Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e2037323839.roa
File: 3231372e3231372e3231342e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: Sd+UvkvL0rkIZ6oebJB3oG7ApDTYyrbxvF0Wb5JS4Qk=
Subject key identifier: 79:83:8A:0D:01:00:BE:8C:BC:B7:97:34:F9:AC:68:8D:B8:4A:5B:0B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 294B26813C44480FC0F8FAF15CDE0A78920304E6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e2037323839.roa
Signing time: Tue 28 Jul 2026 12:37:19 +0000
ROA not before: Tue 28 Jul 2026 12:32:19 +0000
ROA not after: Tue 27 Jul 2027 12:37:19 +0000
asID: 7289
IP address blocks: 217.217.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4b:26:81:3c:44:48:0f:c0:f8:fa:f1:5c:de:0a:78:92:03:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 12:32:19 2026 GMT
Not After : Jul 27 12:37:19 2027 GMT
Subject: CN=79838A0D0100BE8CBCB79734F9AC688DB84A5B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:c0:61:28:47:f8:1f:d9:e7:a5:33:d7:9b:
cd:2c:90:d8:a5:26:3d:02:03:77:85:78:e9:a6:56:
5a:93:89:00:5f:19:1b:83:e9:2d:fd:2e:45:f2:98:
73:3e:f2:41:b1:9d:0b:b7:83:db:9d:8f:63:1d:80:
d9:e2:52:80:61:69:0c:50:03:85:24:db:58:54:b4:
8f:f9:8a:01:48:e7:e5:ab:60:83:29:3d:ee:58:a4:
81:63:be:1b:45:4d:6b:e7:ce:83:7d:9c:a3:16:da:
69:52:96:af:4e:bc:6e:d7:b5:93:2e:1b:b7:b3:d7:
02:f1:b6:ad:92:57:43:1c:84:ee:b3:81:d2:ae:4e:
dc:b9:b6:5e:24:e1:6a:d6:82:ab:e9:1a:8b:1c:43:
ad:67:5f:51:19:ca:33:35:fd:7d:a1:c2:68:01:81:
5f:1e:9c:eb:1c:b1:3f:92:3a:70:51:fe:3d:f7:66:
ac:b8:c6:bc:4d:c2:03:74:2c:dd:e0:e9:0f:9d:2c:
e6:77:66:e6:2b:f4:ad:2e:bc:20:fa:e4:17:e2:98:
ca:72:7f:10:3f:a6:7e:be:25:79:6c:ac:57:20:8f:
0a:bc:5c:ad:19:4e:ea:14:16:c0:52:3b:80:72:c1:
9e:94:c8:79:e5:c5:eb:0b:39:ad:b3:a5:45:96:af:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:8A:0D:01:00:BE:8C:BC:B7:97:34:F9:AC:68:8D:B8:4A:5B:0B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.214.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e9:59:b4:61:15:b6:28:0d:9a:7b:ff:67:ac:d9:13:69:da:
50:dc:ed:83:f9:4f:ec:39:dd:39:81:4e:5e:a0:69:ed:16:5f:
e5:c0:88:85:a5:34:c4:dc:ba:b8:1b:c2:44:6f:3b:ee:c9:33:
0e:7e:f4:77:7a:bc:9b:d4:45:f1:40:18:88:dd:27:4f:b4:87:
6b:f7:81:a4:f9:70:a9:c5:61:45:e9:8d:1e:11:58:f5:78:1b:
69:28:09:46:41:9b:96:f9:e6:b7:de:20:7e:7d:6f:f5:47:2f:
37:27:dd:49:8d:f8:7c:c0:14:4c:69:4e:52:af:e2:6b:18:81:
7d:62:6d:87:d9:e2:c9:ed:91:29:28:45:4e:04:a0:31:f5:f7:
18:89:53:d9:3e:99:b0:11:61:d0:b6:8a:06:17:ff:6a:15:92:
58:f9:24:21:22:67:c3:e4:d9:92:a8:20:d3:e5:a5:64:db:83:
50:f2:a6:53:f4:72:d2:59:74:af:ac:02:48:6c:22:64:fc:32:
b3:6f:fb:c5:65:f0:61:45:fb:44:1e:f6:1e:da:b6:ed:06:3b:
3b:ca:da:28:eb:84:e0:8a:da:4f:52:ec:cd:8c:27:30:ba:d7:
6a:ee:ae:55:02:46:68:64:d0:fb:3d:23:c5:f5:80:c7:18:17:
b7:af:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:19 2026 by rpki-client