Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139382e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zB3yAGKM8qCmyhPGL87tO2mYu+iV2ct5vcq3qXuORbY=
Subject key identifier: 68:C1:BD:8C:53:B5:91:BA:AF:1D:C2:30:C3:AA:A3:BE:00:5D:8B:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D6A387ADBE2D444D225E2A101800E6E57155E3B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139382e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:13 +0000
ROA not before: Tue 21 Jul 2026 11:59:13 +0000
ROA not after: Tue 20 Jul 2027 12:04:13 +0000
asID: 834
IP address blocks: 217.217.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6a:38:7a:db:e2:d4:44:d2:25:e2:a1:01:80:0e:6e:57:15:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:13 2026 GMT
Not After : Jul 20 12:04:13 2027 GMT
Subject: CN=68C1BD8C53B591BAAF1DC230C3AAA3BE005D8B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:28:5d:60:d3:9c:f4:70:63:3c:bf:11:be:
dc:d1:75:83:e0:4a:b8:8e:a2:7c:df:4f:26:21:fd:
4c:8c:e3:47:92:36:a7:be:41:c5:91:6b:f6:e9:49:
ea:7d:72:c4:d6:91:3e:a3:0e:14:fc:48:85:3a:70:
32:67:3b:36:df:07:f2:7a:2b:bf:17:d3:5b:0e:13:
26:bd:18:ec:24:f5:69:ed:1e:f5:12:33:69:57:24:
01:25:e1:2e:6c:b5:8a:87:f2:e2:03:72:82:69:62:
e3:42:07:c2:24:5b:b6:54:61:44:11:d4:48:5a:88:
2c:2e:8e:87:5b:08:46:8e:be:7e:5a:ed:62:17:6a:
b3:fb:55:a5:3f:bb:b8:28:ba:0e:b7:e0:2d:a5:f3:
b4:2e:09:68:71:7d:31:1b:f8:75:32:08:95:7d:4f:
3d:71:f4:46:42:13:12:5f:cc:06:7e:ba:a4:a7:01:
cc:3c:0e:6f:0d:b5:9c:d4:34:a3:d6:f8:5b:45:f2:
bb:6c:ba:d4:47:36:03:d5:de:c8:66:3f:75:19:fe:
02:db:96:09:b9:e7:8f:18:a9:b3:ed:34:97:85:a6:
d7:4b:f5:7f:87:11:13:ce:de:da:85:79:78:30:ca:
10:92:bb:bf:02:e3:69:29:13:91:f8:27:9b:05:29:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:BD:8C:53:B5:91:BA:AF:1D:C2:30:C3:AA:A3:BE:00:5D:8B:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9a:18:5e:21:ab:e5:34:5b:0d:b9:8e:9b:c1:3f:91:dd:41:
ef:cd:82:b9:f8:ed:48:df:8c:34:44:2a:9c:74:b1:8d:70:56:
9a:55:c8:57:14:d0:b8:09:54:bb:9e:a2:94:14:d7:ea:ef:86:
e3:5b:cf:a5:56:31:00:74:6b:28:41:e1:36:95:9d:46:48:45:
9a:7b:31:91:78:36:6f:a3:0e:9b:6a:5a:fd:55:f0:ec:c8:cf:
60:a5:e3:de:bc:8a:a4:ad:a9:5d:50:6c:ce:06:0e:90:c4:03:
3e:c3:c8:e2:f7:7d:be:0c:5e:60:cd:c9:e3:86:f0:6d:70:9e:
a3:4a:9a:bc:b2:91:59:79:52:c7:4f:05:7a:45:b0:41:23:b6:
e6:d6:62:e8:e8:41:a6:1d:e2:41:bb:a3:d8:ef:f5:c7:87:78:
fa:76:ce:d3:c0:d6:60:94:b2:4e:c0:e1:0a:11:7f:b3:85:cc:
d2:28:49:6d:e7:05:da:43:f0:f8:8e:99:45:39:5c:7f:3a:53:
e7:9c:c5:44:3b:d8:f1:f7:68:1e:ec:a9:74:e9:a4:9f:37:80:
32:e4:96:0f:86:55:24:79:f7:ec:08:3e:ab:4d:46:5f:b6:08:
53:83:6b:d5:c4:91:9a:58:34:5e:f0:7d:31:ba:47:6d:20:2c:
cf:4f:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:08 2026 by rpki-client