Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e20333939393535.roa
File: 3231372e3231372e35362e302f32322d3234203d3e20333939393535.roa (raw, json)
Hash identifier: Vt0McqPqqcg3VXnce7HlmPI7PGfuvC2+t6mO9woebK4=
Subject key identifier: D8:B0:6F:3C:18:00:16:BE:F2:09:00:18:D9:DB:0D:39:7A:06:C7:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 30DC335CE71E048378491E648FCECA7C8797A1E8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:23 +0000
ROA not before: Thu 30 Apr 2026 13:41:23 +0000
ROA not after: Thu 29 Apr 2027 13:46:23 +0000
asID: 399955
IP address blocks: 217.217.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:dc:33:5c:e7:1e:04:83:78:49:1e:64:8f:ce:ca:7c:87:97:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:23 2026 GMT
Not After : Apr 29 13:46:23 2027 GMT
Subject: CN=D8B06F3C180016BEF2090018D9DB0D397A06C74D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:14:a6:d3:df:30:03:fa:75:53:8f:5c:90:
bd:e6:c5:04:9e:e5:4f:d9:53:93:5b:a5:11:98:61:
1b:7e:e3:60:6b:53:22:3d:03:26:49:04:75:3e:31:
3e:e6:c4:27:9e:b1:08:3a:cf:60:21:64:ed:d0:03:
5d:74:d0:35:65:f8:12:a6:03:58:4f:b8:fe:91:c6:
f0:8c:27:62:a2:8b:e1:d3:d2:6e:05:d1:c4:07:93:
82:d0:0a:84:aa:a5:7a:7e:b0:92:ef:1f:5c:2a:1d:
5a:2c:a7:e1:b0:e2:fd:95:0e:cd:d9:63:da:06:4f:
cd:f7:99:a6:22:65:b9:a5:e4:c2:20:ce:73:48:a1:
3e:66:7a:ef:a0:74:a4:aa:ae:b3:55:d6:0a:66:87:
e3:50:c2:16:d4:db:5a:dd:b6:fe:47:02:ea:5e:92:
58:bc:3d:f8:0e:d0:b6:d7:66:b4:3c:9a:3c:9f:c2:
23:93:4a:c6:c9:88:51:a0:f3:53:24:ba:21:a3:14:
c1:19:f8:92:f6:9d:22:3b:e9:a3:8b:0c:64:75:51:
17:f6:4f:bf:71:0b:ec:ec:0c:6c:33:b1:e2:43:c4:
71:0a:b1:88:3e:82:23:cc:83:ec:f7:14:a7:7e:8b:
25:af:56:22:79:bb:89:18:16:d8:0c:11:3e:5d:76:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B0:6F:3C:18:00:16:BE:F2:09:00:18:D9:DB:0D:39:7A:06:C7:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.56.0/22
Signature Algorithm: sha256WithRSAEncryption
61:af:94:5e:71:82:8d:ba:b8:be:e1:76:a8:65:c7:b4:59:24:
b9:15:77:14:50:bf:b4:08:d7:6c:5e:3b:b3:0f:bb:f2:57:bb:
83:35:6c:cd:45:67:d1:c4:d0:c1:8d:40:8e:58:ca:21:37:2a:
59:11:e0:4e:9d:12:1d:5d:96:34:b3:29:bc:18:47:86:c9:8a:
c5:47:7d:a7:33:03:c0:eb:36:ea:c3:2e:6d:e7:59:93:31:09:
1f:bb:ab:be:96:23:4b:70:51:84:ce:3e:a7:0b:8a:9d:02:a6:
af:fe:2f:cb:53:37:93:46:da:7c:e9:98:2b:70:2c:b3:c4:9c:
77:2c:1b:69:07:de:98:d1:93:ad:84:26:87:7c:d7:c1:be:88:
4f:82:44:c3:55:c7:55:c4:56:6e:75:25:95:89:b9:25:35:c4:
51:ab:2d:9d:0a:99:68:b7:68:91:f3:01:5d:a7:15:8a:73:67:
1b:54:a2:4c:63:47:49:55:5e:b4:1f:62:75:3d:84:1c:df:4c:
92:60:00:60:6b:b0:ce:19:e6:8b:28:ff:99:23:d4:a9:d6:ec:
74:38:fa:45:1f:49:49:30:6e:68:18:ef:ee:f8:91:e6:75:33:
94:dc:26:19:9d:40:2c:f4:70:12:dd:14:da:4e:73:db:38:38:
8e:a7:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:39 2026 by rpki-client