Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: baOBIGE7FAZ1KaQ0fkwAwffamiJyrOlFQfum+oBo12M=
Subject key identifier: 2F:76:58:D5:AF:A5:E5:1D:74:F6:3D:DD:7B:44:5D:D9:F7:D3:D2:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 44DB7F2472F7431FD8FE5ACBC453C6CF91E6D775
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:05:09 +0000
ROA not before: Tue 21 Jul 2026 12:00:09 +0000
ROA not after: Tue 20 Jul 2027 12:05:09 +0000
asID: 834
IP address blocks: 217.217.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:db:7f:24:72:f7:43:1f:d8:fe:5a:cb:c4:53:c6:cf:91:e6:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 12:00:09 2026 GMT
Not After : Jul 20 12:05:09 2027 GMT
Subject: CN=2F7658D5AFA5E51D74F63DDD7B445DD9F7D3D269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:37:33:8d:68:42:ba:7d:ab:67:6f:a2:03:
f5:3b:41:1e:63:ff:47:fc:45:95:46:71:bf:46:3f:
88:a5:11:2d:7b:d0:57:02:14:3e:7d:80:2b:49:f0:
09:97:16:b5:1e:02:5f:71:48:08:10:7a:32:0e:65:
db:d4:b8:79:41:19:42:3c:b6:cb:4b:4b:d2:c3:49:
11:e7:59:ce:44:93:4c:52:48:e4:7d:ed:e2:50:4e:
f8:79:2a:48:f3:d5:c3:85:78:53:49:0c:8a:c7:b9:
e4:be:11:dc:93:8e:9c:2c:1e:d1:23:4e:99:02:92:
68:0c:22:ad:84:50:8b:8b:96:74:01:be:78:7d:79:
3b:45:3c:e4:8f:8b:8e:68:ec:fe:10:0c:c2:f3:67:
c8:11:4f:22:b8:20:a7:52:d6:f4:84:9c:ca:26:fd:
6e:61:09:4c:87:57:e2:56:7b:0c:9e:84:56:90:d7:
69:6c:ce:2f:04:c0:ed:13:f9:62:aa:3e:d2:1d:84:
be:5c:bf:2f:16:11:0f:e1:48:ee:fe:51:f7:b8:f8:
f0:48:f9:5d:44:9e:4c:51:d6:57:b5:49:f0:cd:e3:
62:ba:9e:c5:62:7f:a9:0f:cd:f6:fc:39:15:a7:9e:
c0:2d:8b:fa:f1:25:1e:80:bf:83:94:66:30:c6:72:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:76:58:D5:AF:A5:E5:1D:74:F6:3D:DD:7B:44:5D:D9:F7:D3:D2:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.215.0/24
Signature Algorithm: sha256WithRSAEncryption
51:29:13:94:ea:1a:9a:f4:31:5e:87:44:08:55:ca:ec:a9:d3:
06:2c:a5:5a:8f:36:03:e0:d0:70:22:49:e3:07:80:da:87:3e:
e6:6c:40:15:eb:b5:d5:09:3c:7d:d8:f2:27:b0:e4:13:2c:4a:
d7:80:ab:25:41:7f:52:10:58:5a:46:0c:6a:5a:98:a7:4c:e1:
e0:80:65:e7:bd:a1:22:7b:ad:a0:2b:90:c9:d2:0d:81:7c:4d:
23:9f:d8:64:de:f5:2d:cd:1e:40:d5:27:59:01:95:d9:95:8d:
3a:90:c8:88:b9:fc:fa:7e:b2:96:27:1d:0b:bf:b9:55:a2:0c:
20:4a:05:ae:56:9b:3f:e4:8c:28:d7:ec:c6:58:8a:8c:26:0b:
1c:5b:a5:10:8f:22:7b:de:a0:ff:54:e4:1f:5f:15:cd:7a:36:
47:a5:97:8d:52:94:c9:10:04:88:e4:a0:91:99:5d:4f:3e:4a:
f9:02:77:9f:a3:47:50:4a:69:37:1f:05:ab:af:81:2e:5f:89:
66:77:1b:1d:26:c1:9c:cc:25:5c:b8:60:4a:de:d2:40:6d:41:
42:5c:3a:0d:6a:9f:e1:b9:6c:03:31:8f:22:0c:d9:04:3c:ca:
35:c3:7f:4d:86:db:ba:e5:cc:e3:5b:61:06:c3:d0:b2:80:39:
e7:a6:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:54 2026 by rpki-client