Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231322e302f32342d3234203d3e20343031333232.roa
File: 3231372e3231362e3231322e302f32342d3234203d3e20343031333232.roa (raw, json)
Hash identifier: eRGnNAf+mTTJ358NVXMm9xXclg4qSkTsedJGGbEzgBM=
Subject key identifier: 2E:67:0C:0B:6B:69:06:90:D0:8D:72:80:F1:B6:6B:49:61:7B:0C:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6999545D45B1C46795C24BB607F6CA42EE364D50
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231322e302f32342d3234203d3e20343031333232.roa
Signing time: Tue 28 Apr 2026 12:16:06 +0000
ROA not before: Tue 28 Apr 2026 12:11:06 +0000
ROA not after: Tue 27 Apr 2027 12:16:06 +0000
asID: 401322
IP address blocks: 217.216.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:99:54:5d:45:b1:c4:67:95:c2:4b:b6:07:f6:ca:42:ee:36:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 28 12:11:06 2026 GMT
Not After : Apr 27 12:16:06 2027 GMT
Subject: CN=2E670C0B6B690690D08D7280F1B66B49617B0C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:b2:ae:9a:ab:53:6f:4a:f2:13:bd:ce:68:
f4:eb:24:7d:8a:23:78:ac:3c:1a:37:25:6a:fb:c4:
21:a9:54:77:1d:fb:7e:4c:cf:58:c5:d8:ab:89:1e:
5e:88:c9:d2:f7:95:43:a0:e7:69:e1:0b:76:d7:ee:
b0:4e:c0:b6:89:00:ed:df:ea:95:89:f8:27:58:08:
1b:35:93:ec:a0:64:65:68:73:7f:a0:9f:92:f4:eb:
b5:f8:b8:dc:ea:c7:86:7d:cc:29:d7:b7:00:c6:43:
53:98:c4:9e:44:23:6f:fa:d7:9b:0a:bc:fe:11:f4:
ef:d0:79:59:eb:56:24:28:f1:9b:3e:ef:32:9d:ce:
59:27:e4:55:81:db:2a:12:b3:d5:1a:4b:00:b2:3a:
9b:28:2c:96:52:24:fa:58:f1:93:e5:99:c8:28:52:
1a:6e:e0:3f:a5:d7:12:2f:3c:ed:67:14:c9:ab:8f:
d7:f4:7f:31:6a:50:36:4d:49:a4:70:62:ce:e0:96:
4f:ec:ee:41:74:ab:79:53:f5:13:ce:58:ca:28:57:
1d:ce:52:55:18:d4:a4:db:53:ea:63:e7:59:23:f6:
c0:64:45:64:c5:47:f3:80:0d:fd:d2:30:cc:a6:8c:
5c:90:fb:b3:3c:2a:e3:49:7c:d6:ba:98:6f:e4:20:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:0C:0B:6B:69:06:90:D0:8D:72:80:F1:B6:6B:49:61:7B:0C:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231322e302f32342d3234203d3e20343031333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d5:25:c7:b9:0e:0f:82:a2:35:23:06:59:54:5b:67:c5:1f:
04:d7:db:02:0e:f4:28:94:94:92:b8:f2:51:10:c1:2f:e1:13:
b7:6f:ed:e6:42:c8:cf:db:cc:60:73:0c:ca:ea:a8:89:c4:fe:
5b:12:e8:d4:0b:3f:9d:37:bc:1a:77:da:dc:ee:ad:a4:0d:72:
d0:ec:21:57:39:e5:63:a4:60:01:9b:f2:91:fb:a9:cd:ec:bf:
9d:2f:1e:87:92:16:9c:5c:89:a4:cf:7c:a7:f5:ed:74:1b:a2:
bb:6a:b7:f4:58:a9:25:34:95:00:3a:6e:57:7a:a8:36:2a:9d:
b9:30:07:b7:34:ea:3e:c6:c6:22:42:08:67:19:84:5b:00:5e:
26:25:8a:ba:f3:04:ca:92:f3:25:c8:ab:70:5c:83:34:bc:bc:
2f:04:59:f7:a9:46:d6:83:28:56:cf:fa:dc:c1:16:9c:18:dc:
6d:a3:40:41:a5:31:38:a1:ca:de:a2:c1:27:2b:6b:f4:c7:b2:
92:0f:af:c2:2a:f4:f7:7b:d2:b6:cf:5a:62:51:6d:27:d3:02:
5e:f9:31:bd:ba:fb:a4:a4:f2:73:63:29:42:47:2e:ba:8e:23:
96:38:b9:21:0e:f4:c7:7c:0e:5b:a2:be:d5:d3:b4:af:64:d6:
5b:af:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:52 2026 by rpki-client