Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3231302e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: EyO+Inn19Ff4IxSWkGQLdSlZYvm7AtbSs/JtzRIDLrs=
Subject key identifier: EA:66:3A:A3:BC:E4:BD:FF:D8:89:CE:1A:F3:41:8D:71:D6:72:1E:E1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1EEF746CC41DB7A0DFE792FF4013EF22BE8AAA4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:08 +0000
ROA not before: Wed 25 Mar 2026 08:44:08 +0000
ROA not after: Wed 24 Mar 2027 08:49:08 +0000
asID: 48266
IP address blocks: 217.217.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ef:74:6c:c4:1d:b7:a0:df:e7:92:ff:40:13:ef:22:be:8a:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:08 2026 GMT
Not After : Mar 24 08:49:08 2027 GMT
Subject: CN=EA663AA3BCE4BDFFD889CE1AF3418D71D6721EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:ed:92:c3:0f:0a:a3:b0:d8:2f:ea:fb:83:
6d:68:3f:c3:64:95:a6:61:f1:19:fc:02:2c:83:17:
e2:a6:b2:5d:74:93:99:cf:ee:42:3c:0b:c5:ad:2f:
04:68:9c:85:52:2c:9f:49:42:e2:21:77:a6:aa:dd:
0a:82:da:19:11:e9:b7:6e:8b:06:da:5d:b1:c7:59:
c1:86:b7:cd:3a:2b:35:ab:96:3f:da:25:af:fa:6a:
83:d9:8d:91:ea:af:93:22:48:5c:67:e0:16:ab:4b:
ae:3a:30:cd:2c:0f:a5:68:e6:60:a1:3d:91:f4:86:
9d:1d:91:2c:73:2a:1b:d6:32:7a:c7:45:92:4f:30:
1e:17:36:12:53:42:0a:3d:c0:cf:95:b7:7d:7e:73:
50:61:2c:2e:5c:37:15:88:b9:2e:87:30:9e:67:1a:
49:87:34:6c:5e:e8:db:8c:8e:5e:c7:cc:68:fa:f3:
27:47:21:74:f3:56:3c:88:53:4c:2e:c4:22:47:75:
39:c3:51:55:3a:86:59:67:95:fe:5e:0a:04:06:08:
84:f9:bd:5b:3d:c2:a3:42:07:1b:b7:d7:b9:cf:bc:
82:fd:f2:17:a6:fb:a4:9a:00:fa:95:e5:2b:b6:5c:
fe:78:d0:09:bd:e0:07:d2:55:50:ee:87:67:7d:d4:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:66:3A:A3:BC:E4:BD:FF:D8:89:CE:1A:F3:41:8D:71:D6:72:1E:E1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231302e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.210.0/24
Signature Algorithm: sha256WithRSAEncryption
18:35:3d:90:bb:8e:08:0d:15:dd:e6:1c:b4:58:e0:80:c7:e6:
44:11:cd:82:55:16:17:46:4b:fd:dc:fc:f9:29:60:d4:a8:5c:
c7:c9:a1:85:4d:12:bc:71:ca:10:55:30:45:fd:17:9b:75:1a:
79:3c:a9:1b:5f:f7:ef:85:da:e6:41:d1:91:36:32:27:f5:4e:
7c:e1:3a:54:f2:c6:8e:12:d2:1d:dd:8b:e0:3a:a6:52:23:a2:
2f:01:32:e8:1e:fe:ec:9b:ca:f7:0f:6b:f2:c1:7a:bf:50:21:
b4:44:f5:ee:ff:61:7a:52:e3:46:d0:55:89:51:f5:b7:b8:69:
80:87:75:cb:a4:4e:52:86:24:38:53:29:0f:d1:c6:dd:2f:48:
0a:53:84:53:92:a6:c7:66:04:95:ef:9d:95:da:9c:9c:20:df:
22:76:71:2d:32:29:09:a8:2d:4c:48:ec:67:fa:14:f3:28:f7:
e3:6e:fb:85:ae:0c:fb:7a:ea:35:6b:6e:cf:b1:b6:6d:fb:8e:
d1:03:68:17:d3:e9:fa:05:93:15:13:ec:75:7b:f3:99:1d:9f:
7a:4d:33:20:ab:16:f4:8a:3b:80:34:0a:6f:2e:b7:19:70:1d:
7e:03:e6:21:cc:4d:ff:af:f8:79:26:dd:94:2b:fa:fc:e5:98:
31:36:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:51 2026 by rpki-client