Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2036303739.roa
File: 3231372e3231372e31362e302f32322d3234203d3e2036303739.roa (raw, json)
Hash identifier: AQaj2cY6NqsnnY52F0e7MngphfPuYsq9sjvmJ0a6/iU=
Subject key identifier: 57:D4:FA:0C:E1:5C:9E:03:BB:C1:1F:5E:90:BF:78:4C:CF:36:32:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1693E116C1168F1C98A503CA71E4BBF8D4C26A21
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2036303739.roa
Signing time: Mon 27 Apr 2026 08:19:45 +0000
ROA not before: Mon 27 Apr 2026 08:14:45 +0000
ROA not after: Mon 26 Apr 2027 08:19:45 +0000
asID: 6079
IP address blocks: 217.217.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:93:e1:16:c1:16:8f:1c:98:a5:03:ca:71:e4:bb:f8:d4:c2:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 27 08:14:45 2026 GMT
Not After : Apr 26 08:19:45 2027 GMT
Subject: CN=57D4FA0CE15C9E03BBC11F5E90BF784CCF363261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:9e:48:49:c9:e1:8c:76:ce:60:00:b8:9e:
52:31:69:0c:e1:5e:71:0b:da:7e:53:1d:20:b3:2e:
ff:9f:64:88:7f:bb:a5:07:f9:78:67:da:e5:7f:92:
3b:64:1d:0a:3a:d4:cd:f8:f3:08:0a:59:91:58:7a:
97:78:64:7e:34:7a:da:62:25:ed:bd:86:6f:0f:13:
42:16:88:64:8c:4f:11:18:8d:55:25:4e:67:8f:0e:
34:2e:4f:68:ab:b3:ce:34:18:00:a8:9a:a8:42:4d:
0d:62:e7:86:a8:ca:23:b3:ee:68:11:56:23:95:7c:
d6:b9:8a:1a:83:2b:d7:e9:a3:c0:a7:33:84:0d:2b:
fd:45:49:c0:f0:8d:09:64:37:8f:b7:19:f6:4e:12:
67:19:68:82:55:02:62:f9:0f:52:ec:01:86:3c:40:
92:1c:85:14:88:d3:ae:07:ab:5d:68:05:25:1d:79:
6e:d6:09:4a:f8:56:67:26:39:46:9c:a7:b9:a5:ea:
18:25:8e:63:f3:4d:ae:6d:c3:68:8a:92:c0:a3:95:
0c:f2:1f:70:a5:7a:94:8e:76:15:eb:27:68:3f:49:
c8:10:17:2e:39:66:24:74:64:4c:ac:18:77:20:d3:
4d:a2:f0:2d:23:b8:5d:9b:07:f6:97:e7:b4:74:9a:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:FA:0C:E1:5C:9E:03:BB:C1:1F:5E:90:BF:78:4C:CF:36:32:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.16.0/22
Signature Algorithm: sha256WithRSAEncryption
49:3e:08:9b:a8:b3:24:02:32:85:3e:f4:7c:26:56:3d:0f:f8:
0a:49:94:88:61:5b:3e:55:eb:c6:9b:09:42:fa:bb:c7:ec:21:
9e:a4:7a:21:d9:f9:49:94:b0:ea:33:31:51:2e:1d:cb:34:68:
05:93:a1:08:ef:81:84:0f:79:73:b3:c3:89:09:0a:03:45:7d:
4a:54:5a:0e:1a:fe:e9:ac:56:8d:ee:96:5a:56:67:b5:55:40:
32:49:26:48:a6:13:e0:38:ed:53:af:bd:5f:10:35:56:d4:cc:
ee:34:ad:77:2d:82:18:49:80:d9:41:1f:f5:23:ea:4e:76:ea:
5a:ec:f0:c5:ae:e9:9c:78:7b:04:6c:b1:0a:d1:8e:1d:2c:b8:
ac:48:d3:f9:b5:51:64:84:8a:66:87:c4:6f:13:41:19:a7:a3:
dc:b2:eb:f5:d4:1c:7a:ca:9a:61:ed:f9:1e:4f:9a:b1:79:dc:
92:66:be:54:e6:fc:94:6c:9e:7a:27:8e:ae:1c:90:ca:e4:63:
cb:22:50:6d:95:36:2e:3d:a8:bc:3c:0f:ef:a1:2f:e5:9f:4f:
23:54:23:bd:94:eb:f6:73:da:f5:38:95:e7:59:17:d5:4c:28:
bd:38:fe:1d:92:ec:4f:97:66:82:f3:e7:22:3b:f2:09:bb:46:
71:59:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:24 2026 by rpki-client