Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: fPxGnC+CiCuGD0hbFiy7g4oSp470NUKhIvM+hX8jRMc=
Subject key identifier: 7D:94:69:79:A8:D6:A3:7B:F3:16:6F:33:FA:CF:08:97:53:1B:6F:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D10639721FF3E40E627DF5EA4E1B5C17048D1FC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:42 +0000
ROA not before: Tue 21 Jul 2026 11:59:42 +0000
ROA not after: Tue 20 Jul 2027 12:04:42 +0000
asID: 834
IP address blocks: 217.217.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:10:63:97:21:ff:3e:40:e6:27:df:5e:a4:e1:b5:c1:70:48:d1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:42 2026 GMT
Not After : Jul 20 12:04:42 2027 GMT
Subject: CN=7D946979A8D6A37BF3166F33FACF0897531B6F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:b8:59:e7:8a:87:8c:be:c0:1a:f9:f6:3c:
6c:dd:88:0c:52:71:65:fe:c6:36:2f:10:a1:66:25:
d3:e2:ed:92:0d:06:0c:d5:a0:58:a7:1f:b4:58:a4:
2a:4a:55:93:24:7f:96:33:e4:28:e7:05:e5:25:66:
5f:e7:3b:2e:26:e4:26:7c:38:ee:85:06:3c:37:fb:
9e:7a:2a:54:23:19:df:b5:b6:a6:aa:03:a9:82:5f:
29:8f:08:ff:d1:a9:e9:15:7c:07:25:59:25:ac:08:
03:8d:1b:99:20:e2:ac:d8:e8:cc:ea:10:81:d9:4a:
75:24:64:8f:ed:96:cb:ce:30:e0:5c:07:a1:56:54:
04:9c:29:28:f7:82:49:e6:17:51:16:56:9a:60:e7:
75:c0:8e:b5:cc:3f:82:70:9a:94:46:5a:70:ca:b2:
18:d1:ff:ad:0d:91:14:8a:40:49:bf:4b:19:02:dd:
12:9c:cd:aa:4f:34:4b:5e:53:32:71:2c:95:97:b7:
54:50:04:30:4e:da:2a:5b:3f:f9:e5:1b:7a:3c:17:
87:c0:71:e1:2c:f1:3f:62:75:86:81:94:a6:a6:29:
ad:05:70:70:cd:e3:be:e9:c2:57:44:d6:2a:58:a8:
76:fe:c2:98:93:4e:29:14:f0:80:63:a8:44:d7:14:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:94:69:79:A8:D6:A3:7B:F3:16:6F:33:FA:CF:08:97:53:1B:6F:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.207.0/24
Signature Algorithm: sha256WithRSAEncryption
59:98:a7:05:85:b9:3d:ba:d2:d9:fb:4d:7d:c4:e6:19:1a:c6:
89:0e:67:7c:2c:0d:f0:ff:a3:fb:3e:65:a0:12:ec:cb:7a:29:
44:81:4d:05:49:47:0b:fd:76:9c:ab:82:d9:9d:61:86:c8:a9:
70:b5:5d:f4:25:94:84:32:90:70:4e:eb:62:d3:66:2f:b7:46:
4e:03:36:b2:ca:02:be:c2:eb:b6:52:36:7e:69:58:0f:7d:c3:
98:a2:f5:7e:88:8a:8f:14:b1:87:10:60:64:11:02:09:f3:c8:
fa:d5:55:58:55:84:0b:f0:3f:73:bd:47:26:7c:1c:7b:f6:3d:
d5:4a:2b:cb:f9:71:c3:04:36:f5:38:08:cf:fc:8f:9b:9b:af:
ee:28:60:4b:b2:8c:9f:70:16:2b:25:6f:26:0c:32:28:69:74:
59:d9:25:05:3a:ad:43:98:d2:f0:0d:94:21:db:d9:a6:83:3a:
f4:49:8b:18:ee:c2:dc:ef:ac:6d:97:80:5b:30:77:5e:eb:53:
d3:2c:69:39:97:a2:82:f6:7c:dc:83:a9:fe:d6:cf:ce:e7:21:
c1:14:21:36:de:d3:89:c0:28:70:ad:3f:18:08:40:7a:ee:2f:
65:4c:dc:1e:0b:ac:26:ca:ba:21:56:6d:eb:e6:c3:be:46:39:
fc:db:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:10 2026 by rpki-client