Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232302e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3232302e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: UwthI11OQFC7Nq3hN+ph92LXKqqUXvslK8xIC3LagBQ=
Subject key identifier: E9:99:76:A6:97:CE:11:92:61:66:A1:1A:29:29:24:8D:F9:12:43:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B2C8503692EAFF7BF0807CB9EAB09C9B8A8D4B1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232302e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:02 +0000
ROA not before: Wed 25 Mar 2026 08:44:02 +0000
ROA not after: Wed 24 Mar 2027 08:49:02 +0000
asID: 48266
IP address blocks: 217.217.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2c:85:03:69:2e:af:f7:bf:08:07:cb:9e:ab:09:c9:b8:a8:d4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:02 2026 GMT
Not After : Mar 24 08:49:02 2027 GMT
Subject: CN=E99976A697CE11926166A11A2929248DF9124327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:8b:61:03:87:09:66:2a:0c:46:02:ec:84:
12:d1:6b:6f:10:5c:6c:a2:5e:fc:2f:30:a4:c8:d8:
0c:0c:54:86:0e:5a:6c:c9:9c:4b:22:27:93:d2:d7:
0f:66:e9:3e:8e:1f:7a:41:48:8c:25:44:c4:e6:30:
1a:5f:d4:a6:b2:63:ae:5b:a7:8e:49:ee:6a:c2:6e:
6b:9a:6c:bc:32:db:3f:9e:f7:12:79:33:19:be:27:
1f:b4:82:54:b0:2a:8b:be:a8:1f:1c:c8:c0:6b:a9:
1e:de:67:b2:ce:b6:60:37:14:63:e1:b2:da:f9:e0:
12:6d:ad:03:85:ab:b9:fd:9c:a3:8a:67:04:e5:ff:
c4:46:25:8b:27:ed:fb:b4:7b:e5:e7:93:e3:b3:93:
d6:ca:4e:03:9e:9e:df:5a:81:62:38:11:84:bd:f5:
b2:50:fd:ea:95:1f:c4:df:46:27:a2:f5:09:8e:97:
c2:53:ac:e9:ad:c0:11:6e:6a:12:b2:d8:82:04:37:
07:c1:9c:da:3f:47:9c:f4:a1:45:7c:4d:1f:1d:b8:
e4:82:fe:a1:1b:c9:56:d2:00:60:84:1f:ca:5b:8e:
c7:43:be:26:3b:1f:06:c4:86:21:bc:f6:ac:92:c8:
3d:5a:d5:89:77:d1:83:55:45:8d:f3:0d:8c:b1:33:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:76:A6:97:CE:11:92:61:66:A1:1A:29:29:24:8D:F9:12:43:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232302e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b7:f3:1f:80:1e:5e:e7:92:88:60:1d:4b:bb:e3:56:2c:20:
22:6b:09:32:51:a1:ec:ff:06:59:65:89:52:76:d4:0c:12:24:
c0:26:5a:99:48:ca:2e:59:a5:41:22:56:56:47:3e:42:fa:a8:
82:cd:ed:95:f6:48:b3:3f:d1:04:07:0a:65:c5:63:5a:8e:a9:
4e:f4:d5:07:54:3f:ad:0b:e0:b9:db:9f:98:0e:f3:5c:ad:1f:
49:89:78:2c:f5:db:bb:83:05:ec:18:5d:f7:f9:47:5b:08:d5:
d4:61:e8:2b:6d:3c:64:f9:60:eb:20:9c:4c:11:eb:27:8f:9c:
1d:54:16:be:d9:ce:cf:0b:3f:07:8b:8c:fa:e7:6f:33:81:36:
2b:ba:0b:3a:5a:ad:39:23:2a:96:07:95:57:84:7c:8f:f1:c2:
f7:c8:2b:3f:88:be:2b:ab:af:79:13:43:d3:31:42:c4:ad:36:
e1:98:1a:5a:e5:24:09:7b:1e:99:63:9a:29:57:40:f1:1a:51:
3d:be:b4:e9:17:7a:92:34:89:ce:9d:f8:4c:ad:43:28:15:76:
69:07:27:8a:af:47:98:43:49:13:23:a4:4c:2f:b9:22:6b:cf:
5d:72:3a:f2:d3:93:fa:1a:15:fd:bf:56:7e:ed:db:fe:eb:a7:
44:ea:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:50 2026 by rpki-client