Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20313532313739.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: LrgoUTgVWc2+WMs3z7FTbjeem0P2GFnve3AHaFAL0xo=
Subject key identifier: 8C:8E:B7:86:BA:51:40:71:53:E3:D9:04:5E:5E:AF:F1:C2:9F:9C:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 363408CB8DDDC0C1DA9FFC9A83FDFFFC67CF3C18
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20313532313739.roa
Signing time: Tue 28 Jul 2026 12:37:06 +0000
ROA not before: Tue 28 Jul 2026 12:32:06 +0000
ROA not after: Tue 27 Jul 2027 12:37:06 +0000
asID: 152179
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:34:08:cb:8d:dd:c0:c1:da:9f:fc:9a:83:fd:ff:fc:67:cf:3c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 12:32:06 2026 GMT
Not After : Jul 27 12:37:06 2027 GMT
Subject: CN=8C8EB786BA51407153E3D9045E5EAFF1C29F9C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:b7:28:86:8b:fe:43:4d:83:6e:3c:81:97:
6b:47:84:35:7f:4a:09:fa:85:0f:52:42:0b:dc:46:
d7:c3:ff:c1:3f:ef:a6:c9:cd:be:45:89:8b:a3:ea:
22:ce:5e:a3:b1:ff:8d:f0:fa:d9:2f:52:37:9c:c9:
05:fd:f1:4b:58:82:4d:b8:e7:41:d7:70:73:d1:ff:
f4:91:c1:7b:02:52:17:fa:58:f2:a7:92:8b:06:89:
e3:12:bd:1f:b3:3a:6e:b7:e4:fb:80:a6:5b:ec:28:
9a:63:b0:8c:2d:cc:e0:73:87:40:d4:48:b2:f1:08:
2e:96:65:8f:40:d7:8c:74:d0:5e:d8:03:db:aa:91:
a4:ea:8a:a2:40:3c:45:34:c7:b0:10:9d:76:86:7c:
d8:c0:bd:84:7f:33:0f:a9:c2:cf:25:1f:3b:1d:7b:
87:fb:b9:41:1c:bb:53:de:a3:6e:77:b0:e5:b1:e7:
76:6b:16:e7:99:01:87:4d:4d:21:b8:fe:37:fb:db:
68:ad:67:b8:2f:f1:d0:3d:51:00:a7:e6:f3:26:ca:
9b:8e:70:18:9b:7e:d1:7c:40:45:c1:08:f0:8e:d0:
00:c8:01:a8:2a:88:d8:22:7e:dc:67:c5:95:80:8e:
6a:06:7b:14:c6:fd:c3:51:72:d4:91:42:8d:75:f5:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:B7:86:BA:51:40:71:53:E3:D9:04:5E:5E:AF:F1:C2:9F:9C:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:72:34:2d:68:a0:69:27:b1:4a:6b:2d:68:e2:98:d2:d2:9f:
66:46:15:f4:2a:23:87:71:35:37:a4:d5:54:20:86:26:a2:60:
62:96:65:7a:0a:3f:2a:6b:58:a5:3c:4b:b0:f3:66:ca:d6:1b:
5e:5d:29:1b:eb:71:e5:92:d7:05:cb:61:64:3f:62:87:f4:08:
73:f3:eb:fe:b2:55:5d:af:da:02:67:6a:7a:3e:b9:0b:2b:ac:
d1:e1:26:70:5a:a2:54:e0:dc:a7:c3:49:88:ac:ac:b9:6a:a0:
c3:1b:b6:d9:97:1b:cc:f3:d4:7b:6b:7c:8b:3b:b6:e0:68:57:
21:ba:76:88:87:98:26:fe:c6:c6:34:65:56:22:93:f0:c2:be:
bb:8f:18:6e:ab:4f:f1:d6:80:bb:2e:75:18:d4:fc:bc:40:eb:
bd:bd:6f:a3:d6:0b:bb:39:3a:aa:ea:39:1d:5e:82:2c:23:ed:
f8:8e:b8:54:77:77:ca:4f:38:8b:f9:01:45:25:09:28:9a:e3:
cc:7e:4f:c6:58:84:5d:62:d2:b8:f6:b6:3b:d9:2e:a6:a6:33:
82:1b:d9:48:22:45:d0:69:af:17:07:80:c5:ba:01:31:17:29:
80:90:44:79:d8:53:4f:51:cd:47:50:26:c4:8d:3f:da:1a:93:
8d:13:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:00 2026 by rpki-client