Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138302e302f32322d3232203d3e20323133363037.roa
File: 3231372e3231362e3138302e302f32322d3232203d3e20323133363037.roa (raw, json)
Hash identifier: HXuIOIrRqyLSsywlWgGx+JIEQffaQ5EE9uTBDMDnAsI=
Subject key identifier: 38:20:7C:79:9A:1F:A9:D0:C3:19:42:F2:D7:2D:34:3E:61:7C:8C:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0170F9665C26A6CE723701D3B38FD9F9F1FC97F8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138302e302f32322d3232203d3e20323133363037.roa
Signing time: Sat 12 Sep 2026 10:28:52 +0000
ROA not before: Sat 12 Sep 2026 10:23:52 +0000
ROA not after: Sat 11 Sep 2027 10:28:52 +0000
asID: 213607
IP address blocks: 217.216.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:70:f9:66:5c:26:a6:ce:72:37:01:d3:b3:8f:d9:f9:f1:fc:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 12 10:23:52 2026 GMT
Not After : Sep 11 10:28:52 2027 GMT
Subject: CN=38207C799A1FA9D0C31942F2D72D343E617C8CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:4b:e7:5f:c0:f0:77:10:69:3d:c9:f3:e4:
b9:a8:53:8b:a8:6b:f9:e5:ca:b0:a7:fc:79:e6:54:
9c:b2:ff:67:d7:a4:8e:db:e3:0a:c8:50:e7:f6:5e:
24:7e:34:a8:61:b3:b9:9f:07:d6:8f:7f:72:d9:b3:
68:33:3a:77:b0:a0:31:74:1f:15:ec:88:b7:09:25:
66:28:71:af:11:17:14:aa:48:5e:58:03:83:ad:c0:
81:cd:96:d5:ee:76:77:89:fa:4a:6c:2f:73:30:cd:
fe:eb:48:50:0d:cb:c3:f3:69:2a:bb:56:57:24:1d:
a4:71:4c:e2:ed:8c:aa:eb:ce:ea:e2:56:b5:4d:05:
53:b7:4d:65:99:9a:78:a3:10:25:6a:a2:30:22:b8:
9e:d5:6c:ce:88:d7:46:08:9d:8a:ce:2a:54:95:56:
4e:92:be:09:47:4b:72:27:d4:4c:67:db:f4:22:26:
43:3b:72:7f:43:e7:2f:d5:6f:03:b7:72:90:9b:d7:
d6:47:71:49:60:8f:02:79:5e:db:55:5a:ec:c8:4f:
f8:6f:ba:cb:c3:ee:f3:d5:21:42:43:e7:8d:0d:ea:
62:ac:b1:53:29:82:b5:dd:30:0f:a3:77:a5:15:fd:
12:74:22:75:48:87:b1:f9:de:d8:50:55:11:e9:cf:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:20:7C:79:9A:1F:A9:D0:C3:19:42:F2:D7:2D:34:3E:61:7C:8C:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138302e302f32322d3232203d3e20323133363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.180.0/22
Signature Algorithm: sha256WithRSAEncryption
35:fc:92:e8:d4:1a:9b:d6:59:1b:f1:f2:1e:ff:9f:f2:4b:c6:
f8:ef:29:c8:e8:e0:d3:8a:14:8e:96:48:8f:20:45:80:e4:40:
c3:30:97:c1:7d:fc:51:cd:24:d0:94:43:38:0a:9c:03:f4:3b:
fc:4f:81:8f:01:63:09:b6:15:7a:9c:67:38:09:b8:59:26:73:
76:b5:9d:9f:24:d5:55:91:56:99:44:9e:8e:69:06:41:16:10:
4c:b6:b1:78:b1:76:02:f2:c4:b9:c9:5e:f3:38:7e:55:02:52:
e6:ee:5e:48:c1:0a:99:c6:08:cb:d5:f4:4c:cb:3b:59:8b:05:
07:8c:0c:7a:2e:96:b7:e3:54:3f:41:13:07:d5:a8:53:9a:e2:
8b:7f:00:58:d9:7a:56:1a:88:44:15:28:fe:e5:50:59:80:0a:
a4:1e:ad:d6:76:60:55:3c:96:40:e8:30:2a:3c:fc:e6:14:97:
ad:87:bf:79:04:2a:4c:a8:70:f0:82:73:2f:88:76:f8:40:52:
d1:08:8d:5f:81:f7:6f:a0:11:07:9a:a9:7a:38:e4:ce:f0:03:
92:64:63:99:c9:1f:2e:de:d6:11:62:15:83:e3:4a:96:a1:23:
17:1c:d8:85:d3:7e:dc:aa:1e:6e:2a:9d:52:d8:47:3a:9b:79:
9d:f0:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:20:22 2026 by rpki-client