Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2036303739.roa
File: 3231372e3231372e32302e302f32322d3234203d3e2036303739.roa (raw, json)
Hash identifier: tzse4ktD01yHGZBw/+cI/Cid4CPoomdIgcgsZ5Hlxt8=
Subject key identifier: 89:D7:5B:E3:E8:89:40:53:0C:F3:82:D6:05:FA:E5:39:FA:95:C8:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 784526FA319E68F865314530B14332C4AA31277D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2036303739.roa
Signing time: Mon 27 Apr 2026 08:19:38 +0000
ROA not before: Mon 27 Apr 2026 08:14:38 +0000
ROA not after: Mon 26 Apr 2027 08:19:38 +0000
asID: 6079
IP address blocks: 217.217.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:45:26:fa:31:9e:68:f8:65:31:45:30:b1:43:32:c4:aa:31:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 27 08:14:38 2026 GMT
Not After : Apr 26 08:19:38 2027 GMT
Subject: CN=89D75BE3E88940530CF382D605FAE539FA95C8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:47:fd:90:9b:eb:bf:c6:9b:78:ff:79:52:
49:8d:a3:64:6e:de:46:eb:f3:e8:a0:57:8c:81:a6:
f5:a3:72:53:83:0a:a1:54:40:3c:74:3b:5d:d4:a2:
47:f5:fd:ee:bb:72:d1:95:d3:55:dc:35:32:15:26:
28:4c:62:f1:83:51:3f:44:a6:29:20:f3:21:9f:26:
f9:6c:1a:7b:27:27:a4:9e:6b:e4:ae:ee:0a:a9:73:
dd:0b:72:45:94:67:68:95:e7:cb:f2:79:d7:16:82:
52:b5:9f:9f:c9:4c:b8:32:e5:13:a5:9a:ab:f3:f0:
2d:04:4b:84:32:a1:9f:40:6d:36:29:2b:3f:2a:65:
db:48:97:b5:67:fe:d9:9f:15:16:a2:70:ea:1c:67:
f8:df:a9:2a:27:df:d3:54:2c:6f:44:4b:4a:d2:b9:
52:ae:84:c3:8b:93:ef:87:14:df:55:f1:19:c6:63:
df:f2:19:db:fd:21:ea:48:69:94:a9:36:8d:05:21:
7b:64:7f:85:b4:62:bd:8d:26:bd:8a:69:e2:ff:9d:
51:32:5f:45:3a:d6:2a:ad:70:33:98:4b:63:8b:2d:
06:f3:64:d8:42:86:df:89:2a:c1:5b:95:2d:36:0b:
47:04:88:c1:e7:71:60:00:d4:c8:39:49:99:78:7c:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:5B:E3:E8:89:40:53:0C:F3:82:D6:05:FA:E5:39:FA:95:C8:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.20.0/22
Signature Algorithm: sha256WithRSAEncryption
90:be:ac:2d:27:0c:a5:ee:ff:0f:8b:20:79:10:03:c7:b0:4c:
4b:47:52:e7:03:2a:1d:0a:a7:6c:bf:10:b1:bd:fb:6c:46:ed:
61:f1:c7:04:1b:1d:90:07:74:0a:5a:66:7f:7b:ac:7d:c9:ac:
b8:04:9d:7c:83:e2:5a:21:6e:05:68:f5:86:9a:ed:89:ba:1f:
83:bd:11:fb:7e:d8:7b:73:99:13:b4:6b:5f:9c:16:39:4e:cd:
2a:e8:44:b7:0a:4d:89:ab:6a:26:9c:0a:0e:c7:6d:7e:b8:c5:
a6:56:d1:af:3d:da:f2:3a:c7:06:8a:44:f0:0e:a0:f7:ab:eb:
7c:b8:90:20:a9:b3:20:71:07:89:f3:78:e3:e5:8e:e3:ea:e6:
13:9e:e5:a5:a5:39:dc:ef:1c:8a:72:03:bc:3e:d6:c2:33:69:
4d:4f:2c:ce:80:a5:68:5c:c1:2d:49:38:7f:12:99:e1:7c:34:
62:3c:54:d5:63:02:18:dc:d1:55:dc:e0:dd:d0:b9:44:40:35:
ad:85:12:7a:8f:07:da:8c:bb:3c:25:ad:f8:77:ef:57:5b:e4:
cf:5f:33:f9:5c:9b:67:70:3b:7f:43:d8:ed:67:da:aa:5e:86:
2f:76:d2:b4:0d:41:b0:1e:42:c2:6e:09:23:5b:f0:64:c1:43:
29:d1:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:14 2026 by rpki-client