Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KvPalJOjq8D3i4Kh0yPJHqplEO3NYo7sp6VHGkDNdVc=
Subject key identifier: 67:63:C1:94:EF:28:C4:80:BC:7E:C5:CC:2E:37:ED:D1:81:62:A2:E4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 54DFB5E9EBC4594785F7F3FBD8B885584CB7948F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:39 +0000
ROA not before: Tue 21 Jul 2026 11:59:39 +0000
ROA not after: Tue 20 Jul 2027 12:04:39 +0000
asID: 834
IP address blocks: 217.217.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:df:b5:e9:eb:c4:59:47:85:f7:f3:fb:d8:b8:85:58:4c:b7:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:39 2026 GMT
Not After : Jul 20 12:04:39 2027 GMT
Subject: CN=6763C194EF28C480BC7EC5CC2E37EDD18162A2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:b0:05:96:38:ac:2f:2e:70:a5:02:d8:fe:
fa:98:a2:80:8e:0e:ab:d4:72:92:4b:bf:f8:ca:62:
fa:80:b5:2b:9e:aa:30:f4:9d:e6:5b:0d:15:4d:c9:
eb:ee:75:4e:db:df:64:11:31:55:0e:28:a3:dd:f3:
dc:7d:a1:40:db:b3:db:20:43:fe:1e:5f:f4:2b:ea:
3c:a0:84:fe:67:65:5a:a0:1d:2b:b8:80:18:cd:1e:
68:cd:60:48:ed:d8:1a:ec:13:10:44:b2:3f:a9:07:
31:cd:ad:61:83:3f:d6:15:eb:b8:41:64:68:23:93:
69:99:28:a0:1f:74:f1:e8:92:45:0d:86:af:32:7c:
6c:61:b4:81:f7:97:bd:9a:20:c1:c0:f9:e2:a3:6c:
ca:22:b4:18:75:05:8f:ec:20:bc:3b:c0:91:ef:0e:
0d:f4:47:4f:7c:f4:72:70:68:10:3c:ed:aa:13:5b:
04:55:19:00:e6:57:3c:34:4f:b2:ac:c6:fa:39:36:
48:78:64:9b:d0:91:55:9f:94:39:36:0f:15:24:dc:
39:35:35:a6:ae:1c:31:68:fd:5b:13:8f:57:5e:73:
00:c2:26:90:12:f3:b9:3b:d9:6d:1c:4c:f7:a2:52:
52:a8:1d:94:3d:b3:9b:61:ff:d2:9e:df:61:93:a4:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:C1:94:EF:28:C4:80:BC:7E:C5:CC:2E:37:ED:D1:81:62:A2:E4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:00:31:c7:d8:b3:fe:63:08:c8:d1:ba:40:f2:cf:c5:eb:6a:
62:0a:15:38:28:94:a9:26:b2:00:76:cd:45:28:88:5d:4c:86:
b6:26:62:57:af:2e:22:8d:e8:97:41:c9:7e:ec:8d:1f:e8:b1:
94:b5:58:55:28:45:36:ed:63:1b:e0:d3:fd:6e:07:b6:80:c4:
55:04:21:1e:f9:4c:ef:4f:0c:52:44:ce:93:2c:f4:14:2e:70:
18:76:be:97:37:38:29:8f:f8:21:e8:12:f1:88:6a:4c:99:41:
2e:46:56:03:3e:1c:7b:5c:aa:a4:80:0f:2b:4f:11:f9:35:17:
10:af:a5:1f:ba:9c:02:68:97:0f:51:7d:1c:f1:f4:9a:b4:2c:
a3:b2:dc:2f:e2:b8:21:7c:8f:1e:cc:a7:ec:55:55:bb:38:cb:
7f:2e:b7:dd:15:87:b4:a6:f9:a9:a3:4a:f0:ef:ab:ed:6c:45:
72:e1:0d:19:6e:5a:ed:0f:01:aa:d2:fa:26:a7:00:6a:8c:ae:
59:d0:f0:1d:e7:0e:83:00:80:63:f1:37:21:36:9f:fe:5f:04:
4a:73:4b:fd:7b:33:70:90:0c:23:5f:c9:63:06:25:d7:12:c6:
dd:7c:e4:14:91:50:3e:c4:4a:78:8f:7e:fa:3b:ac:51:11:94:
ef:a7:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:56 2026 by rpki-client