Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: D41h+LGEgxnSK1uRzE0kItedU76Wc9ucvS47uW7FPi0=
Subject key identifier: 25:CB:8E:10:77:2E:C2:E4:CD:52:49:86:C5:73:B6:CB:26:74:8F:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20F2BA0CA60E8320235E749E2CA2E46A33C264C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:26 +0000
ROA not before: Tue 21 Jul 2026 11:59:26 +0000
ROA not after: Tue 20 Jul 2027 12:04:26 +0000
asID: 834
IP address blocks: 217.217.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f2:ba:0c:a6:0e:83:20:23:5e:74:9e:2c:a2:e4:6a:33:c2:64:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:26 2026 GMT
Not After : Jul 20 12:04:26 2027 GMT
Subject: CN=25CB8E10772EC2E4CD524986C573B6CB26748FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:b5:cc:fa:fe:da:33:1e:3d:57:25:13:11:
10:ad:37:98:7d:db:ba:e8:51:25:4f:f3:e1:84:c8:
84:8e:63:85:2d:9d:be:85:d1:ad:a7:a8:96:d6:7a:
52:3f:43:ca:28:ff:e7:ba:ba:4a:bc:08:a8:6a:1f:
52:c2:a1:bd:ce:4b:27:49:65:b4:18:36:99:35:da:
75:43:28:0b:e6:f9:90:04:1e:e2:e2:21:f4:0f:32:
63:f2:00:fa:26:63:9f:52:a0:a1:2d:c4:c9:24:46:
a7:cc:e3:71:b6:b3:23:c3:12:a9:03:bf:12:e7:8f:
d2:99:58:f8:84:5d:64:1b:81:0e:10:56:4d:f7:88:
9a:53:d8:1e:30:4f:71:2b:c9:e4:91:f5:a8:fc:54:
b1:0e:af:62:ee:c4:3f:b9:4a:82:b4:0f:99:be:39:
a7:f0:ca:58:e1:61:72:98:36:d2:5d:0a:81:ca:05:
43:f4:f0:1a:3e:c3:1f:a1:24:c5:64:50:74:f8:73:
bb:2b:f3:1e:df:86:d4:47:e0:d8:80:29:c4:4b:8b:
a1:fd:a7:e2:63:cd:97:4e:f1:a3:9f:78:3f:ca:38:
e4:d5:8a:75:87:8e:21:d4:0f:85:9e:35:a4:a3:19:
b8:92:ea:53:f9:f3:08:aa:e1:ef:87:6e:8a:ed:17:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:8E:10:77:2E:C2:E4:CD:52:49:86:C5:73:B6:CB:26:74:8F:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c1:a9:b9:be:85:83:78:a5:ea:7d:47:96:25:a8:b2:02:1d:
bc:3a:85:eb:84:67:ce:5c:39:f4:e0:ed:f3:4d:a6:1a:ff:c9:
29:31:e9:02:ee:58:aa:1f:97:7d:0d:00:5b:92:74:0a:0d:1a:
cb:69:04:ad:ee:a0:3c:be:c6:0a:f8:32:ff:07:70:82:cf:f6:
1f:44:ea:44:dc:05:25:1c:a3:90:ee:7c:96:ed:e9:85:32:08:
d5:93:da:21:06:3a:c9:8a:82:14:be:69:2b:d2:4f:7a:77:95:
51:d6:67:01:36:6f:71:b4:c9:66:0a:ac:03:8f:e8:cb:e1:43:
33:ea:37:64:13:44:4c:d4:d1:03:2a:ac:61:46:4d:a2:33:2e:
e0:59:41:23:27:29:ea:1b:80:8f:f4:92:94:11:8e:d5:34:41:
fb:82:7c:b1:91:13:e7:ae:1d:3c:64:82:8d:bd:07:cd:be:8d:
c4:25:c4:51:22:92:9a:98:9d:d4:70:9f:e5:12:61:9d:5a:97:
d8:fe:3e:7b:0e:07:9b:7a:f4:f0:57:a2:37:46:db:00:ca:36:
95:32:75:d9:97:5a:bd:f7:97:ef:30:ab:ff:9d:4b:d3:84:53:
fe:b1:ef:84:cc:7c:7a:e9:87:82:7a:1d:5e:95:ca:ea:55:a0:
c7:25:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:55 2026 by rpki-client