Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kGb7KYLPk5dwz0P6fEgGK61vlcBF6Bpdb0tPYoBKgWk=
Subject key identifier: 43:BF:8D:65:55:9D:7B:26:DE:22:76:DB:C6:FC:B9:72:1A:C1:B5:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C8961EA3DD0117A6C6B2163B36945A5E388AAAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:03:47 +0000
ROA not before: Tue 21 Jul 2026 11:58:47 +0000
ROA not after: Tue 20 Jul 2027 12:03:47 +0000
asID: 834
IP address blocks: 217.217.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:89:61:ea:3d:d0:11:7a:6c:6b:21:63:b3:69:45:a5:e3:88:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:58:47 2026 GMT
Not After : Jul 20 12:03:47 2027 GMT
Subject: CN=43BF8D65559D7B26DE2276DBC6FCB9721AC1B525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:5a:1e:30:5a:f2:82:15:a4:5d:8a:5b:97:
19:0e:74:09:b3:de:90:a6:99:b9:15:6f:62:d0:07:
46:c0:d8:4f:91:aa:90:97:4e:94:c4:f3:7c:1f:2f:
c3:08:60:7f:70:5c:6c:78:5d:bc:de:9f:9d:39:9a:
c4:af:f7:05:fd:df:98:d1:3a:5c:d4:3e:4d:eb:fb:
82:59:13:9d:d1:e1:4b:67:5b:9c:58:31:3d:64:fd:
42:1c:34:fa:2f:8c:64:cf:36:3c:78:05:ef:73:3d:
94:fd:9b:f6:16:16:02:e9:6b:8c:f5:6d:cd:ae:e5:
d9:d7:0c:04:3e:f3:8d:49:09:9b:c1:14:a4:7e:f3:
42:b5:00:5e:36:50:71:07:18:d0:61:b2:15:20:ab:
74:5c:de:72:58:27:e7:34:59:10:c8:df:97:35:7f:
b1:a3:c5:5f:aa:f8:1d:2e:27:fb:55:dd:77:48:0a:
7f:75:db:0b:3d:32:f7:f1:23:b1:2d:c1:45:a1:3c:
2f:b3:39:4d:dc:9a:6e:06:33:ae:ed:de:ef:e9:77:
06:b8:66:53:90:01:fe:34:c4:73:ac:03:0f:4b:04:
48:31:b9:ab:7b:a1:31:10:fb:45:22:db:18:6b:e0:
7a:f0:62:f1:09:55:b9:77:31:b6:f3:e4:8c:b0:2f:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:8D:65:55:9D:7B:26:DE:22:76:DB:C6:FC:B9:72:1A:C1:B5:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.192.0/24
Signature Algorithm: sha256WithRSAEncryption
04:85:f4:4c:e2:d1:d0:2d:75:61:54:f0:bd:55:9c:15:0c:34:
e6:06:4c:7d:87:45:ab:72:a8:08:5e:a7:c1:cd:50:3c:2e:ff:
9a:fe:fa:5b:d0:ed:da:d4:7c:74:ec:a9:9e:5f:20:05:90:da:
ca:1e:91:fc:c3:fd:31:3a:2b:3d:f7:d0:32:ec:ac:df:0b:cd:
57:62:88:19:88:7d:5e:ac:d4:a2:bb:fc:0f:d7:bc:58:46:77:
3d:1a:ba:9e:19:38:63:7b:94:5d:ec:92:1b:0a:17:a8:71:f7:
cb:0e:b8:07:88:52:53:7f:34:71:91:01:14:11:55:33:62:07:
46:02:c1:e1:6d:58:4f:69:11:63:ce:62:cc:25:ce:b8:45:97:
bd:d2:14:e5:9b:e8:b0:c3:6c:92:83:58:4f:16:64:71:e4:a9:
aa:e8:87:54:1f:cf:ce:7b:14:b3:04:02:3b:bf:98:a7:19:e3:
c4:19:f8:48:d6:bc:49:94:4e:b2:e4:2e:0e:f4:cf:7e:b3:fc:
6e:34:ea:e0:72:36:78:34:4f:7b:ea:a9:93:e2:14:f1:71:27:
0c:82:d8:3b:77:26:d9:21:81:5f:3b:8f:c8:57:ee:01:25:d4:
24:8d:43:95:5c:61:81:44:ed:ab:10:d2:9b:b7:45:39:2e:84:
23:9e:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:34 2026 by rpki-client