Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Dk9WBoBh3oL8WiAKjfS9cl/jVLIUvKctwyfaCLBsHps=
Subject key identifier: 66:0B:75:D0:A3:FA:9F:6C:4B:A7:34:AE:CE:04:B3:A3:B6:8D:DF:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1EF8E8C68F25C2EF9684DA693DEC4B0D76BDED95
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Mar 2026 21:01:43 +0000
ROA not before: Mon 23 Mar 2026 20:56:43 +0000
ROA not after: Mon 22 Mar 2027 21:01:43 +0000
asID: 834
IP address blocks: 217.216.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f8:e8:c6:8f:25:c2:ef:96:84:da:69:3d:ec:4b:0d:76:bd:ed:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 23 20:56:43 2026 GMT
Not After : Mar 22 21:01:43 2027 GMT
Subject: CN=660B75D0A3FA9F6C4BA734AECE04B3A3B68DDF3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:39:64:a3:7c:de:76:50:c1:30:a8:50:68:
48:57:58:42:90:87:5a:b4:ff:08:5e:84:ff:d9:44:
dd:bf:89:e1:ee:51:30:40:7f:64:b0:16:32:3f:0c:
52:88:99:70:1f:3c:d9:4e:d4:1c:14:d9:66:ad:f7:
68:0b:bf:43:4f:8a:a2:8b:3b:47:73:d8:ca:20:55:
33:e5:ed:18:ff:c9:b3:54:51:84:23:48:e9:6d:30:
0a:0f:81:64:2c:23:9b:af:fc:8e:01:cb:92:47:c7:
1b:94:5f:88:7d:7a:f5:6f:62:e4:9a:aa:ab:3b:cb:
24:32:37:14:1c:1c:9b:23:aa:9a:62:6e:f6:ba:2e:
82:ff:6c:f0:a6:c4:9e:89:06:f1:21:2a:db:1b:63:
4a:a5:db:de:f1:d0:9d:58:16:0e:b2:3e:1f:94:36:
3a:9c:da:b4:7c:7c:95:d7:9b:c3:32:62:ca:be:77:
73:0d:6d:05:ca:63:7e:fe:e8:61:77:af:09:71:cc:
b9:40:0c:ce:83:a5:1b:f6:e0:9e:a7:f0:14:8c:ab:
3b:eb:a6:52:45:94:3f:0a:a1:72:73:ea:b3:f8:0c:
8e:8c:51:14:39:85:c7:f0:f7:74:b0:50:56:a4:7b:
71:ca:a0:b6:01:5c:77:c5:9f:3c:a4:0e:33:15:81:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:75:D0:A3:FA:9F:6C:4B:A7:34:AE:CE:04:B3:A3:B6:8D:DF:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.202.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6b:c6:0f:e0:e9:41:49:aa:87:f1:42:1e:5a:5c:8f:0c:1b:
98:56:56:1a:af:0f:db:20:15:ee:28:86:86:b1:c0:29:49:a0:
56:2e:b1:b0:4c:78:21:fd:48:22:03:9d:3d:24:b5:8d:13:8a:
87:c2:29:90:e0:da:fc:cb:c6:8a:fc:95:f7:02:c5:a2:94:00:
49:75:16:6f:d9:c1:88:a0:5a:0a:1e:74:eb:fb:00:a1:af:a4:
79:ac:48:2c:25:95:7c:e3:51:95:c9:de:70:68:96:4e:7f:cb:
d7:ac:e6:00:43:cf:18:8b:68:b2:c8:54:f9:de:fb:d6:b8:dd:
ac:da:75:29:52:ef:57:38:9f:3d:ca:03:e3:42:e4:38:03:4e:
97:fc:8d:69:95:34:e1:21:9f:d9:21:04:0a:33:2a:bf:1d:66:
35:af:4a:b6:ce:75:d4:01:43:c4:84:ff:cf:32:f1:2c:ea:a1:
22:a6:57:b7:96:b7:5a:7b:54:68:4b:81:11:5b:52:f3:2f:36:
fd:38:2e:8b:30:a5:5f:d6:fd:24:3e:e9:10:b8:bc:c0:41:be:
49:01:0a:e6:97:2a:47:e6:88:40:70:8d:81:31:a3:4e:a4:a8:
ae:a4:21:dd:1c:c6:78:6e:cc:a6:a8:fd:04:a4:db:2e:64:d4:
ef:cd:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:06 2026 by rpki-client