Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gXIspTaKZ6JdcIJqI34NxdfgkLqLnE0mKf9s4rRyRlk=
Subject key identifier: F9:67:43:E7:84:28:03:A1:EA:C1:60:03:11:3D:A6:4D:36:7E:53:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 351F9A4A27C3B3D2948FB1EE13D67FD153CFD437
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:05:06 +0000
ROA not before: Tue 21 Jul 2026 12:00:06 +0000
ROA not after: Tue 20 Jul 2027 12:05:06 +0000
asID: 834
IP address blocks: 217.217.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1f:9a:4a:27:c3:b3:d2:94:8f:b1:ee:13:d6:7f:d1:53:cf:d4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 12:00:06 2026 GMT
Not After : Jul 20 12:05:06 2027 GMT
Subject: CN=F96743E7842803A1EAC16003113DA64D367E53F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:5e:c2:51:78:39:bb:d6:70:d5:16:cd:b0:
14:a2:65:cd:94:d3:6f:60:c1:77:24:07:1f:a9:51:
ad:3d:5a:16:62:e5:1f:41:44:d9:84:c3:88:37:0c:
55:78:97:84:ad:e0:49:08:37:c0:80:cc:c7:8e:0e:
bf:52:dd:61:66:b0:cf:c1:d1:87:8d:31:87:1f:c8:
93:e9:0a:10:1c:74:65:7e:7d:35:90:5b:70:e0:97:
48:40:b7:87:96:a8:76:30:1b:c4:bd:9f:32:00:f0:
19:13:36:2b:03:c0:7c:fd:51:bd:c5:01:6c:e2:76:
0d:86:a2:a1:01:86:a9:9f:c0:2d:7e:b5:f6:b5:e7:
65:1b:e7:6c:c3:6d:51:08:fd:a2:47:bf:3b:65:a2:
80:41:20:ef:0b:c7:dc:73:4b:4f:d8:36:9f:48:67:
3a:30:2a:4d:75:9b:93:97:3d:ba:dc:3f:98:c5:97:
14:c7:fe:b2:87:5d:70:c0:4e:27:d7:fe:99:6f:a6:
88:30:fd:1f:c3:5d:d2:b7:dc:dd:99:ae:1f:a6:29:
7b:ca:19:d7:ec:36:f8:1c:ca:2c:2c:cb:3e:68:92:
2d:e0:5c:70:21:4d:a6:b6:08:e0:73:de:77:60:27:
91:9d:a9:53:c4:74:6a:49:a5:1e:41:3a:1d:a2:80:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:43:E7:84:28:03:A1:EA:C1:60:03:11:3D:A6:4D:36:7E:53:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.214.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b4:bc:0a:2f:87:06:42:11:14:c7:c0:3f:30:38:e2:d0:65:
9b:61:c5:c1:d8:fd:fb:a1:13:ad:05:bb:bf:8e:93:a5:85:ea:
ee:67:5a:b4:19:f3:5e:3b:04:33:03:e7:8b:3a:d2:20:e1:8b:
2b:9f:58:35:81:7b:44:f4:29:69:5e:1a:72:11:cd:43:a4:cc:
ac:f6:df:5f:ec:51:4a:c2:98:f7:59:7c:20:8d:05:ef:86:4a:
00:40:d7:16:5f:7b:06:b2:35:ab:cc:22:e3:fb:19:f1:11:32:
97:46:e7:5f:8f:7f:9a:f2:d3:f0:e3:17:de:24:e8:88:d6:0f:
66:2a:5b:ee:8c:cd:23:3c:cd:19:ee:8f:09:7e:c9:d6:49:f9:
79:7d:d0:55:7e:bd:2b:be:7b:4d:3b:51:36:02:c9:36:00:1c:
58:37:02:53:ac:d4:c6:ff:b2:d5:b2:5d:ae:fc:9e:83:24:ab:
d5:14:8d:1c:1a:39:04:cc:8f:a2:62:6c:31:35:6c:93:7d:54:
f4:99:74:44:52:02:24:8c:88:9c:a5:8b:e3:88:14:ed:91:3f:
8c:15:b2:4d:f5:48:e2:25:0a:4e:23:dc:35:14:a7:89:c7:ff:
0e:68:e5:a6:7e:ad:4a:85:35:b0:21:46:a9:e3:55:8c:0a:af:
bb:16:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:00 2026 by rpki-client