Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e302e302f32322d3232203d3e20323132393830.roa
File: 3231372e3231372e302e302f32322d3232203d3e20323132393830.roa (raw, json)
Hash identifier: UJGVyu4vT1sbEoaa4wKe7Sv8aJd1ir9/j7tB4oMFU6Y=
Subject key identifier: A9:4B:44:0F:A7:AE:99:72:87:D1:55:BD:FB:D4:4D:D8:F2:70:A9:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DCC399673FA498E5388DD75CE8BA3CC0A82E1C4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e302e302f32322d3232203d3e20323132393830.roa
Signing time: Fri 01 May 2026 15:49:10 +0000
ROA not before: Fri 01 May 2026 15:44:10 +0000
ROA not after: Fri 30 Apr 2027 15:49:10 +0000
asID: 212980
IP address blocks: 217.217.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cc:39:96:73:fa:49:8e:53:88:dd:75:ce:8b:a3:cc:0a:82:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 15:44:10 2026 GMT
Not After : Apr 30 15:49:10 2027 GMT
Subject: CN=A94B440FA7AE997287D155BDFBD44DD8F270A93F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:99:86:8a:85:39:e6:94:46:42:d9:1f:f9:
77:1b:2f:ab:3a:25:31:ab:14:08:a1:59:79:4f:93:
da:07:55:4c:b4:61:67:5a:82:2a:ef:e6:c7:4e:bf:
54:61:70:78:e2:e1:de:10:af:2f:18:18:d7:d9:db:
b9:0f:a3:be:d5:41:a3:2b:78:6d:0d:e4:8b:43:01:
16:fe:2e:14:b5:00:d5:c8:20:82:8f:00:b5:f4:6d:
6e:8a:7e:54:1c:85:6f:61:e9:75:1b:91:60:69:f3:
c1:d3:50:b3:c0:86:3c:f0:8c:49:14:ed:58:0c:db:
48:cb:20:c1:f5:1e:1e:20:46:63:97:43:a5:9e:4c:
55:e5:41:42:0d:44:79:a9:3f:a5:29:5e:c5:3d:3c:
aa:fb:51:f6:72:82:b0:e5:6a:60:58:86:6e:31:45:
41:3d:f8:64:c3:01:26:75:09:c6:0f:cf:e0:dd:15:
ba:a6:ed:cb:0a:05:d3:69:80:35:98:17:b8:1f:95:
55:4d:d9:08:92:52:1c:0d:fc:ae:12:52:ca:69:84:
e7:46:c9:f4:a4:dd:12:50:27:d1:65:46:6c:fe:6c:
45:57:d2:b3:1f:f7:e0:9e:ad:b0:54:45:cd:db:c0:
a1:a6:63:0a:7f:42:55:b7:e2:5c:9d:99:3c:fa:7a:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:44:0F:A7:AE:99:72:87:D1:55:BD:FB:D4:4D:D8:F2:70:A9:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e302e302f32322d3232203d3e20323132393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:02:1c:8c:69:f4:13:4b:52:fa:56:f0:25:24:4a:eb:2f:c1:
a0:e1:a3:36:f7:c1:04:38:72:75:5c:6d:6f:0f:17:19:3f:3e:
7d:12:58:54:40:5c:8d:f4:0b:72:91:f3:82:13:c8:a9:18:5c:
cd:b6:db:d5:89:40:6e:d0:a2:6f:34:15:b4:85:ec:a0:64:c3:
64:5a:06:89:81:df:6c:16:fa:64:68:e9:4d:96:22:8c:7f:6c:
97:c6:e0:0e:42:07:5a:74:9c:91:dc:79:ad:eb:1f:85:2e:62:
c1:cb:f3:fb:59:2c:df:dc:a7:00:06:ac:17:a0:58:1d:51:67:
11:c3:0e:52:9b:5b:e6:5f:22:a5:29:b9:e5:9e:a1:e9:6b:98:
98:09:d1:74:1d:f0:ff:bd:11:4d:5e:ab:ee:9a:06:ee:c5:30:
10:3c:56:44:29:32:36:76:ea:d6:75:3b:66:7e:27:11:58:aa:
f3:f8:d2:cf:c2:d8:8e:61:2e:e7:5c:51:d5:61:9a:53:47:52:
19:74:da:1b:d0:d7:a6:62:59:c0:25:a1:0a:a2:15:98:58:9b:
d2:13:4b:86:a4:c2:94:58:6a:79:c9:25:03:9b:ee:70:81:50:
64:65:29:d1:e8:7a:e9:a5:3a:80:e2:4e:32:c4:36:ed:87:5a:
04:87:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:39 2026 by rpki-client