b:49:16:69:15:96:47:f0:78:
71:ad:68:65:ad:1b:93:71:98:77:3c:25:db:78:88:
3d:b4:49:41:c9:94:5e:5d:3b:0e:8f:17:e1:43:94:
4c:03:00:37:c1:f2:0c:05:69:4e:86:44:1f:dc:22:
b7:83:58:38:80:4c:4b:b0:e1:ff:81:1b:4f:cb:e1:
7d:62:81:5d:89:f3:a6:8c:0b:44:ca:0a:b4:bc:00:
5a:92:ae:c0:75:fb:f1:49:74:43:0b:ad:82:f2:55:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:06:9A:40:68:94:71:A2:55:21:0C:84:8B:2F:DA:4E:26:58:D4:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230392e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.209.0/24
Signature Algorithm: sha256WithRSAEncryption
62:37:ac:6d:ea:78:62:cf:b7:9c:c6:35:e2:dd:a8:8a:14:27:
aa:91:2d:4c:d6:b9:f8:ab:d7:9a:fb:9f:00:2a:43:08:0d:c5:
a8:76:37:69:96:61:12:6e:56:dd:fe:eb:79:e3:cb:dc:d5:cd:
b1:08:ef:5c:f5:81:7b:8f:81:5e:88:69:60:50:35:1c:35:28:
a0:50:a0:e8:05:fa:39:68:6f:1a:d8:32:a7:33:e9:37:4b:29:
58:11:12:92:42:ae:d6:25:f0:4c:a3:6f:d9:cf:42:52:75:c6:
ca:ab:9e:38:4e:92:ef:f4:08:a6:2d:94:88:cf:08:67:a2:b1:
4f:6e:2b:c0:ae:62:35:d7:26:4a:d8:39:67:da:e6:92:89:fb:
b8:3d:68:93:57:3c:2c:d9:9e:bf:03:0c:81:5a:fb:c3:dc:da:
0e:5e:fd:d2:b2:a4:78:ef:e0:18:d5:2d:e1:7e:ea:78:8d:4f:
b8:5b:a4:8f:2f:d9:f6:26:e6:23:6d:26:e7:44:16:88:b0:d6:
ac:aa:c7:5c:e6:e3:3a:4f:ae:b4:76:0e:15:80:52:c8:2b:33:
cd:6e:fa:f8:80:4a:b6:03:5d:78:44:80:95:cc:01:cf:8d:a6:
3a:29:42:0a:84:b2:2d:7f:fb:3a:d5:17:ef:8a:7a:ac:47:6f:
41:bb:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:03 2026 by rpki-client