Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e20333939393535.roa
File: 3231372e3231372e36382e302f32322d3234203d3e20333939393535.roa (raw, json)
Hash identifier: Mhe/9vD+SmTNgWYLkmxFvFJG4Z8BXclOZEW+kBeYZLY=
Subject key identifier: 47:4D:73:1F:E8:FC:13:13:22:CC:48:06:2C:3A:85:55:8D:89:E1:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AFADF89A15B3B9BA629CFD0299E2ABABBAFB6F8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:25 +0000
ROA not before: Thu 30 Apr 2026 13:41:25 +0000
ROA not after: Thu 29 Apr 2027 13:46:25 +0000
asID: 399955
IP address blocks: 217.217.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fa:df:89:a1:5b:3b:9b:a6:29:cf:d0:29:9e:2a:ba:bb:af:b6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:25 2026 GMT
Not After : Apr 29 13:46:25 2027 GMT
Subject: CN=474D731FE8FC131322CC48062C3A85558D89E1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:16:4a:1a:73:7b:1b:13:b1:46:f1:2c:55:
e7:22:4a:87:e9:c1:8d:a8:75:af:3c:a2:f1:e8:ed:
51:6b:df:27:95:f7:35:c8:20:cd:64:b7:25:a9:f1:
43:82:a5:4b:80:ee:ce:f4:5f:f9:dd:51:0e:53:5b:
82:db:42:94:46:3f:a3:55:10:9e:b8:6c:8d:7f:fb:
d0:1b:de:a8:b8:be:14:01:24:55:25:70:47:cf:16:
03:3e:36:84:3f:8a:50:2c:c8:49:50:90:1a:37:d4:
27:3f:61:62:38:7c:72:66:5f:81:1d:fe:6c:43:34:
f0:f7:8d:b4:14:90:6f:a0:e4:d3:6e:68:44:3b:7d:
62:06:26:d0:a9:09:da:9f:56:28:e5:36:b3:01:ed:
3f:12:16:24:d3:c0:9d:e4:95:bd:3d:f1:f0:cc:bf:
b4:c1:ad:16:7a:c9:df:77:d3:1f:81:53:5c:73:56:
c1:c2:c6:5b:8b:0e:a9:25:fb:bf:6d:03:68:8e:72:
ce:8a:67:b9:f0:bc:40:07:be:9c:d1:69:0b:2b:01:
c1:b3:9a:43:44:b4:2a:6c:36:3f:a6:9f:8b:2b:b9:
af:32:7e:ed:e5:ea:51:2d:ee:30:32:0e:b7:1e:4b:
b9:ff:25:65:28:4d:1b:0c:07:81:5c:d7:a7:0a:a2:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:73:1F:E8:FC:13:13:22:CC:48:06:2C:3A:85:55:8D:89:E1:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.68.0/22
Signature Algorithm: sha256WithRSAEncryption
25:02:d5:63:a3:b5:bd:51:49:3d:31:4c:9c:b9:68:a1:3d:41:
a4:7e:61:2d:57:30:15:4c:62:ce:da:ea:b9:2e:d8:c9:d1:37:
db:61:3e:2f:b6:f7:be:16:23:b9:87:a7:85:c2:d7:c3:0c:77:
11:04:18:f1:66:1d:97:c2:d8:66:5b:39:4d:98:75:1b:d3:24:
9a:09:ad:fd:9f:9c:50:14:81:31:82:c1:5d:13:a4:dd:49:57:
0b:6e:eb:af:74:71:4c:68:d1:2f:a2:b7:d2:9e:3e:0d:2f:df:
c4:fa:a5:fb:a3:99:6d:91:c6:79:e3:34:32:ca:ab:e2:ab:72:
9c:93:25:40:a0:56:1e:4b:81:01:4a:0e:72:13:c8:9c:63:ba:
3b:fb:56:56:0c:f4:70:92:44:f2:58:f8:5b:62:b9:75:62:3f:
fd:8c:bd:04:4e:90:78:61:4e:8f:4b:6e:1b:ec:93:dd:22:dd:
0a:96:b7:28:76:7c:3e:4c:e0:d7:ce:d3:db:02:65:c9:35:3d:
28:a2:cb:a5:b1:e3:b6:be:12:a2:03:99:30:d2:7d:d5:6a:5a:
e5:6d:84:31:b0:34:e5:e1:88:51:43:64:a8:65:5f:a5:ec:89:
13:a4:e2:6e:bc:f7:da:8f:d9:2f:88:12:3b:ee:9c:6d:b4:17:
38:11:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:27 2026 by rpki-client