Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rs8bGrKpwE4Rm3itTdGFplDU4NloDR9gnLBCcAGukD0=
Subject key identifier: 0D:1C:D5:4C:A8:8C:5B:D3:1D:FB:19:07:1B:C7:44:4F:B6:93:FF:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D8145E116044BEFB9E1DDA37F99C59295EB5D43
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:00 +0000
ROA not before: Tue 21 Jul 2026 11:59:00 +0000
ROA not after: Tue 20 Jul 2027 12:04:00 +0000
asID: 834
IP address blocks: 217.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:81:45:e1:16:04:4b:ef:b9:e1:dd:a3:7f:99:c5:92:95:eb:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:00 2026 GMT
Not After : Jul 20 12:04:00 2027 GMT
Subject: CN=0D1CD54CA88C5BD31DFB19071BC7444FB693FF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:5c:d6:04:62:7d:65:b3:6d:b1:fa:1d:0f:
18:c8:ab:95:75:95:ab:fb:f6:49:c4:64:04:2a:2d:
dd:79:f0:f1:47:ca:23:c0:5f:c1:f4:52:8b:6d:cf:
20:c5:30:a5:b5:0d:74:77:b8:c0:76:58:ea:3b:2c:
e6:21:12:70:b1:12:02:5d:f7:fc:a3:4f:fb:7d:30:
0b:bc:63:55:fd:48:28:cb:04:7b:e7:c0:12:27:1a:
87:d5:f3:4a:16:33:79:90:d2:a6:1e:7e:22:d9:14:
9d:63:e9:fc:73:9a:ce:0b:02:73:78:29:63:4c:d2:
d4:42:d2:fd:af:51:97:42:bf:0c:aa:46:96:2b:62:
27:90:97:b5:ed:6d:74:06:2c:da:db:22:dc:e8:13:
b0:ae:9b:cc:33:da:f7:46:95:14:a1:f9:99:2f:80:
ad:7a:31:c6:0c:c7:19:37:ce:fb:e4:75:60:1f:ad:
cb:aa:f2:20:5c:27:a6:c5:3f:de:55:57:f7:0d:d1:
ee:05:de:b3:20:81:f8:b5:6c:95:e2:72:e6:b6:45:
05:d5:75:2f:9c:ac:47:2b:4a:31:56:c2:0f:44:d7:
26:c5:83:00:60:ed:ba:38:2b:93:f5:56:4d:d6:51:
01:ac:40:a9:9d:59:bc:dd:c2:51:78:1c:18:81:1b:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:D5:4C:A8:8C:5B:D3:1D:FB:19:07:1B:C7:44:4F:B6:93:FF:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9e:54:2d:6b:d2:23:a0:ca:01:92:a2:a5:4a:e8:fe:f3:bd:
09:3e:3d:7c:57:6a:0a:1c:8e:07:1e:4e:ba:d7:06:f8:8f:a6:
1d:fb:fa:46:5e:d4:32:f0:09:3e:0e:b1:37:52:83:62:b5:5f:
55:ab:7c:f8:f9:fc:2a:2f:b6:97:fc:68:5f:90:8c:cb:50:43:
8f:b2:0b:07:1b:7d:eb:87:30:f3:1b:d0:01:fc:12:4f:ba:7b:
f6:16:52:3d:a8:98:ff:9b:9e:57:2c:df:a8:b3:80:b9:02:da:
a2:c1:a2:bf:09:16:59:0a:4c:0e:cc:28:5b:8a:6f:ce:b8:f5:
9a:24:8f:15:42:c6:35:93:42:89:fc:42:a0:83:c8:69:18:83:
c5:ca:4a:f4:b8:61:3c:05:d9:44:b4:40:28:7a:56:9c:a1:d9:
b9:48:6c:8f:a8:fa:23:25:44:0c:b4:64:b0:b3:36:e0:e5:c5:
ad:1a:f0:3b:4b:a5:48:d5:0a:3f:6c:2f:53:67:46:4e:62:3e:
c4:08:62:15:35:d9:56:77:5f:a7:cd:9c:32:6b:f9:a4:08:48:
86:c9:0d:4f:a1:6f:ff:23:8f:72:e5:bd:5b:85:b0:0b:f2:58:
12:e0:59:ee:b7:4c:91:87:c6:bf:95:66:4c:54:68:1e:97:47:
5e:45:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:19 2026 by rpki-client