Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233362e302f32322d3234203d3e20323136323533.roa
File: 3231372e3231372e3233362e302f32322d3234203d3e20323136323533.roa (raw, json)
Hash identifier: BgyQk99B1wXuM4B2rTdjeVrtCR+zZMiTLrsDZD0VTYg=
Subject key identifier: DF:98:61:EA:55:5E:CD:4C:EB:FE:C1:7B:FF:BD:C3:AF:B0:FA:34:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12A722767695947B3C390D92BDEC373C94314848
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233362e302f32322d3234203d3e20323136323533.roa
Signing time: Fri 11 Sep 2026 19:34:08 +0000
ROA not before: Fri 11 Sep 2026 19:29:08 +0000
ROA not after: Fri 10 Sep 2027 19:34:08 +0000
asID: 216253
IP address blocks: 217.217.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a7:22:76:76:95:94:7b:3c:39:0d:92:bd:ec:37:3c:94:31:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 11 19:29:08 2026 GMT
Not After : Sep 10 19:34:08 2027 GMT
Subject: CN=DF9861EA555ECD4CEBFEC17BFFBDC3AFB0FA340E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:bd:89:76:20:7a:a2:d5:33:fd:5a:f9:97:
e2:b2:ab:88:75:59:c2:74:d9:24:d6:f3:30:c0:02:
58:8a:06:db:17:46:f2:57:ff:b6:6f:d6:51:d5:fa:
f2:f7:66:8c:f4:60:0b:f1:cc:34:4e:41:76:86:66:
3e:e2:22:fa:0a:98:bc:b6:69:3e:fd:5f:19:db:96:
68:34:8a:5b:e8:74:86:0f:3d:06:c6:c8:f4:b6:cc:
90:a6:bf:4c:e6:68:0e:05:19:ae:f6:a4:7b:65:3c:
e2:8b:32:fb:46:6a:8c:f2:7f:79:34:47:34:91:d3:
c6:6b:92:ec:48:ed:28:5e:02:74:49:41:9e:a7:c9:
49:98:c3:e9:1b:e8:5d:c1:a6:00:03:05:cf:d5:ea:
24:d1:ce:44:3d:67:b9:39:12:32:8c:3e:10:2a:ca:
1b:f5:ab:b2:d3:b7:be:49:2f:61:dd:0a:8d:d5:00:
c9:9f:f8:4a:b5:03:45:78:9e:cb:70:42:d2:a8:89:
14:9d:57:6d:1f:9a:41:70:34:f2:d0:6f:38:e1:c5:
63:61:1a:35:14:02:c7:ba:9b:68:f6:ba:0e:a9:57:
33:65:15:f2:a0:ab:04:4c:f9:11:90:4d:83:72:8d:
31:62:d2:c8:7f:fa:f3:fd:31:23:85:b9:7d:55:79:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:61:EA:55:5E:CD:4C:EB:FE:C1:7B:FF:BD:C3:AF:B0:FA:34:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233362e302f32322d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.236.0/22
Signature Algorithm: sha256WithRSAEncryption
47:8e:c4:a8:98:f6:e9:3b:52:a3:c7:5e:85:22:3f:00:50:14:
a9:86:2d:81:c6:30:d6:52:83:78:74:7c:32:e2:65:98:3d:8e:
ce:97:13:40:ef:60:1c:e8:fb:b0:64:13:e5:43:9f:11:02:c9:
42:c8:1b:65:0c:b8:a0:90:d4:f0:26:26:20:e2:72:f2:e8:56:
e3:36:e8:ef:ee:4c:70:88:d4:4e:77:ae:de:da:5f:f4:64:69:
e6:09:1e:67:e4:7a:f5:1a:24:5e:e9:c3:7c:f7:81:58:2c:70:
cc:a1:7a:eb:77:ac:c5:fc:43:c4:b4:8d:4a:f2:ee:8e:f4:db:
90:ba:a4:8c:66:39:45:9c:02:9f:c6:5e:ae:63:fb:9f:ca:03:
49:33:34:b0:6b:ab:52:91:13:98:47:84:10:3a:44:08:17:18:
11:86:6f:b9:cd:db:a9:c9:2f:0f:cc:16:79:7d:07:52:db:3a:
5e:ff:e6:b3:0c:12:e9:cf:c2:db:5e:a5:93:ff:e7:fc:aa:d2:
1f:9f:da:89:ee:82:98:0b:19:74:17:ef:84:a0:c7:64:53:12:
92:69:f5:b0:7a:d0:71:02:1a:2c:0b:55:e1:9f:48:09:b8:d3:
65:1b:72:09:b0:7e:95:61:7d:65:66:7d:22:17:17:9f:96:df:
09:81:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:33 2026 by rpki-client