Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132382e302f32322d3234203d3e203133333335.roa
File: 3231372e3231372e3132382e302f32322d3234203d3e203133333335.roa (raw, json)
Hash identifier: fuvGhMqY+pZqx56wVwUpL5YyxP0LyS+nCw0u6i1oolQ=
Subject key identifier: A9:83:CA:69:41:F0:F1:33:46:CE:7B:95:26:3F:EE:C1:11:63:E3:F4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58272DBF8AC34E7E7DA6CA186BCC3B3C4117DA81
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132382e302f32322d3234203d3e203133333335.roa
Signing time: Tue 12 May 2026 11:06:07 +0000
ROA not before: Tue 12 May 2026 11:01:07 +0000
ROA not after: Tue 11 May 2027 11:06:07 +0000
asID: 13335
IP address blocks: 217.217.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:27:2d:bf:8a:c3:4e:7e:7d:a6:ca:18:6b:cc:3b:3c:41:17:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 11:01:07 2026 GMT
Not After : May 11 11:06:07 2027 GMT
Subject: CN=A983CA6941F0F13346CE7B95263FEEC11163E3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:08:86:d5:cf:b4:a1:43:c9:6d:2d:94:08:
3e:15:4b:55:ae:43:e1:32:d3:7a:88:32:76:5b:18:
8c:32:b1:b6:a2:fa:e2:9f:5d:d4:c2:8a:c5:fd:35:
9b:94:1d:8a:ff:d5:63:4f:06:5e:f2:4c:af:b5:3f:
89:1a:e4:c1:9d:12:6e:e7:df:7f:3b:a0:0f:12:4e:
92:e1:b6:75:ab:0c:b2:f6:df:1f:43:3a:63:b7:b4:
9c:c4:9c:f9:cd:ab:f2:dc:ba:1a:e6:39:41:90:6c:
52:9b:7b:2b:77:80:2e:55:d6:40:51:c4:9f:7e:69:
94:49:2d:87:78:b7:06:ee:5a:61:9e:42:34:50:ff:
05:46:7c:95:12:3b:fb:77:2c:a0:06:f7:5a:64:40:
83:0e:68:5f:50:c4:94:3d:be:9a:c2:03:1e:11:b4:
54:db:21:60:71:df:0a:e7:de:d5:10:5f:7e:17:f9:
c2:44:fa:6a:22:6a:1e:4c:40:3e:60:23:e6:5e:a2:
66:d4:5b:7d:f6:4c:f9:e8:92:57:e9:a8:32:59:97:
d1:22:2e:ba:29:24:4b:86:6e:47:88:d9:16:3b:d4:
b7:fa:ad:78:dd:e5:7a:1a:06:ec:b9:4e:d7:47:7b:
a9:84:65:bb:ad:aa:61:de:8e:03:fe:e3:a0:c0:66:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:83:CA:69:41:F0:F1:33:46:CE:7B:95:26:3F:EE:C1:11:63:E3:F4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132382e302f32322d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.128.0/22
Signature Algorithm: sha256WithRSAEncryption
48:2c:d7:8d:e1:f1:67:43:af:fa:84:2e:4e:60:79:1d:d4:2c:
1f:69:63:ed:4b:bb:44:80:96:a6:ec:8d:45:76:a2:ec:15:10:
5e:fc:bd:42:99:88:4a:cb:97:6b:49:9f:c1:23:58:c2:f2:f1:
e8:b8:b0:04:71:d3:07:ed:31:cd:cc:3f:9e:26:88:3f:b3:e7:
74:85:32:95:09:43:6e:12:02:52:cd:19:b6:eb:32:90:fe:3a:
e1:76:0f:98:0f:87:4d:18:2e:f9:d0:9c:13:58:17:10:31:37:
28:75:78:6b:a6:66:23:d6:aa:8b:1b:1b:ec:f8:a3:e7:6f:7c:
f6:17:da:7e:b9:9e:96:b2:22:3b:01:ea:1b:e3:d5:0b:35:20:
7e:09:a2:62:1c:43:d5:cf:20:53:ca:d3:5f:2a:c3:db:9b:9b:
64:48:cf:d0:00:d8:27:50:31:78:11:5b:5b:20:f2:2b:58:1c:
a0:37:c7:a1:b7:e3:d1:93:62:5f:17:78:2d:a8:2b:77:f2:82:
fe:61:6b:c7:1b:56:c6:33:38:42:6a:02:b1:f0:56:20:64:5d:
b1:4a:8d:6a:1b:1c:a8:1c:d1:3d:d5:80:59:14:20:45:16:d9:
af:5a:b7:cb:4b:93:10:4c:1c:09:09:85:54:dd:72:17:96:c4:
f5:5f:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:35 2026 by rpki-client