Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e2037323839.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: 3S9hAgVIUbtzS2C+zh9uoLcZWYEHEodoMtvvd7NLtFc=
Subject key identifier: F0:25:3B:11:8E:A1:FB:55:65:90:03:2D:FB:24:26:36:18:C1:61:35
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 11B4BD9927E5679669A5CDB42EDF3D6D0C27DA80
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e2037323839.roa
Signing time: Tue 28 Jul 2026 12:37:09 +0000
ROA not before: Tue 28 Jul 2026 12:32:09 +0000
ROA not after: Tue 27 Jul 2027 12:37:09 +0000
asID: 7289
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b4:bd:99:27:e5:67:96:69:a5:cd:b4:2e:df:3d:6d:0c:27:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 12:32:09 2026 GMT
Not After : Jul 27 12:37:09 2027 GMT
Subject: CN=F0253B118EA1FB556590032DFB24263618C16135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:ed:6f:61:1e:63:c5:74:11:94:b3:4e:4b:
ce:9a:f3:59:a6:b4:07:54:9f:21:d4:84:25:8b:05:
be:c4:8a:c2:74:a0:3a:0e:9b:7d:67:58:da:1b:c9:
f2:20:d6:fd:8a:d2:da:75:3c:29:fb:0a:c7:56:70:
1f:57:aa:c2:27:a9:1b:88:ce:6f:79:65:8a:9e:cf:
c1:4f:f6:f9:12:dd:68:ab:d4:8c:cb:4c:54:2b:97:
70:9e:4b:cc:f9:36:a6:6a:e7:c0:a7:e0:7f:a8:7a:
8d:7f:d1:25:db:d1:5a:f0:73:8f:d0:58:92:22:e2:
2a:35:60:2b:7f:2b:af:6d:80:6b:5a:90:54:b5:2c:
fb:6f:e4:d4:34:07:67:63:ad:7c:34:72:3d:78:7b:
d1:8e:9f:11:33:da:4c:2c:88:89:88:6e:a6:ce:d1:
8c:7a:ef:d4:f9:dd:c7:33:a0:f9:d0:17:fc:91:2a:
99:76:48:72:4b:ac:25:ef:04:9c:70:fb:72:f5:2a:
6e:9b:89:ef:c4:f6:15:21:35:40:f7:a5:31:0a:2d:
cc:8a:4b:61:5e:12:06:0b:8f:96:c9:63:88:bf:88:
79:85:66:94:be:d4:44:d3:ab:5c:86:ca:c7:37:f7:
a1:70:69:6e:2e:58:ec:9c:70:3b:4c:69:5b:88:cc:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:3B:11:8E:A1:FB:55:65:90:03:2D:FB:24:26:36:18:C1:61:35
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cd:b7:99:17:40:41:ba:ac:95:9f:4d:f4:b1:c6:5b:4c:42:
fd:ed:6c:a5:a3:84:aa:7a:d2:11:f2:9b:f9:a3:c6:d7:9b:27:
4f:78:42:ba:45:c8:c5:39:d9:ce:76:d1:ef:78:cf:b6:a4:56:
b6:b6:8d:93:aa:ee:62:fe:74:b0:b5:ef:e0:a3:b9:fc:24:88:
a7:81:20:d0:50:64:98:03:3c:1c:5b:ff:12:4c:f8:aa:60:e2:
27:be:07:88:d9:ff:e7:3b:4d:52:12:bf:b1:81:c1:b3:8d:30:
28:b4:23:b0:aa:24:0a:66:4a:11:83:e3:e3:a6:b6:9b:a8:a2:
58:c5:82:40:65:f0:64:cf:e3:e4:52:fc:4c:50:8c:3b:8b:8d:
8c:af:06:66:c0:d8:0a:30:27:f0:cb:b1:6f:32:56:bc:d0:d7:
20:bb:19:a8:c6:5a:5a:71:63:ba:66:a7:93:4d:82:a8:c8:58:
66:5b:3b:45:c9:53:ea:f9:68:e2:d3:71:f4:36:f6:b2:93:d4:
b6:f0:81:19:c0:36:dc:a9:ca:b9:7a:ce:8f:0a:ab:31:31:94:
01:2b:24:84:c0:4d:70:17:c4:69:ee:af:77:f7:fd:f1:85:09:
b5:c9:94:35:43:aa:52:1e:d0:94:2a:e0:42:cc:4c:40:68:33:
17:2f:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:32 2026 by rpki-client