Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e2039333138.roa
File: 3231372e3231372e3232332e302f32342d3234203d3e2039333138.roa (raw, json)
Hash identifier: yb1narHGHIOxCo8melPaWqgCApJY7fpJ16jNAm0oUUA=
Subject key identifier: E1:D7:2A:93:AB:C1:CE:AA:1A:9D:30:46:61:EE:D0:58:FA:48:BA:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 580DA4F4925D933A0CC26EA7087E4A3D55C6F8B4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e2039333138.roa
Signing time: Wed 04 Feb 2026 15:24:37 +0000
ROA not before: Wed 04 Feb 2026 15:19:37 +0000
ROA not after: Wed 03 Feb 2027 15:24:37 +0000
asID: 9318
IP address blocks: 217.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0d:a4:f4:92:5d:93:3a:0c:c2:6e:a7:08:7e:4a:3d:55:c6:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 4 15:19:37 2026 GMT
Not After : Feb 3 15:24:37 2027 GMT
Subject: CN=E1D72A93ABC1CEAA1A9D304661EED058FA48BAAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:43:ab:c7:94:f7:cd:33:58:f6:14:e2:79:
d3:15:18:01:56:0d:a9:13:cb:b7:9a:35:bf:71:b9:
5f:74:49:ae:75:a3:4d:47:25:2d:be:87:50:20:5a:
cc:7f:74:e2:a7:3e:24:a3:83:a0:01:4e:f1:9e:0c:
24:c2:c6:12:61:e6:2c:2e:08:be:ea:a4:56:39:0b:
87:aa:f0:60:10:ea:28:8b:05:16:ec:fd:73:8b:d2:
aa:d3:57:fc:42:15:3e:36:b8:0c:c2:ff:05:24:bb:
ff:4d:39:5e:fd:f2:64:a1:be:b8:95:81:15:19:e0:
d2:36:7c:3a:be:82:3c:be:a8:6a:b4:23:bd:2c:44:
64:2f:a6:7d:2e:e8:c8:4f:62:62:4d:26:86:6e:ab:
48:bd:ca:78:b6:db:fb:a1:be:64:ff:9f:6d:e8:85:
dc:48:39:21:0c:03:0c:86:52:b9:0b:53:45:6b:eb:
43:65:f6:40:a5:c7:5c:fc:7b:fd:40:bc:2e:5f:76:
cb:08:31:f8:b4:4a:c1:d6:46:d2:90:d8:47:1e:c7:
2a:de:bb:e3:ac:33:52:a4:23:81:9e:61:c8:15:5b:
17:e1:32:02:cc:82:11:1a:24:73:46:46:a7:18:72:
21:98:a4:29:8e:99:b0:ef:d4:72:eb:7b:ef:1e:9e:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:2A:93:AB:C1:CE:AA:1A:9D:30:46:61:EE:D0:58:FA:48:BA:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e2039333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
63:16:04:3c:a6:c9:e3:09:f3:2b:0c:8d:9f:49:98:e2:56:a6:
c3:46:a3:ff:55:f7:e9:cf:1a:32:99:5a:ae:1c:7e:be:8d:df:
19:06:5c:1e:19:71:6e:db:fb:8a:62:ef:5f:48:f6:32:bf:1f:
00:c8:67:c3:48:40:dc:a7:ef:ab:54:b0:23:84:cd:fc:a2:32:
c2:c0:dc:fd:99:a2:56:0a:5f:5c:a4:5c:08:e6:16:32:2b:2b:
a9:50:46:3d:1b:90:fe:b8:44:46:11:1f:80:35:b6:ad:96:e2:
3d:d7:90:55:d6:92:9d:97:e7:9b:b4:59:25:cc:55:b3:db:e0:
02:83:8a:65:26:7c:7b:93:a8:ff:d5:a5:39:4b:ca:76:0f:f2:
9a:d2:71:5b:f2:7b:8d:e9:e1:87:d5:c5:bc:36:ed:30:c5:c5:
d6:f0:66:cf:1f:a4:17:30:64:c3:7a:0c:3b:d8:58:aa:ca:82:
93:31:51:58:97:0a:63:f1:9c:a9:ab:38:c0:41:94:a7:12:53:
b0:d9:4d:d9:d0:d5:49:a4:7a:8d:29:65:4d:01:07:b3:00:a9:
e7:01:4e:bc:39:ab:6f:39:8d:6d:3a:c0:d2:e4:1d:1b:9d:09:
dc:7b:8f:ae:72:8d:c7:f4:f3:d5:da:6a:ec:cf:92:46:fb:14:
a0:97:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:01 2026 by rpki-client