Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hQiqJqRs/NKs75YLwcch/c6cyI53pWlZ9Cq9nJvX8Cg=
Subject key identifier: 7E:89:D9:63:B5:98:40:E5:FB:8B:69:42:7C:6D:36:6D:2B:D7:B9:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 370CFE6D30FF7AB971C70065402F777FBDB0CA92
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20383334.roa
Signing time: Tue 05 May 2026 09:46:34 +0000
ROA not before: Tue 05 May 2026 09:41:34 +0000
ROA not after: Tue 04 May 2027 09:46:34 +0000
asID: 834
IP address blocks: 217.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:0c:fe:6d:30:ff:7a:b9:71:c7:00:65:40:2f:77:7f:bd:b0:ca:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 09:41:34 2026 GMT
Not After : May 4 09:46:34 2027 GMT
Subject: CN=7E89D963B59840E5FB8B69427C6D366D2BD7B9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:d0:f2:9e:6b:3a:f2:f3:e1:ff:85:1a:3d:
3f:34:78:d0:8f:fe:4f:01:55:b2:16:68:de:54:64:
70:6c:5e:7a:c7:f5:12:35:3a:80:18:eb:2c:6b:f2:
b9:6a:f1:bd:7e:3e:bd:dd:be:3e:d8:6f:35:ab:be:
79:ea:ee:2b:b6:c1:b0:b9:66:26:04:df:6b:af:27:
a9:0c:3a:88:bd:c7:90:1c:1a:34:3c:2a:f9:6d:47:
0c:88:ce:84:16:4e:3b:e0:67:11:7f:2f:37:04:0f:
91:50:53:6e:f5:7a:59:bc:73:ab:9f:08:41:a9:b7:
1b:70:0a:15:30:e0:50:8a:28:a1:68:85:84:e8:2d:
45:9f:b6:da:6e:9d:67:23:e2:73:61:93:29:aa:2f:
60:ef:b4:73:79:bc:da:5f:5b:61:4e:8f:42:95:a5:
35:5d:1d:8c:17:40:c2:16:20:ce:96:5b:33:5e:b4:
b4:ad:1c:53:33:58:bb:21:e8:29:8f:ea:27:1c:4d:
7f:62:be:54:6d:b0:bf:c6:e2:9b:21:1a:b5:fc:23:
df:a0:04:49:9c:8c:57:77:b2:d9:5b:c6:00:f3:6c:
d9:6a:dc:20:e0:54:7f:b8:2f:06:ef:c9:37:91:59:
84:3c:29:5d:b9:e7:6f:05:93:81:0e:ca:c6:b5:2c:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:D9:63:B5:98:40:E5:FB:8B:69:42:7C:6D:36:6D:2B:D7:B9:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:84:e2:f7:38:37:9d:e6:2e:cf:59:0c:0c:f0:01:3f:6e:d4:
39:ff:1b:07:26:e0:a7:f5:38:2a:4e:47:74:15:12:e5:33:3b:
de:ec:3c:ae:00:d2:e4:99:44:eb:2b:6e:f4:49:22:69:2d:9d:
ad:d5:5b:ec:25:fc:50:7e:d6:54:8f:11:e5:0f:f7:fc:70:44:
1b:75:bb:b4:7f:72:d3:50:4c:cb:fa:4d:5a:93:d0:95:32:35:
ea:7d:e3:5c:c7:64:cd:91:5f:30:5e:f2:89:8a:3a:6c:7f:0c:
57:4f:90:1a:0e:36:45:5a:ff:1c:ea:2c:c4:fb:9f:e6:4d:6c:
6a:8e:86:f8:be:21:f1:e1:ad:a0:af:1b:1b:3f:37:c3:26:9f:
b1:ff:07:92:34:09:6b:14:13:66:b2:3e:9f:17:6b:42:bc:74:
34:c9:f5:2e:00:2e:ed:32:46:36:b9:cb:00:c9:a5:dc:51:ec:
54:0b:0a:3c:ac:69:bc:c8:be:93:f1:4c:5d:39:b7:f5:35:e0:
ae:06:91:ad:30:db:14:1d:b1:6a:b2:1a:5d:c5:c6:87:a9:e5:
c8:a7:88:ee:8e:61:24:61:fb:59:c2:4e:42:06:99:d5:b0:2c:
2e:17:2d:2e:3a:ad:05:4b:d8:c9:2b:69:27:13:d7:80:9f:99:
ff:98:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:54 2026 by rpki-client