Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230392e302f32342d3234203d3e20313432323430.roa
File: 3231372e3231362e3230392e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: eY7Mk0K7rT50zpbFK29omzZX3rKasS/Eu9wXR2/JJJE=
Subject key identifier: 6F:CE:6A:6E:F8:F0:AA:C7:42:A9:E9:FD:B9:6C:C6:45:75:B2:B7:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6848C7C9E644FCE94E138276D9E58836E58C2056
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230392e302f32342d3234203d3e20313432323430.roa
Signing time: Mon 27 Apr 2026 08:35:15 +0000
ROA not before: Mon 27 Apr 2026 08:30:15 +0000
ROA not after: Mon 26 Apr 2027 08:35:15 +0000
asID: 142240
IP address blocks: 217.216.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:48:c7:c9:e6:44:fc:e9:4e:13:82:76:d9:e5:88:36:e5:8c:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 27 08:30:15 2026 GMT
Not After : Apr 26 08:35:15 2027 GMT
Subject: CN=6FCE6A6EF8F0AAC742A9E9FDB96CC64575B2B7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:91:4d:e9:1a:28:33:38:f6:77:02:e3:c5:
22:5f:27:82:d4:01:3e:88:da:0d:98:98:ae:c7:fa:
e5:cc:cf:03:16:04:41:52:bf:43:1f:69:7b:98:ea:
18:f3:8c:b2:2b:e9:bd:c9:cf:bb:4f:d2:ef:7f:37:
37:b7:07:5e:e6:b4:57:96:65:f5:c1:ee:dc:85:83:
a4:42:6b:6e:6f:4d:19:da:85:5b:2e:9f:2d:6a:92:
a7:31:67:c3:c0:84:99:3f:e3:72:75:7a:82:3b:6e:
6b:16:bd:c9:32:b3:bf:2f:5a:b8:10:90:8a:38:ac:
4a:fe:2d:75:a2:ff:14:1b:24:fb:dc:4a:ab:48:8f:
99:f0:53:8f:ba:5e:4d:cd:e6:d9:54:3b:fe:83:11:
29:b7:67:86:d6:f7:53:4b:22:13:95:3e:2f:4a:68:
68:bb:85:06:49:52:19:be:0d:92:df:be:02:e9:4d:
f1:bc:e5:3f:8e:f0:b3:c4:6c:ec:95:84:46:eb:4b:
57:80:69:62:59:31:e5:4d:cf:ef:d9:99:68:91:e6:
81:4e:c7:a8:17:88:9d:64:9d:bb:db:5e:7f:1f:dd:
83:33:3b:8e:e1:81:c0:00:51:77:d2:f4:c6:d9:42:
4e:4d:d4:e7:0e:53:41:8f:66:68:1c:80:86:b6:f5:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:6A:6E:F8:F0:AA:C7:42:A9:E9:FD:B9:6C:C6:45:75:B2:B7:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230392e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f6:75:e8:c0:b5:0d:36:8b:24:52:88:16:77:bc:16:85:99:
6d:aa:3d:cd:c1:43:1a:cf:d4:ab:e2:26:8c:83:cc:d0:8d:7f:
02:a8:02:68:83:d8:c4:69:79:a4:58:75:b4:eb:d8:9b:c5:48:
36:00:e5:46:dc:db:ea:d5:21:14:9a:07:cc:c1:9c:70:a1:58:
55:97:f5:f8:d2:b3:8f:af:66:83:6e:34:8b:cd:fd:17:23:83:
bf:35:a6:73:6f:4c:63:84:b1:15:ff:11:50:f7:19:70:7f:9b:
b5:84:27:6e:90:ce:9e:d7:ef:c6:f3:60:bd:80:6a:f2:82:bb:
12:68:6e:a9:1e:c5:1c:c0:76:18:68:24:3c:ea:ca:4f:cb:21:
d4:f8:d4:f2:b5:e0:64:03:d4:8f:bf:78:8d:20:ab:27:67:73:
b1:1f:5a:c7:01:44:56:52:c3:99:f4:c7:df:90:2c:10:68:4a:
f8:b9:e5:bb:fb:35:cc:54:40:21:39:f7:66:cd:de:fb:ea:a7:
9e:e5:73:33:df:14:d7:77:44:94:22:65:c9:4a:7e:88:1c:ea:
10:96:f4:fb:22:34:55:dd:3c:54:be:cf:aa:f9:01:9f:62:41:
7e:0e:ed:b1:ae:f8:5e:44:ab:2d:95:84:88:a8:74:b8:0d:5d:
1a:0f:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:00 2026 by rpki-client