Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230332e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3230332e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: Jv3hRvvOIhOp3MLy8QSo37Mbcs5YRWJbtO0W5DBQGgI=
Subject key identifier: 32:FF:D0:97:D2:34:2F:C2:BF:E5:9D:DE:3F:A6:F3:52:B2:A9:29:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C190900D9D34322CC8FE393F564F1AFBF13429C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230332e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:12 +0000
ROA not before: Wed 25 Mar 2026 08:44:12 +0000
ROA not after: Wed 24 Mar 2027 08:49:12 +0000
asID: 48266
IP address blocks: 217.217.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:19:09:00:d9:d3:43:22:cc:8f:e3:93:f5:64:f1:af:bf:13:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:12 2026 GMT
Not After : Mar 24 08:49:12 2027 GMT
Subject: CN=32FFD097D2342FC2BFE59DDE3FA6F352B2A92974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:f9:18:64:10:76:d5:83:e3:0b:5b:92:67:
c7:dc:e5:f1:0c:0f:fd:43:e9:ff:f3:a0:16:b5:8b:
ba:1a:c2:b5:c4:c2:6a:24:32:3b:e6:31:b4:27:2b:
7b:da:2c:a2:e1:61:2e:93:9b:f1:ad:19:77:28:39:
0a:ba:21:e6:9c:1d:7d:48:78:45:28:3d:b2:37:fd:
fc:e5:8a:5f:01:4b:d1:85:37:98:6e:8f:8c:f0:f2:
4c:7e:7d:80:c3:1e:6c:aa:83:eb:56:c4:01:52:88:
b5:2d:ac:c5:aa:80:86:e4:84:4f:59:0a:32:4f:be:
53:c1:64:df:fb:b4:2e:d9:fc:e3:f5:1c:13:82:c1:
62:4e:63:50:7a:11:68:f7:80:19:c4:7e:73:37:7e:
bf:c7:66:57:49:8f:0d:f9:bd:2f:6c:cd:b4:b1:25:
97:95:83:af:3a:53:07:e8:ac:21:c9:be:f7:ae:bf:
e4:5a:ce:11:91:36:a4:64:01:d6:68:5a:90:1b:29:
56:94:8c:1e:df:41:90:7d:27:f9:66:47:ce:3c:47:
b5:8e:eb:79:7c:7b:91:e9:e3:01:22:aa:a1:ea:54:
ce:6a:5d:a3:3c:a8:24:a9:94:90:d2:3e:81:e3:1f:
10:02:5e:b8:d0:21:13:cc:f1:3f:21:cf:2e:a5:0d:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:D0:97:D2:34:2F:C2:BF:E5:9D:DE:3F:A6:F3:52:B2:A9:29:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230332e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a1:aa:e4:23:a1:9d:e9:f0:65:2a:26:b9:85:8d:2f:ae:a0:
db:54:22:e3:0f:27:78:c2:01:13:9e:72:41:b8:54:bd:8a:e4:
c7:56:35:09:7c:02:22:19:53:b4:d8:52:6f:23:48:af:60:e6:
25:50:51:a3:87:f3:37:ea:78:d3:2f:0d:f9:a9:68:22:e0:42:
7c:fa:e7:b2:06:f6:3f:a6:c7:0c:61:52:59:8f:90:4f:af:21:
6a:94:16:db:af:6e:12:7f:37:d1:d0:bf:23:bf:c2:e0:a6:b0:
9a:c3:7c:79:a6:ff:7b:f8:cf:fa:46:fe:d9:80:1a:af:24:cc:
ce:db:0c:8d:30:09:71:9c:3d:25:c9:d1:94:2a:63:92:f0:fc:
be:b9:fa:7e:d4:f4:77:3e:c5:87:78:6b:21:eb:e6:f7:5e:79:
e1:43:73:b3:f6:aa:f1:b3:3d:36:68:a9:3f:0c:42:21:18:62:
71:3e:78:74:d1:8f:27:20:2e:1e:3a:90:e1:e6:ae:1f:c3:6d:
14:b4:a7:03:ce:42:c0:47:8a:12:f2:62:45:de:35:97:72:01:
ed:5f:5f:3b:7a:b8:2b:99:5c:f0:d5:2f:3a:5a:c5:b6:73:a4:
75:41:95:35:ea:58:2b:a8:3b:df:ff:17:e9:e6:4c:a3:b7:92:
bf:3e:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:51 2026 by rpki-client