Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nMBRiWex/KOQbUlHSWszrqxMIH1LZXFz0eleMtZu6EM=
Subject key identifier: C7:EC:DB:C7:85:31:C9:E0:88:A0:D9:0A:D5:6D:FF:F8:0A:C9:04:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5458E3A494EC1D3AE76E0B9AACCA56EB14559686
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:55 +0000
ROA not before: Tue 21 Jul 2026 11:59:55 +0000
ROA not after: Tue 20 Jul 2027 12:04:55 +0000
asID: 834
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:58:e3:a4:94:ec:1d:3a:e7:6e:0b:9a:ac:ca:56:eb:14:55:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:55 2026 GMT
Not After : Jul 20 12:04:55 2027 GMT
Subject: CN=C7ECDBC78531C9E088A0D90AD56DFFF80AC90454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:2f:05:6d:9f:81:d4:3f:7e:18:e6:26:81:
65:91:a1:7f:21:ed:09:b1:9c:28:70:8d:f0:72:ef:
3b:d1:8d:98:7a:c4:c3:09:73:3f:f3:d3:62:9c:b8:
cd:a2:51:c6:fc:9f:9e:65:9c:9e:29:7e:a5:da:3c:
2c:22:a1:d2:d5:0a:bd:c5:21:25:8f:24:0d:4d:4f:
34:2a:85:ec:68:5f:03:e5:6e:5a:cd:e4:66:3c:da:
bc:52:81:2c:44:6d:27:c3:2e:8d:fc:9c:85:45:d8:
ac:92:5a:ae:23:78:62:48:f0:eb:10:bb:03:a4:89:
03:b4:ac:a0:14:78:e0:fe:d2:82:1f:34:42:38:73:
31:f4:b6:13:92:39:89:50:4c:37:b3:2b:97:64:66:
ac:bf:b0:77:e2:da:f5:be:1e:aa:51:42:8e:22:b1:
20:de:ac:de:1c:19:f3:90:cc:ad:4a:4d:b8:32:10:
16:e6:6d:64:98:1c:19:93:42:53:68:40:6e:8c:4f:
b3:4d:52:f8:67:d7:32:e1:d4:8b:93:9a:8a:96:dd:
6e:66:26:b9:d7:e7:c5:d1:38:67:ac:6c:6e:a7:66:
d7:53:b9:45:c4:3d:cc:ef:af:79:0c:b7:e5:f0:f0:
55:cb:11:dc:a0:c2:1e:c0:dc:a6:0c:d8:9f:32:10:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EC:DB:C7:85:31:C9:E0:88:A0:D9:0A:D5:6D:FF:F8:0A:C9:04:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fc:d1:3b:ef:27:87:f5:af:8c:a9:d4:13:08:65:6f:0f:ae:
a1:71:b5:bc:43:2d:20:b4:9c:78:bd:0a:ab:f7:7e:6a:5b:3f:
ff:71:b4:d2:4a:f3:c8:cc:dc:38:e2:f3:a7:62:5e:21:e6:bc:
4f:0c:07:10:2a:f6:e6:62:8a:28:a5:42:c5:76:94:93:5d:43:
0b:d3:8e:bd:9e:32:cc:ae:97:50:f3:28:ee:30:e4:68:fb:69:
37:4d:30:11:dc:85:19:c3:54:de:42:10:cd:dc:b0:c9:72:71:
76:20:f0:e8:c6:7c:16:42:ca:81:8a:6b:73:d2:b0:15:29:35:
e8:e8:c0:bc:c5:77:c4:06:9d:01:49:c2:7e:81:bc:db:2d:ab:
11:0c:b6:2b:23:66:f7:d4:ac:ba:02:b5:a6:8d:04:99:65:1c:
e8:ae:eb:98:2f:01:98:82:77:5d:bf:f9:d8:58:14:ef:ca:39:
75:e6:6b:3e:7e:0d:54:78:7e:33:ad:38:69:2d:ad:79:a4:f5:
ef:2c:48:d1:99:bd:47:85:8e:31:a3:f4:8c:b7:b5:f2:94:8c:
1e:c4:8b:67:19:03:7c:80:b9:9a:d1:0d:95:d9:da:ba:7d:e2:
1f:37:22:c7:09:fa:62:94:f8:d9:52:da:a7:38:a7:48:d8:f6:
4f:0b:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:48 2026 by rpki-client