Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231392e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3231392e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: WQbW/1WGBxffXLVgICyPnMxh0eWo8tkcMHjOcRsgROc=
Subject key identifier: 77:72:72:92:B2:E2:44:D6:0B:87:69:F1:58:95:F1:FC:85:1F:A4:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 608D885EBD50DCEC84B51391F6769D00698612EC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231392e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:03 +0000
ROA not before: Wed 25 Mar 2026 08:44:03 +0000
ROA not after: Wed 24 Mar 2027 08:49:03 +0000
asID: 48266
IP address blocks: 217.217.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8d:88:5e:bd:50:dc:ec:84:b5:13:91:f6:76:9d:00:69:86:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:03 2026 GMT
Not After : Mar 24 08:49:03 2027 GMT
Subject: CN=77727292B2E244D60B8769F15895F1FC851FA457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:6d:94:b3:e6:71:20:87:4a:fc:87:93:d7:
6c:e7:70:0b:fd:10:2a:b1:7f:79:49:e7:6b:14:d8:
45:cb:84:86:f7:22:ce:59:a2:46:48:ea:3d:7a:80:
fb:5e:30:fe:49:5e:84:ab:d3:67:d1:5e:bc:48:83:
da:8c:bd:3e:35:ff:ce:d3:86:9f:4e:7d:91:a7:38:
39:d4:f4:e6:04:ae:78:bd:f3:1d:10:35:63:a2:cb:
e6:b0:20:c2:f9:be:88:65:59:d2:c8:18:13:03:b0:
00:5a:f4:ac:11:e9:f4:f0:cf:ee:7c:38:ef:41:05:
c3:8e:1e:3b:ec:45:97:47:e8:67:3a:dc:bb:56:3f:
20:64:05:3b:a4:8b:3d:3f:e1:43:f5:f3:8e:2e:a7:
34:5f:3e:0e:1a:9e:88:d9:6d:86:63:a3:88:35:bb:
26:29:46:75:c7:89:13:a5:05:26:58:dc:56:12:fd:
16:f7:6b:ba:f7:b7:a1:03:1e:b8:64:a8:b8:cd:f0:
e4:46:d4:cf:05:4f:35:3f:91:9d:f2:ae:53:2f:74:
39:08:6e:63:67:48:58:45:e8:72:93:89:86:f0:f5:
f6:b2:00:f3:77:2a:b7:2e:33:9f:38:fd:87:8c:5e:
37:ff:90:d2:6e:38:42:f8:39:2d:6c:bc:79:27:02:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:72:92:B2:E2:44:D6:0B:87:69:F1:58:95:F1:FC:85:1F:A4:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231392e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:52:c2:ed:4c:e5:9c:e9:54:1e:ec:36:07:a0:9f:3e:f1:e7:
76:6f:fb:4a:ca:72:c6:83:58:ec:42:51:0a:b2:d8:1c:ab:2f:
ad:62:6b:9b:aa:cf:d5:f3:b3:de:6e:fe:c7:fe:99:66:c3:a0:
05:ec:84:99:36:68:aa:1f:70:bf:92:b6:f5:26:9d:a6:5d:28:
94:bd:ac:be:54:16:36:23:90:87:4d:b1:dc:db:bd:b9:c2:d5:
86:b7:90:e1:2b:2c:87:71:80:d4:74:c3:dc:ef:2b:ee:e5:78:
b8:ce:56:e6:2d:e3:5d:3b:15:57:40:3f:66:3d:90:a7:33:ed:
76:0f:c5:a3:c7:eb:9b:a0:d6:5a:38:a7:cf:b1:1d:22:0e:71:
0c:d4:f2:a4:52:cd:2b:e2:91:54:81:c9:b0:e1:9f:dd:06:90:
5d:59:a6:8c:66:32:dc:be:66:f9:18:56:c1:82:d8:69:40:7c:
09:6d:26:41:7c:32:1f:e9:79:9b:09:4a:0e:db:79:59:fa:db:
a8:61:6a:2d:43:29:1f:7f:5c:c2:45:6e:44:34:60:72:68:68:
5c:60:af:b1:ec:b5:6d:04:9f:7a:5b:22:02:c8:99:c4:bd:6e:
ae:08:89:05:e9:06:b9:97:6c:0e:42:df:a0:29:99:c2:c8:fa:
53:3c:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:49 2026 by rpki-client