Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vKncVek6Tkj9T0vSUN+TIrovqCutjsJD7+0XlSUnhP0=
Subject key identifier: A1:AD:BD:C6:B8:CC:A1:24:08:A6:0B:85:96:21:F2:69:81:A4:4F:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E3184F6B4712DDFCC685EDBA8E8525A4FDF5501
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:03:51 +0000
ROA not before: Tue 21 Jul 2026 11:58:51 +0000
ROA not after: Tue 20 Jul 2027 12:03:51 +0000
asID: 834
IP address blocks: 217.217.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:31:84:f6:b4:71:2d:df:cc:68:5e:db:a8:e8:52:5a:4f:df:55:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:58:51 2026 GMT
Not After : Jul 20 12:03:51 2027 GMT
Subject: CN=A1ADBDC6B8CCA12408A60B859621F26981A44F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:37:b2:01:43:5b:0f:3a:62:8f:e0:ad:a0:
db:98:72:c7:18:c4:c4:7c:42:7b:c1:a5:85:ff:51:
a7:c9:54:f2:9d:e8:ec:75:d5:47:7d:77:65:8f:d2:
d6:f9:ec:c0:24:b2:1a:f6:cb:09:16:51:c7:4a:01:
da:e2:a2:38:a4:d1:7d:56:cc:49:ea:07:a2:56:1e:
0d:54:5e:b2:29:cc:8b:c6:19:56:12:af:87:a1:07:
0a:05:ee:dc:e6:1d:b1:9f:39:d4:f8:17:df:80:2c:
72:0b:aa:ca:8f:7d:a1:c2:c8:8d:87:d9:8d:96:57:
eb:6d:dd:58:f6:40:29:e2:c6:7e:cf:0a:ec:45:3a:
ef:29:d1:81:11:4e:f6:c5:bc:c6:2f:0f:ad:7a:ad:
da:7e:f6:af:61:bb:27:7a:20:ca:de:11:3f:f6:72:
1c:e2:9c:90:36:19:e0:84:a9:88:c8:b3:c8:d9:a8:
4d:f5:f5:44:1c:24:50:ef:2e:bf:88:83:a5:56:67:
60:cc:53:81:92:4c:e2:77:04:6c:28:0b:10:c6:a7:
44:f8:00:c6:36:3b:a0:b4:c4:db:fc:1b:8c:ac:c2:
1e:50:c8:0b:bc:51:1d:78:ec:4f:29:bb:28:de:ec:
9f:a0:0a:1d:8b:31:d5:72:7c:d6:6c:92:ab:12:0a:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AD:BD:C6:B8:CC:A1:24:08:A6:0B:85:96:21:F2:69:81:A4:4F:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.193.0/24
Signature Algorithm: sha256WithRSAEncryption
56:70:f8:8e:6c:d3:f9:b7:b3:0f:04:20:2c:50:76:ee:48:b9:
bc:51:65:2a:5c:82:78:78:d8:c3:68:44:a3:80:22:da:45:6b:
0f:24:c9:98:d6:2f:1d:dd:11:d3:f1:43:8d:9a:a3:02:1c:21:
30:8a:9f:6c:ec:c0:30:4f:76:59:00:9f:ef:19:b3:7e:6e:55:
24:b9:e7:28:d5:9b:d9:4a:6b:60:19:41:c2:5a:64:03:a1:cf:
43:6c:8d:3d:aa:17:30:41:3b:cb:fe:62:d6:9a:52:fc:80:12:
56:96:87:69:a4:dd:73:71:50:00:5e:4d:3f:1b:e1:0c:ef:2d:
20:1f:42:2c:8b:60:78:f0:6d:a5:39:22:48:15:ff:ec:33:f8:
87:46:fe:07:88:fe:20:11:16:12:03:f6:ff:ce:2e:1c:b2:ee:
bf:a6:02:63:9a:1e:f0:14:4f:ad:1d:7b:64:51:26:0d:70:c2:
99:b3:9d:b1:13:7d:e3:46:9e:ee:e4:5b:4f:5a:c5:b3:2d:3e:
d8:14:39:bc:25:71:55:6b:f3:33:8a:70:63:ce:68:4c:2e:c3:
d1:b6:a6:9d:4f:f5:c8:b8:b5:57:cd:b3:9c:bd:6c:d0:35:04:
b4:b5:b6:ac:e0:c5:b4:0f:4d:63:28:7c:42:67:ef:6f:12:f4:
2d:08:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:30 2026 by rpki-client