Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e2036303739.roa
File: 3231372e3231372e35322e302f32322d3234203d3e2036303739.roa (raw, json)
Hash identifier: VBrL9FF5dKe9OhLvzA1HBe38qfQMtQxSaiX0xqs0iX4=
Subject key identifier: 78:62:2E:15:75:20:67:3B:8C:F1:91:9C:95:D7:2E:CE:0B:48:43:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 264495C3188A3930A3B74DF6C658CE3665F0015F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e2036303739.roa
Signing time: Mon 27 Apr 2026 08:18:54 +0000
ROA not before: Mon 27 Apr 2026 08:13:54 +0000
ROA not after: Mon 26 Apr 2027 08:18:54 +0000
asID: 6079
IP address blocks: 217.217.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:44:95:c3:18:8a:39:30:a3:b7:4d:f6:c6:58:ce:36:65:f0:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 27 08:13:54 2026 GMT
Not After : Apr 26 08:18:54 2027 GMT
Subject: CN=78622E157520673B8CF1919C95D72ECE0B48439B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:e2:e3:3b:d0:6a:12:c7:ea:d5:6a:94:a3:
83:a9:91:74:c1:40:da:a8:a1:94:98:fc:a1:68:34:
cf:1c:72:2a:08:40:ec:02:ef:a9:9b:9b:81:57:af:
c4:97:fa:7d:4c:8e:89:40:5f:60:62:de:35:b6:61:
48:74:f2:fb:dc:64:5b:46:4d:b0:ff:5f:44:f2:31:
ee:11:6c:d4:fc:46:2d:bd:bc:39:8c:2f:4b:26:a0:
78:0f:2d:67:d7:f4:3c:ef:ae:d6:bb:a6:cf:c1:10:
1d:ba:4c:6a:fb:39:7d:e7:96:56:6c:a1:58:13:83:
1d:2a:ba:95:57:0a:12:f6:00:99:02:b9:32:a4:f4:
9d:3e:75:2e:23:3a:c5:d2:ec:00:51:61:30:2c:92:
92:59:eb:21:54:fb:12:8d:7f:30:2e:c8:75:63:4d:
f7:37:82:62:40:c3:70:3c:0a:99:f1:0e:5e:19:4f:
e3:d4:a9:fc:d6:49:16:5f:78:2b:f7:5f:e6:19:7d:
86:dd:56:b1:27:b9:fb:b0:9f:18:fd:a3:a7:de:93:
70:82:c6:58:6e:4e:18:32:b9:72:75:e3:d4:6a:61:
ef:c3:9e:c5:6c:60:45:7d:f9:25:a1:25:89:d3:90:
da:20:e3:d6:08:63:17:f6:7c:50:77:5e:76:5e:70:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:62:2E:15:75:20:67:3B:8C:F1:91:9C:95:D7:2E:CE:0B:48:43:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.52.0/22
Signature Algorithm: sha256WithRSAEncryption
75:4b:6b:ce:81:93:ca:72:eb:00:2f:8c:7f:ec:66:00:52:d6:
98:60:27:9e:35:82:31:3d:89:9f:54:5b:a4:12:83:5d:ac:79:
06:e0:00:2a:b5:fd:1d:f0:28:cb:e3:f4:27:43:f7:cc:0c:92:
41:06:01:88:ee:42:ef:3f:b6:a9:6e:3b:0f:66:18:41:bf:df:
bb:70:e9:7c:57:3b:fa:64:c7:96:07:f1:a7:30:57:2f:0f:53:
e4:52:e5:77:86:ea:f7:05:c6:29:9c:7c:c6:fb:a2:76:89:75:
7d:cd:b8:2d:34:78:16:85:d8:e7:cf:cc:29:58:d6:1e:cb:ed:
4b:c1:44:8e:06:84:3a:f5:33:3c:ae:fc:17:d9:66:a7:e6:1c:
dd:6d:84:5d:e6:25:31:16:4c:47:f8:bf:b8:fc:19:9c:d1:87:
f3:c3:2f:59:de:3d:0e:c8:fa:b6:ee:67:3b:71:4d:57:6c:37:
54:f2:43:e1:63:29:46:1d:3a:b9:a1:c6:c0:a2:a3:9b:31:c0:
c6:a3:05:e0:18:43:35:59:a3:e0:e4:05:5b:30:8e:08:44:65:
27:83:16:91:24:a1:bc:3f:e6:0b:cd:8e:ff:de:c0:0b:d4:66:
ac:89:e8:4b:28:23:bd:a2:92:9c:f2:98:e9:5e:08:44:89:f8:
70:42:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:05 2026 by rpki-client