Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3230322e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: LGkCulnfJgZsD1QDJNEbCxScQk1SDCeptyL1W+lQ/tg=
Subject key identifier: CA:A7:F2:72:8A:D0:93:28:7A:14:E0:05:8D:97:FE:8A:C9:69:0D:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D6B43DC60351793423C9736DCF3C5AD76694FE5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:13 +0000
ROA not before: Wed 25 Mar 2026 08:44:13 +0000
ROA not after: Wed 24 Mar 2027 08:49:13 +0000
asID: 48266
IP address blocks: 217.217.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6b:43:dc:60:35:17:93:42:3c:97:36:dc:f3:c5:ad:76:69:4f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:13 2026 GMT
Not After : Mar 24 08:49:13 2027 GMT
Subject: CN=CAA7F2728AD093287A14E0058D97FE8AC9690D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:55:cb:08:4a:60:a3:82:66:33:c2:84:65:
5c:fb:3f:ad:86:64:9c:b9:73:15:b4:f6:19:34:03:
71:f3:99:e4:a6:7c:c8:64:e0:85:bc:b4:ac:de:03:
2c:ad:fa:f5:c8:f0:24:26:05:40:fe:4c:fa:9c:ff:
96:bc:5e:bd:e0:ac:48:eb:ff:68:06:0e:b2:71:68:
a2:93:14:23:ec:e9:2b:d3:7a:42:f7:98:ae:bb:3c:
68:cd:0a:66:f5:6f:1d:7a:11:d1:0d:7d:ac:7d:a6:
4c:60:07:1e:d2:53:39:4f:66:e3:d8:be:98:47:79:
18:f0:4a:44:ea:14:e7:c9:ca:ad:1e:2c:fb:a0:ad:
bb:41:aa:a1:2d:ca:fd:30:89:77:c8:04:b3:ea:85:
7e:04:31:39:0b:5e:28:0b:33:79:7b:f8:d0:d9:9e:
a7:37:a7:44:7b:91:1c:a3:7d:ee:d8:41:f3:7a:af:
de:8f:66:d5:d8:f4:4d:d4:dd:fa:85:97:66:08:4b:
72:96:e7:c2:0d:b0:90:2d:ab:66:11:ae:05:12:53:
64:1e:b6:7f:a3:48:3a:50:85:2b:44:99:6a:d9:eb:
fa:6a:75:0a:44:9d:6a:7e:9e:93:c0:7c:39:e1:7a:
5d:7c:f5:17:11:8d:f8:5d:fb:26:70:b9:4e:5d:b8:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:F2:72:8A:D0:93:28:7A:14:E0:05:8D:97:FE:8A:C9:69:0D:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f8:79:85:4c:76:e9:97:cd:8c:f4:73:af:c8:59:22:af:ae:
8d:08:1c:a2:dc:30:b4:f5:70:5b:ec:85:7e:1d:03:0b:11:3b:
ea:83:0c:6e:ff:ae:fd:18:df:b9:35:fa:46:70:99:6a:57:b7:
30:05:80:a8:5c:f9:fe:4e:a3:40:0e:ce:ff:4b:8f:d3:35:ec:
1a:38:4a:7b:86:86:9b:07:92:f0:47:7e:ac:10:25:1e:6e:c6:
80:b6:14:08:7f:c0:cd:64:87:37:14:ae:86:e5:b1:3d:65:0e:
57:ed:6f:5e:96:83:18:34:56:4f:16:04:72:af:0d:a1:6a:18:
e3:52:03:38:c3:25:51:9c:c0:ab:43:ad:d5:aa:9c:ee:68:14:
fe:a5:e9:5f:98:43:6e:ba:54:a6:ca:04:bb:34:52:9c:ee:ef:
56:6a:15:ce:a5:0c:24:ee:1d:ef:c3:3b:aa:c7:b4:3b:50:44:
cc:84:7b:b8:4e:f2:08:83:a4:03:0b:8e:e7:dc:e7:ad:6e:be:
18:60:63:81:aa:1a:e8:16:8e:e4:5e:bd:0b:1d:ce:3f:9f:c9:
56:b0:3b:39:87:a5:90:a6:5a:7b:4b:e9:03:59:0b:05:90:8f:
1a:bc:b4:dc:8a:9c:2e:cb:bf:af:fe:7d:59:03:b0:6c:50:3a:
55:30:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:47 2026 by rpki-client