Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AwSCOw6/Kkbyn2Vi5iTHlSNYxp4qbj6RZOALx9w6wSE=
Subject key identifier: 42:29:27:71:A1:07:8F:92:F4:51:3D:70:B7:05:18:E0:AA:55:26:4A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 245CE883BA789D03E47F1530358A911144A64017
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230352e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:35 +0000
ROA not before: Tue 21 Jul 2026 11:59:35 +0000
ROA not after: Tue 20 Jul 2027 12:04:35 +0000
asID: 834
IP address blocks: 217.217.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5c:e8:83:ba:78:9d:03:e4:7f:15:30:35:8a:91:11:44:a6:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:35 2026 GMT
Not After : Jul 20 12:04:35 2027 GMT
Subject: CN=42292771A1078F92F4513D70B70518E0AA55264A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:9a:4c:61:8f:d5:0e:4d:02:32:35:54:bd:
5a:68:72:30:cf:15:39:6b:dd:85:79:aa:c7:38:a3:
80:49:ab:b0:3b:cd:80:6d:b0:94:ba:2e:39:f2:a5:
c5:1d:4a:0d:78:c9:b2:86:ad:22:90:09:01:f0:b0:
04:07:22:af:88:20:93:cb:38:df:8a:5f:50:92:17:
76:ed:d1:3b:3b:69:d3:60:16:05:cf:5f:4e:e3:2e:
08:89:5e:3a:11:7e:bb:1b:dc:64:cf:d3:81:1e:98:
da:f9:76:49:e8:7b:01:7b:4f:64:78:d1:97:62:c0:
46:b0:d4:52:1b:07:b9:ec:19:8f:69:30:c0:c7:15:
35:e0:50:ba:64:66:bb:03:51:a4:ba:d6:49:e2:26:
1d:9c:c6:dd:ce:2f:2a:b1:f0:58:2f:cf:00:43:bf:
0b:98:80:95:87:45:81:3e:36:b2:1c:a9:c7:aa:2b:
3f:40:5e:ff:62:1b:f8:ad:30:57:c6:c2:b3:ed:3e:
70:8b:0b:94:37:3b:df:6a:f2:77:a9:1f:20:87:e5:
9b:d2:31:98:28:76:72:f3:07:a3:ad:e9:70:58:f0:
d4:b4:44:ca:f9:2d:42:39:12:09:57:d8:a3:4d:e0:
68:1d:54:d9:aa:ba:b7:d0:55:69:ee:06:fc:da:ff:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:27:71:A1:07:8F:92:F4:51:3D:70:B7:05:18:E0:AA:55:26:4A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6e:36:77:48:38:3c:4c:0d:a6:96:1a:42:45:d3:45:99:4f:
88:73:50:77:a2:6e:cd:f6:e4:4e:dc:a2:9b:b9:e7:a8:3f:bc:
3f:15:e7:4d:6e:cb:87:2e:28:17:75:82:7b:c5:98:cd:2b:93:
0a:86:32:f6:96:1f:0f:c2:9e:24:7b:66:eb:92:06:44:c1:0f:
e8:b6:a8:ac:3d:bb:0a:8e:12:7c:4d:bb:3e:b7:38:ed:69:55:
4d:36:aa:ca:65:f0:b0:0a:94:66:2e:b7:6d:77:25:3c:4e:0a:
04:f8:80:27:f1:49:dd:91:32:9d:ef:27:56:54:49:b2:77:31:
40:00:67:ed:a9:1a:e2:d6:69:ab:b9:17:ce:47:d3:ee:cc:a9:
46:36:a1:3e:b8:bc:1b:1c:69:5c:cf:f7:ac:cc:db:fe:97:a0:
f4:6a:c8:6b:90:93:46:14:26:e6:57:77:72:2c:d4:ad:b4:73:
51:cf:c9:61:bf:14:69:e4:67:40:61:c0:f1:c9:91:c0:84:dc:
d8:a5:c2:f8:fc:3b:39:05:34:2f:6a:3b:84:c9:18:6c:73:60:
36:66:1c:1c:aa:2c:74:fa:d8:76:a2:e0:6e:74:76:54:e8:63:
34:6c:49:41:aa:91:f4:82:ce:7d:e9:c4:34:f7:c7:f1:dd:be:
37:20:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:09 2026 by rpki-client