Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4D6ByfGhmVYXCzBaAEmLpknfH1aUjutUZplJsPr4xwo=
Subject key identifier: 34:C8:B6:9E:8E:DD:A8:38:9C:B2:26:EB:32:61:AE:B1:37:C2:76:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F43334626630AB27E6932F890EFC3B0F340887D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:32 +0000
ROA not before: Tue 21 Jul 2026 11:59:32 +0000
ROA not after: Tue 20 Jul 2027 12:04:32 +0000
asID: 834
IP address blocks: 217.217.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:43:33:46:26:63:0a:b2:7e:69:32:f8:90:ef:c3:b0:f3:40:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:32 2026 GMT
Not After : Jul 20 12:04:32 2027 GMT
Subject: CN=34C8B69E8EDDA8389CB226EB3261AEB137C27686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:3a:7d:84:c9:7c:8c:88:9e:1a:fe:c1:a0:
12:32:dd:e5:34:c2:9f:02:4b:d5:21:62:ea:e8:b8:
01:05:a9:1f:41:dd:01:a8:01:b8:bb:3b:bb:08:92:
f4:08:bc:92:74:ab:f7:85:25:c6:95:bb:24:8b:ce:
65:d6:4c:26:6e:a1:4d:94:22:91:36:a8:41:3f:f0:
3e:5f:7f:0a:6c:db:a7:48:e9:f2:01:95:86:3c:ae:
84:f5:dd:d1:4c:a8:4c:bc:4e:09:12:4a:8f:49:2d:
28:65:10:f6:8c:16:35:5b:8d:cc:c6:23:fa:7f:87:
49:89:27:97:a2:b3:65:99:22:f2:b2:c6:bc:13:d7:
c0:3e:f4:96:57:bd:02:b6:b2:86:44:7f:86:03:26:
ad:08:bb:53:99:76:de:50:50:34:46:d5:eb:ec:d3:
ab:4c:57:e2:1a:14:18:e4:79:33:b0:1a:ca:dd:37:
39:da:64:81:29:54:4d:d7:fc:ea:dd:ad:4d:47:07:
ca:6c:5d:07:89:ad:95:4e:5b:29:07:b9:fd:e2:ec:
b1:94:c4:d9:c6:1f:9e:12:a0:0e:fb:e1:78:76:10:
bf:29:37:9b:7d:09:b0:8f:1a:94:74:3a:e5:dd:76:
9b:43:a5:88:3d:a5:c8:29:68:ac:d7:dc:87:3c:0f:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:B6:9E:8E:DD:A8:38:9C:B2:26:EB:32:61:AE:B1:37:C2:76:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.204.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ce:2b:ff:ec:ad:8d:1f:38:15:94:4e:36:04:bc:8b:86:4f:
fb:35:f9:86:a2:99:6a:fc:1e:c2:00:d4:88:aa:d8:d8:48:aa:
e7:c9:24:16:07:e6:0e:0f:b8:13:7e:79:d5:8c:ca:eb:f7:8d:
35:86:93:1e:32:28:35:f4:d3:72:7b:a8:42:2b:b3:a3:c0:97:
5a:17:78:dd:a3:c2:44:9c:33:de:d5:1f:29:34:e1:cd:24:32:
ee:06:49:b8:40:aa:95:16:0a:b6:c2:ac:8f:cf:af:19:1b:1e:
fd:f4:15:e0:b2:93:eb:a1:44:bc:4d:ad:06:c4:74:68:f7:d1:
5d:3d:72:e9:a9:93:16:3a:a6:08:6f:cc:68:db:c8:e3:6c:93:
ac:20:6d:c9:fd:2c:dd:5d:de:c1:c4:9e:16:ca:cd:52:37:d8:
cf:c9:8b:9d:bc:ca:ad:23:74:e1:02:6d:2a:bc:10:49:b5:2b:
13:1b:f7:17:e3:b3:80:8a:c9:33:51:9d:2b:82:6a:35:46:32:
bc:6d:06:da:07:1a:44:48:35:1e:c4:5e:11:5f:0c:9b:06:bd:
0a:ab:c7:05:e0:de:34:03:58:5d:6c:ad:ca:d3:2f:5c:09:4e:
ad:76:c9:fa:66:b3:6d:c6:f1:db:80:0c:29:02:6c:f6:da:1e:
aa:ae:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:03 2026 by rpki-client