Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3231342e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: cNV7p018/miaZ9zl5xq1/jdR3wAM1TjEatFJx85LohU=
Subject key identifier: 81:2E:C6:50:4B:DA:D4:8E:31:43:A4:6C:9A:63:05:54:B6:D8:3E:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 596517A029CEB59CE8670BDDF53A0865D57FACF8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:06 +0000
ROA not before: Wed 25 Mar 2026 08:44:06 +0000
ROA not after: Wed 24 Mar 2027 08:49:06 +0000
asID: 48266
IP address blocks: 217.217.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:65:17:a0:29:ce:b5:9c:e8:67:0b:dd:f5:3a:08:65:d5:7f:ac:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:06 2026 GMT
Not After : Mar 24 08:49:06 2027 GMT
Subject: CN=812EC6504BDAD48E3143A46C9A630554B6D83E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:84:f8:59:e1:99:ac:c7:9a:d7:d3:89:56:
16:4c:ec:5f:d4:b1:99:cb:f5:be:ba:cd:97:3e:10:
55:41:b0:f6:2d:93:4e:45:21:8a:59:35:a1:a5:26:
7e:27:ad:15:f5:43:3f:de:a4:69:8b:fa:c4:db:18:
98:f7:5e:32:dc:50:f1:fc:dd:ca:ba:75:3d:48:54:
32:c4:5b:3d:99:25:7a:98:92:63:dc:54:5b:28:49:
7f:06:4d:0a:ce:8d:5e:d1:17:a2:6d:b0:98:93:a0:
5c:50:dd:53:cb:dc:cc:9a:02:3d:64:25:cc:c2:ce:
2f:6e:43:2a:e5:bb:40:f0:d2:99:25:93:b6:8c:e6:
fc:53:8b:5c:62:ab:c0:c6:78:38:3e:2e:50:5d:e3:
a7:41:12:d0:2f:11:c3:2c:04:5d:5a:ee:5d:41:87:
15:1b:f0:70:f7:e5:ff:9f:de:48:57:b1:b3:1e:1c:
26:e0:bd:01:2a:15:0e:19:79:4a:02:cd:1a:c5:bd:
d7:46:bb:77:3c:df:3e:4e:49:e7:7b:66:29:3d:9d:
8b:63:8f:0f:ef:0f:80:93:4d:22:d5:aa:69:f9:ff:
ef:3b:30:62:a7:24:45:f0:46:af:be:c3:62:12:5f:
d5:96:89:09:e8:80:bb:15:ee:4c:08:3f:e3:d2:bd:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:C6:50:4B:DA:D4:8E:31:43:A4:6C:9A:63:05:54:B6:D8:3E:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.214.0/24
Signature Algorithm: sha256WithRSAEncryption
94:86:3b:a8:8c:74:65:76:6a:86:cc:fc:58:66:c2:5e:cd:bc:
62:e8:15:d2:78:e2:da:d0:9b:31:17:bc:8b:63:3c:48:27:dc:
b4:2e:fd:6b:11:14:00:78:8d:10:ea:1b:2d:a6:01:bc:22:91:
e5:94:f2:68:00:aa:1f:36:eb:5b:97:81:3f:2a:5a:46:48:cc:
c3:02:64:fd:59:71:72:ae:e5:4e:aa:77:58:53:4f:f3:b6:4b:
87:75:d5:f9:39:1f:7a:0e:19:ae:ef:30:f1:70:35:11:5d:6b:
45:37:9a:79:cf:47:8b:3f:d3:e8:1e:d8:f0:8a:14:31:cf:42:
6b:75:81:91:4a:bc:4d:3d:b7:d8:42:51:06:c2:45:b8:1d:02:
5b:6e:b5:dc:f1:ac:bf:a9:26:8e:f4:16:21:04:23:36:36:b8:
66:e8:2c:ed:f2:e6:ca:64:12:04:8b:61:48:6e:19:5a:5a:4e:
50:fd:c8:06:7c:eb:16:f0:99:b6:e9:ce:d2:91:98:5a:6c:df:
02:e3:96:fd:5b:eb:e1:b1:65:d4:ec:31:a6:8f:c2:97:17:83:
36:7f:e0:2c:8d:07:10:df:ef:1c:f2:41:bf:ce:19:f4:26:2a:
3b:26:17:8a:99:1d:e5:2e:a8:28:22:f1:8e:ad:d5:ef:91:09:
0a:e3:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:53 2026 by rpki-client