Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139342e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0UzcEkN+mVUuKgZUF6im3WZp8qVq+kFgPh6VCjxKARI=
Subject key identifier: F2:21:04:06:39:15:4D:2F:EB:43:C5:91:AE:B1:09:6B:17:4C:3E:B7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DC9C634BBACE4FDB9F3DEA7F27AFD2A73EC3B55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139342e302f32342d3234203d3e20383334.roa
Signing time: Mon 04 May 2026 09:51:51 +0000
ROA not before: Mon 04 May 2026 09:46:51 +0000
ROA not after: Mon 03 May 2027 09:51:51 +0000
asID: 834
IP address blocks: 217.216.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c9:c6:34:bb:ac:e4:fd:b9:f3:de:a7:f2:7a:fd:2a:73:ec:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 4 09:46:51 2026 GMT
Not After : May 3 09:51:51 2027 GMT
Subject: CN=F221040639154D2FEB43C591AEB1096B174C3EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:ca:42:da:f7:8f:01:32:14:dd:2f:09:03:
6c:1b:a7:9c:42:6a:5d:f9:4f:09:89:be:a1:54:91:
f0:46:b0:aa:7e:73:f3:8d:31:97:19:c9:bf:52:4e:
4b:fe:ee:97:e3:10:80:51:a9:8c:62:3e:e2:34:c9:
33:7c:3d:bf:8c:a0:03:7e:05:a4:a7:bc:52:c1:b8:
4e:41:74:98:f7:43:f0:3d:9c:8b:8d:bb:76:42:7a:
bc:39:89:17:45:68:68:15:3f:1e:c2:5b:e7:4f:20:
7f:fa:02:07:f7:24:61:0a:59:6f:01:9d:3f:ca:0d:
7a:19:ed:31:ab:12:8f:10:41:62:86:7b:80:a7:70:
f8:05:c6:3a:c9:8c:ee:39:52:11:ae:fa:b4:85:f7:
fe:e7:72:da:69:7f:4d:15:59:43:b2:c5:6e:62:f8:
3e:84:7b:5c:7c:4e:57:60:c4:94:a8:81:0e:15:6b:
5b:6b:43:d4:8b:f2:14:5e:d5:44:61:af:0b:05:78:
3d:7b:4c:4d:4a:4d:76:6e:25:38:8d:d0:c3:0d:9f:
34:14:ab:de:5a:a9:5d:56:a5:22:6f:90:4e:2a:24:
5a:6f:d2:54:da:20:84:5d:84:84:c7:60:02:c7:b8:
75:af:75:ca:2a:c9:c7:90:e4:18:ce:3a:9d:32:b6:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:21:04:06:39:15:4D:2F:EB:43:C5:91:AE:B1:09:6B:17:4C:3E:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f4:92:39:51:52:3d:24:3a:bc:a6:01:85:98:24:32:e4:c7:
54:da:4e:e7:d2:38:e6:ac:54:ac:39:3e:5f:f8:5a:a4:de:ad:
2d:98:15:cb:ac:ca:4d:f5:72:2a:17:69:4b:8f:45:a6:1f:37:
13:b1:ad:f8:8f:77:03:bf:15:b2:11:49:9c:0e:cf:cb:f9:fc:
1e:f0:0c:19:89:3b:24:9a:b9:fc:c7:21:d7:1b:fb:7f:14:df:
2f:33:b1:b7:9b:b3:fa:31:c8:f3:29:8b:41:ef:f4:57:54:44:
e7:3e:54:8c:9e:5d:a3:b5:ca:00:41:b7:57:51:d5:95:bf:a6:
0c:15:94:53:21:1b:41:70:70:2f:00:ad:37:12:58:40:b1:c5:
60:5b:53:bb:e6:27:2b:b3:e0:a7:3a:ca:36:45:42:b5:b3:51:
29:d9:f0:c9:90:98:aa:0c:69:b6:24:ab:d8:25:26:ec:10:2d:
22:79:4c:ca:d5:ef:91:8a:7a:06:5a:28:60:dd:e8:e5:a2:46:
9d:75:28:cc:e3:21:ed:f4:31:8d:05:c2:e3:93:c7:cc:4c:98:
e4:61:4a:1f:80:12:6b:22:7e:2d:e6:b2:bd:e3:fe:91:c2:87:
02:f9:d6:fb:3b:71:45:c6:5f:ba:82:d3:0c:b1:28:a5:1f:e4:
15:f7:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:24 2026 by rpki-client