Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e2037323839.roa
File: 3231372e3231372e3231322e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: Cdg60F1rKOHdxqL/eBNAGuMIb2FUyoHeawxxxmcI6ts=
Subject key identifier: 31:A5:90:B7:18:B7:76:79:24:54:41:B3:95:99:A5:F2:74:AB:6D:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15431E33484AE9DDEEA3D551669599B47052C9D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e2037323839.roa
Signing time: Tue 28 Jul 2026 12:37:16 +0000
ROA not before: Tue 28 Jul 2026 12:32:16 +0000
ROA not after: Tue 27 Jul 2027 12:37:16 +0000
asID: 7289
IP address blocks: 217.217.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:43:1e:33:48:4a:e9:dd:ee:a3:d5:51:66:95:99:b4:70:52:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 12:32:16 2026 GMT
Not After : Jul 27 12:37:16 2027 GMT
Subject: CN=31A590B718B77679245441B39599A5F274AB6DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:95:a9:47:e4:d0:b9:ec:3e:e5:fb:41:f9:
1d:a3:11:b8:6f:40:a0:c2:58:6f:e6:3a:d2:5f:0b:
e3:84:05:02:b9:90:d6:b4:f3:03:28:8e:80:77:58:
e9:18:8b:35:f7:56:ec:2e:6d:31:57:b3:10:6d:3a:
42:4e:19:59:cf:92:2f:3e:cb:6c:d3:92:7a:82:77:
66:27:83:de:01:4a:f8:6d:d2:85:1a:81:88:2b:cd:
41:db:0a:21:0a:dd:62:ff:b4:1e:f9:b8:69:1a:98:
0f:c3:7f:54:9e:8a:ad:26:b2:1b:02:a2:b4:6b:7d:
54:94:5d:ec:b7:e2:8d:76:97:0b:e2:13:73:a4:08:
88:c8:73:ff:29:18:d5:f2:6e:10:d4:17:f3:5a:a7:
d1:60:5d:e8:55:0e:de:17:90:86:a3:09:9a:a4:7d:
54:93:90:60:50:ce:fa:da:59:62:9e:ff:99:28:05:
dc:ac:03:aa:47:92:d6:84:36:46:24:f8:74:99:4e:
27:73:7f:1f:1b:43:59:c4:6c:8e:14:2a:c2:4c:e3:
a6:33:f0:f9:07:a2:ab:e2:a5:d5:c0:35:64:7b:95:
89:93:06:0d:f5:2f:e2:76:61:25:ad:4b:57:48:86:
21:42:8d:d9:54:da:23:01:a3:a0:d3:28:e0:57:32:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:90:B7:18:B7:76:79:24:54:41:B3:95:99:A5:F2:74:AB:6D:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231322e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.212.0/24
Signature Algorithm: sha256WithRSAEncryption
74:59:45:72:cd:b9:a2:b9:65:f6:54:b3:90:55:48:7b:1b:7a:
fa:f7:3d:0e:0a:4a:66:84:3b:6e:3e:82:ba:28:25:2c:15:11:
e6:5b:92:48:09:c2:ff:88:23:f8:0e:2b:41:6b:7c:8e:e2:6b:
b7:7e:36:26:79:74:3b:50:74:56:0e:4a:e9:b4:85:3d:79:a5:
18:e8:89:eb:f0:58:1e:7d:10:0f:bf:6a:e1:54:64:84:b1:94:
8c:b2:4b:a8:1d:17:8e:07:b3:d8:6c:6c:e3:19:2a:15:dc:c8:
f4:0c:6b:26:cd:13:74:58:8e:03:5e:eb:8d:15:93:66:0d:8d:
6d:0b:bc:d3:6a:e6:ae:4f:c5:81:57:b2:38:a9:1e:a4:b0:bc:
da:52:4a:5e:01:00:d7:34:97:19:f7:3e:24:78:af:cf:dc:d1:
8c:6b:79:b0:bb:63:8c:7d:4c:9f:f0:7e:cd:c9:81:21:6b:0c:
2c:ee:24:4c:f3:93:29:94:27:7c:77:c1:e0:1a:ff:75:16:dd:
26:aa:f2:40:b8:b8:b0:87:a9:85:ad:3f:47:fa:43:88:44:16:
63:39:6b:66:be:36:7e:27:54:55:ef:42:b5:73:99:d7:a6:fd:
c8:f3:3a:b4:0a:f5:0a:2b:ff:d9:19:15:67:9b:db:9f:44:9f:
16:c4:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:05 2026 by rpki-client