Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e20313532313739.roa
File: 3231372e3231372e3231322e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: UqfQf9WFVnqYyyyNSWT1xDLVzX3sqDiKtB2P6KPZpmA=
Subject key identifier: C6:A8:08:AC:90:80:DF:13:D2:BF:AE:1F:7C:D8:D6:89:EB:9E:B9:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 254371909A6DBF51DB2D482C46C81396022CE8E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e20313532313739.roa
Signing time: Tue 28 Jul 2026 12:37:15 +0000
ROA not before: Tue 28 Jul 2026 12:32:15 +0000
ROA not after: Tue 27 Jul 2027 12:37:15 +0000
asID: 152179
IP address blocks: 217.217.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:43:71:90:9a:6d:bf:51:db:2d:48:2c:46:c8:13:96:02:2c:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 12:32:15 2026 GMT
Not After : Jul 27 12:37:15 2027 GMT
Subject: CN=C6A808AC9080DF13D2BFAE1F7CD8D689EB9EB9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:39:6a:a5:ee:f1:04:07:dc:8e:63:71:11:
b8:f3:03:54:d8:03:e9:92:29:e5:47:53:eb:0e:42:
dd:47:88:b6:43:27:bb:fe:86:bb:f9:5e:7e:5b:1b:
f7:31:ce:6d:d2:0a:37:83:8c:b5:04:34:3c:ca:63:
c0:b4:53:5d:55:26:06:c3:56:d7:05:c8:3d:48:41:
51:1d:5b:4f:ca:f8:c4:89:aa:c1:73:85:57:8e:c1:
2b:ae:c0:ed:67:54:75:a2:81:b2:fc:43:d4:50:18:
39:a8:6b:e8:b0:ea:bc:c9:54:d8:1a:50:51:99:19:
4c:40:4d:84:c3:27:4f:11:6e:4c:cc:b5:47:10:5f:
54:88:56:6c:04:15:b7:17:64:33:75:21:7d:e9:9a:
51:24:d8:22:d4:1e:7d:f6:8b:00:d6:bf:cf:04:39:
02:91:e2:ce:1a:be:e0:68:cc:88:8e:f8:07:57:03:
e5:f4:e5:1a:5a:0b:ac:7a:a8:0b:68:39:03:9f:a4:
54:4c:2e:ef:f3:cd:aa:45:bf:04:79:f3:af:8d:58:
e9:87:f2:18:7d:de:06:b9:62:b8:86:59:dc:32:77:
45:b9:64:7b:86:a6:0e:96:af:3e:72:b4:49:b2:8f:
5e:f5:5e:be:c4:17:56:6f:10:c2:76:c9:92:65:79:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:08:AC:90:80:DF:13:D2:BF:AE:1F:7C:D8:D6:89:EB:9E:B9:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.212.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9f:e8:d0:9a:40:4c:81:85:6b:10:fa:f9:ee:ef:2d:89:58:
e5:35:fa:58:93:67:e5:79:12:ea:f9:c1:6e:f5:85:82:51:5f:
de:21:fb:fb:25:14:4c:43:c0:7c:f0:73:f5:03:35:8d:79:06:
08:51:6f:a2:05:17:87:56:1c:cd:48:89:0c:b6:68:62:ae:1d:
9f:39:eb:6e:df:b5:08:72:55:f0:5d:cf:a5:ca:c7:2e:77:a3:
98:1e:7d:fe:f5:cd:7b:c0:1f:f1:5b:db:3e:8d:07:07:87:01:
46:61:7e:8b:08:46:42:4d:2a:93:74:6c:68:fa:d5:69:90:05:
ef:c9:d3:7d:cd:bf:69:76:7f:65:7d:20:b2:2d:61:ef:c5:89:
f3:78:42:5d:11:e2:7b:71:c6:75:b5:18:8d:28:03:a8:35:a6:
ee:ad:7c:b4:ab:2f:2a:c5:5a:1f:8e:9f:85:a5:a5:3b:a4:56:
1d:a5:76:3c:cc:ed:41:a3:d9:2b:52:2d:9d:9b:00:c7:2b:73:
ad:2d:27:f9:c0:c8:ac:e4:66:c5:de:71:4c:a7:93:bf:88:a3:
e8:fb:86:74:88:1e:24:4e:9b:2d:1d:fd:51:3c:96:67:2a:1b:
85:56:75:04:e2:1e:f0:3d:40:8a:5c:d7:25:f0:ee:77:d0:18:
9a:c4:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:44 2026 by rpki-client