Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232312e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3232312e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: MCS8Pm67QnECkbAv3rUTS4BjUOUzaS7V/wO3AewWjBA=
Subject key identifier: CD:0C:96:01:3B:82:42:05:D0:33:2D:43:C1:DE:89:6E:56:B0:96:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 65B1ECABCC1836AD4DF2AD8AA165143C4E3F71BB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232312e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:02 +0000
ROA not before: Wed 25 Mar 2026 08:44:02 +0000
ROA not after: Wed 24 Mar 2027 08:49:02 +0000
asID: 48266
IP address blocks: 217.217.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b1:ec:ab:cc:18:36:ad:4d:f2:ad:8a:a1:65:14:3c:4e:3f:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:02 2026 GMT
Not After : Mar 24 08:49:02 2027 GMT
Subject: CN=CD0C96013B824205D0332D43C1DE896E56B09654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:fc:a2:5a:15:9d:64:ea:a5:29:85:d8:d4:
8b:c2:fc:5a:d1:c7:38:1d:0a:d2:c9:07:c5:eb:05:
56:a0:e5:76:5a:24:8e:5c:d9:b9:c2:19:f7:66:55:
1f:aa:03:c4:9a:ac:91:c1:b5:17:0a:38:04:30:f7:
8b:d0:ff:d9:2f:5c:09:2e:3f:30:e7:29:a3:6f:01:
13:55:83:00:ec:2e:e6:03:ba:3c:16:4e:32:df:31:
ec:47:03:9b:79:dd:4b:86:d9:e0:c2:75:86:77:62:
a6:b0:9d:26:55:4a:35:d6:5c:63:fa:0a:c4:ac:d7:
5a:27:47:1c:88:eb:c1:3a:ab:33:cb:54:d1:be:3f:
72:97:f0:44:ab:a0:c4:94:96:cb:1d:7d:7d:cc:8b:
d1:75:45:79:56:b5:83:42:df:6c:35:8c:5b:a8:02:
c1:23:d8:94:8e:7e:0f:a6:4c:bd:7a:90:46:da:06:
fe:36:bb:b4:62:6c:70:b8:fe:99:4a:e0:ac:78:29:
b9:3b:d9:64:89:01:65:6d:b1:04:08:b2:89:86:1a:
66:64:45:03:cf:41:4f:63:63:e2:5c:e1:68:c1:6b:
57:4d:6f:1d:b6:33:85:b3:d6:ec:30:32:bd:58:f1:
27:7f:7d:21:3b:c2:e5:f7:91:51:f4:aa:ba:18:9a:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:96:01:3B:82:42:05:D0:33:2D:43:C1:DE:89:6E:56:B0:96:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232312e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.221.0/24
Signature Algorithm: sha256WithRSAEncryption
58:12:c1:3e:27:a9:65:76:85:85:97:bb:b3:5e:8f:52:3a:41:
e7:5f:75:a3:87:08:a1:2d:40:4c:b8:ad:03:1f:40:4a:51:be:
4b:c3:d2:00:23:d8:a1:db:f3:83:22:61:86:e5:41:8b:16:64:
82:02:bf:14:3b:c6:10:6e:ec:72:65:6f:7a:61:85:5b:e8:2c:
eb:f8:69:b6:bf:47:ce:66:ff:de:a8:e4:5c:ee:03:c4:e0:95:
b8:df:3e:b5:a4:0c:a6:68:b3:0f:a2:cc:bc:a0:5c:80:67:a0:
e3:5f:22:ce:ec:78:94:12:e3:c4:50:e0:76:a2:0a:75:dd:96:
a6:07:62:92:55:51:8a:bb:54:3c:ed:3e:68:54:7e:4f:c6:57:
51:6f:1f:3a:26:da:4a:29:f3:92:29:29:79:b1:3d:dc:49:3d:
6a:b7:7c:7c:b1:94:18:64:16:d2:2c:b1:03:eb:e5:ae:76:1a:
3d:c3:85:88:d7:a2:d7:f7:b6:6f:29:da:5f:dd:2f:dc:39:c9:
c6:54:1f:ef:b4:12:8a:2f:91:5d:17:a9:23:ed:91:08:59:8c:
a2:a4:ef:16:b0:9c:d4:d8:b6:51:6a:4a:dc:76:44:1c:df:d8:
cf:8c:95:f1:53:90:ba:2d:2b:d6:6c:26:3b:03:9f:b6:70:0f:
3f:26:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:49 2026 by rpki-client