Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e2039333034.roa
File: 3231372e3231372e3231342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: LBwOXccyTRHU4o+yqUQCY95ifZQryaC7coFOKrZzOc4=
Subject key identifier: 48:04:95:67:0D:0D:BB:36:02:D6:3E:85:D4:D1:5C:63:A6:B3:EF:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79E98AE888608E1BC35743EF94B0EE4E3604BD29
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 08:06:56 +0000
ROA not before: Tue 08 Sep 2026 08:01:56 +0000
ROA not after: Tue 07 Sep 2027 08:06:56 +0000
asID: 9304
IP address blocks: 217.217.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e9:8a:e8:88:60:8e:1b:c3:57:43:ef:94:b0:ee:4e:36:04:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 8 08:01:56 2026 GMT
Not After : Sep 7 08:06:56 2027 GMT
Subject: CN=480495670D0DBB3602D63E85D4D15C63A6B3EF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:4b:c4:96:9f:cf:2d:c9:05:48:33:d0:fc:
ca:b7:cc:e7:35:c1:f4:07:cf:43:16:d5:22:8f:4d:
32:b3:59:00:48:8a:e9:fb:bc:61:d0:67:82:ea:50:
30:75:06:c4:df:79:f3:2c:4a:72:91:fc:cd:c0:43:
90:e3:27:14:66:fa:bb:fb:da:30:6a:b2:55:f6:de:
47:db:0f:bd:2e:2b:82:38:45:89:08:65:5d:cc:98:
57:4d:bf:1b:35:4a:a6:99:29:f6:5f:d2:da:0f:a3:
30:a6:a5:8a:0a:42:0c:f2:9e:53:17:83:64:58:84:
a2:1b:1f:07:4c:88:91:95:7e:23:6e:ac:46:23:80:
8c:37:32:ba:a6:88:a6:78:79:62:6e:f4:c3:f5:d0:
0f:7d:87:d1:15:9b:91:f8:21:30:92:ac:1b:37:e7:
e0:04:c4:28:e9:9c:10:aa:01:b6:cf:d7:94:96:07:
d7:81:37:67:a8:06:01:7e:6f:87:a5:81:62:ae:cc:
d4:10:b7:02:4a:06:d7:b0:97:07:ba:8b:1c:58:4c:
e4:62:2f:46:37:7a:23:ca:5a:bd:25:59:b5:64:be:
38:2f:91:6e:c2:5b:bb:4b:fe:1a:83:a7:9a:be:98:
0c:02:44:6e:29:e9:13:67:89:4f:fd:6d:b5:2e:8b:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:95:67:0D:0D:BB:36:02:D6:3E:85:D4:D1:5C:63:A6:B3:EF:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.214.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5a:0b:a6:75:bf:e7:ff:e9:48:05:0b:5f:0f:a2:fe:bb:50:
66:c3:db:d0:d4:5f:bb:7f:7b:e2:0c:45:a6:0d:6f:3d:c8:25:
c2:d5:79:34:02:c2:2b:f6:fb:23:b8:95:e0:5a:92:84:df:b8:
c0:70:5b:99:4b:fe:1d:53:e7:8a:f0:0b:04:c1:f9:90:b3:f3:
c3:34:f7:fd:19:29:1b:a3:a9:3d:75:f8:a4:b1:be:09:48:e9:
af:e6:2f:7d:2c:bf:5a:a4:7c:bf:12:32:39:0b:51:0b:ce:2c:
03:ae:3d:db:84:f0:87:2e:90:90:1d:16:77:46:d0:9e:21:e8:
19:ff:57:c7:12:2a:49:15:a6:2e:17:b9:06:88:12:c3:32:fc:
a9:d4:87:44:46:4a:38:b3:37:2d:da:17:50:71:e3:47:79:9f:
67:1f:3a:71:73:5d:ac:44:48:af:de:77:ac:d1:1d:81:d8:49:
bf:ea:47:4a:36:62:fd:5b:95:aa:11:88:61:ed:de:99:3f:38:
bd:c2:32:c6:7f:b9:a5:7c:42:ac:67:cd:ed:31:40:23:94:2e:
80:63:c8:5e:ae:a1:1c:9f:81:b8:68:63:43:fe:7d:76:47:80:
26:70:30:2f:68:bc:0d:bb:2b:41:30:3b:46:7b:f1:fe:1f:ec:
28:4e:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:35 2026 by rpki-client