Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: n+Lzp4ZxR6RB7vj3KXmXW//jMo8qdqp89h6IQrqsvi4=
Subject key identifier: D6:FA:D5:B9:86:CB:97:D1:03:61:FD:F7:55:54:2B:74:F2:1F:5F:BA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76658440218128D05CAAE362FC88F13C999C7978
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:05 +0000
ROA not before: Tue 21 Jul 2026 11:59:05 +0000
ROA not after: Tue 20 Jul 2027 12:04:05 +0000
asID: 834
IP address blocks: 217.217.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:65:84:40:21:81:28:d0:5c:aa:e3:62:fc:88:f1:3c:99:9c:79:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:05 2026 GMT
Not After : Jul 20 12:04:05 2027 GMT
Subject: CN=D6FAD5B986CB97D10361FDF755542B74F21F5FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:b1:de:ee:1a:d0:f0:3f:60:bb:0d:2a:67:
4f:c6:f2:d4:80:19:98:6e:6a:ac:a5:11:02:61:ba:
d1:e7:8b:09:d7:f9:ab:e1:4d:07:e9:12:e7:dc:b0:
51:c4:d5:3e:53:49:5e:0c:6e:28:65:48:5c:8e:ca:
58:e0:04:d9:5e:ae:33:4d:20:20:02:c2:50:cc:b4:
d0:ba:50:e7:a0:e9:ca:d0:56:e8:2c:6a:57:83:0c:
ba:0a:ce:30:3d:ec:1c:99:e4:d8:90:35:32:6c:c5:
e8:a5:53:12:d7:fe:1b:60:3c:f9:be:1e:e0:21:72:
37:c8:94:43:3a:cb:ee:b7:a5:eb:d9:37:61:46:0a:
97:8f:aa:bb:36:a2:f0:94:fb:7f:c5:cf:47:45:07:
1f:7c:2d:0f:11:88:7c:cf:54:28:01:ed:6f:22:45:
65:99:af:4c:1c:f6:36:d1:ee:f3:66:c0:ef:74:e1:
60:61:41:5e:5a:6a:21:e6:87:28:e4:cc:27:8e:cb:
5a:cb:62:16:a0:8f:fa:75:79:a2:59:53:9e:e2:fa:
78:51:00:d4:98:20:3b:eb:fa:45:00:91:0b:7e:2f:
12:ac:d5:d0:8b:37:00:00:9c:0d:38:26:bb:37:30:
e3:63:0f:dc:83:09:aa:52:14:c0:97:af:38:6e:13:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:D5:B9:86:CB:97:D1:03:61:FD:F7:55:54:2B:74:F2:1F:5F:BA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.196.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1f:72:3a:4f:08:2a:dd:b8:17:5c:19:c4:58:d7:a8:16:8e:
a0:9e:62:38:91:0f:c5:88:ef:c9:70:80:97:50:d6:95:bc:23:
62:2f:6b:8e:3a:9f:c9:cf:44:d1:b5:92:ac:95:e6:65:1e:43:
e6:78:d5:87:09:3f:77:35:cd:26:e9:97:ed:e5:d4:ff:04:4b:
52:78:b7:88:2d:a1:19:26:ee:f1:5e:bb:2c:32:ff:87:36:98:
ac:37:f7:d5:98:21:46:ce:c5:4a:c8:32:6a:05:ee:13:67:67:
2b:87:76:69:b5:37:1a:f3:0c:c5:48:1d:d0:30:9b:af:5a:a5:
33:b4:bf:f8:38:4c:9f:f6:bb:5d:78:e4:bd:8b:22:45:6d:c3:
4b:c0:8f:ca:f3:c3:9d:8b:d4:62:4e:a5:15:d8:2d:17:ca:65:
27:36:b4:75:d4:f1:24:f8:5f:7a:df:ea:93:ab:88:8a:2b:45:
a8:3b:a8:b6:46:31:94:33:71:6f:2b:4d:ff:85:91:42:4d:03:
0f:88:5f:18:9c:89:0d:d5:c6:61:d1:8b:67:40:52:eb:79:bf:
7f:94:02:79:cd:ac:8e:0c:2b:7a:76:33:12:6a:75:02:39:0f:
b0:82:be:45:61:31:94:71:cb:0d:ff:ee:3b:12:15:0f:6d:34:
f4:30:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:23 2026 by rpki-client