Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3234322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WlPLA/LcM+ke68U1yTJaoIkWfNhLn0YZt/ZJ21wmlrg=
Subject key identifier: AE:90:32:DF:1F:E3:AD:F8:E4:40:B0:72:10:76:27:EB:FA:71:10:E4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55B0CC408E034D1F92BD98C79AADBFF017C32EB2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Mar 2026 11:51:17 +0000
ROA not before: Thu 19 Mar 2026 11:46:17 +0000
ROA not after: Thu 18 Mar 2027 11:51:17 +0000
asID: 834
IP address blocks: 217.217.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b0:cc:40:8e:03:4d:1f:92:bd:98:c7:9a:ad:bf:f0:17:c3:2e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 19 11:46:17 2026 GMT
Not After : Mar 18 11:51:17 2027 GMT
Subject: CN=AE9032DF1FE3ADF8E440B072107627EBFA7110E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:b8:c0:16:7b:5b:5b:fc:11:64:4f:2a:b4:
b8:97:b3:2f:25:37:f9:e2:be:1a:90:b6:56:45:3d:
50:ae:67:62:26:6f:d4:63:c2:2c:dc:6c:12:b6:89:
8a:f2:77:2d:4b:82:64:3e:3f:7c:3c:e5:e9:1b:ae:
ff:b7:23:b4:9e:ca:0e:71:41:40:0e:27:3c:80:4d:
55:09:f4:ab:14:5b:c0:bf:f0:37:b1:26:9e:43:bf:
04:a2:b0:ad:c4:c7:cc:af:80:41:45:6e:8c:ac:c3:
72:76:85:d3:1a:f8:c4:5a:d8:b5:8f:b3:b4:f2:2a:
d1:02:66:c1:89:f1:f0:2e:b8:93:35:88:a4:b1:4e:
69:45:ca:99:80:4d:cb:13:dc:37:9c:2b:d0:6a:da:
ae:ad:62:06:49:7e:c0:f1:30:4e:e9:6c:1d:42:9f:
7e:e0:15:d3:5b:fe:35:d5:66:70:fe:df:b8:d2:20:
ec:52:8b:71:b8:52:d0:4d:d5:d5:a8:68:7f:e9:ff:
a7:7e:79:b2:23:8c:26:eb:3e:4d:42:70:4f:c9:1d:
6d:45:98:21:56:d2:52:b7:9b:9c:ae:80:b7:1d:4b:
8c:c0:39:ad:aa:0b:46:27:95:c4:59:00:b3:fa:b4:
e9:ee:84:d0:e3:2a:ef:fd:2e:dd:47:f3:be:f6:aa:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:32:DF:1F:E3:AD:F8:E4:40:B0:72:10:76:27:EB:FA:71:10:E4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.242.0/24
Signature Algorithm: sha256WithRSAEncryption
34:05:eb:32:c4:5d:29:60:37:5a:ac:a9:ac:f5:41:4a:cb:87:
4b:8c:d2:af:be:48:66:c3:10:f3:fc:a5:a1:04:43:c5:ba:c9:
21:df:54:f7:a9:b3:cc:27:1c:39:d8:30:d3:aa:4b:da:91:31:
1b:9c:d0:c0:35:56:35:2a:62:cd:03:39:90:60:a2:16:21:c3:
ea:a1:ae:5b:f5:df:07:b4:08:ab:ed:a1:ce:7f:cf:f6:cc:2a:
e5:06:37:f7:10:d6:1f:f2:ca:8c:22:6a:87:1e:d0:42:8c:7a:
3c:2f:b6:f6:84:8c:36:6b:c4:a4:29:60:cd:62:ed:10:50:4f:
f6:d7:d3:8e:a6:dc:7d:8a:10:a7:fd:23:38:ac:64:f4:fd:b9:
5e:25:1f:ce:ee:80:2f:1e:3c:59:99:76:05:b4:f8:8a:59:11:
d9:bb:60:63:4c:1d:ff:79:67:1f:4f:49:ef:ab:f7:99:cc:0a:
19:e1:ef:d6:1e:b4:12:65:a6:8c:f5:4d:f7:b6:f7:f3:86:02:
43:e9:4a:37:79:c1:df:64:87:38:23:47:55:9b:cc:b2:53:e0:
fa:ca:4b:3f:ae:e6:2f:52:0c:97:cf:01:1f:d5:11:8f:72:b2:
a0:74:8a:19:c5:dd:c0:9a:61:34:72:0e:fa:79:e4:28:1b:a7:
05:ed:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:14 2026 by rpki-client