Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037383433.roa
File: 3231372e3231372e36382e302f32322d3234203d3e2037383433.roa (raw, json)
Hash identifier: hpiMIpetmTAa1iIFof7l3GLSS3BUu3Mc7t0MYgzGAPg=
Subject key identifier: 24:0B:82:3E:27:F0:39:A8:15:09:4F:3E:1C:38:DE:3C:C4:7F:8F:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 413DB72692ED0BA59BB06BFDB9E101134CE068A0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037383433.roa
Signing time: Wed 24 Jun 2026 18:25:43 +0000
ROA not before: Wed 24 Jun 2026 18:20:43 +0000
ROA not after: Wed 23 Jun 2027 18:25:43 +0000
asID: 7843
IP address blocks: 217.217.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3d:b7:26:92:ed:0b:a5:9b:b0:6b:fd:b9:e1:01:13:4c:e0:68:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:43 2026 GMT
Not After : Jun 23 18:25:43 2027 GMT
Subject: CN=240B823E27F039A815094F3E1C38DE3CC47F8FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:86:40:a0:0f:e7:e4:df:aa:47:9d:17:2d:
f6:4a:02:52:a6:d8:81:28:fb:2b:e3:bd:ed:e5:5a:
30:b4:c0:3b:40:fb:4e:34:b5:ad:fc:4f:38:88:20:
3d:07:f7:2b:5f:27:d6:d8:1d:f1:00:ad:48:96:3d:
9e:97:37:a0:89:9a:2f:e1:aa:43:d7:23:29:6b:de:
a5:06:15:e1:37:3f:c2:04:3c:94:40:48:15:f6:ce:
bd:41:73:28:1d:29:2a:40:63:3a:42:59:71:c2:48:
4a:51:f7:12:85:e9:26:63:2c:32:3a:04:4c:78:ad:
3a:e8:28:de:da:ca:97:13:15:30:df:4a:b9:b9:82:
84:ab:87:1f:0a:13:42:d4:39:ff:bf:11:1d:7c:87:
f4:64:e6:b3:5a:99:76:96:04:34:61:2b:0d:6f:db:
a7:fa:69:f4:c3:c9:6d:17:d4:02:9a:41:02:2e:6c:
7f:f6:6c:a0:d7:7a:c3:77:fe:16:18:17:69:c6:3e:
9b:c4:1d:72:6d:a4:f4:ff:d4:2a:ba:02:1f:fa:7d:
bc:b6:d1:02:da:b6:13:8b:2c:b0:eb:aa:4d:51:48:
78:89:da:77:91:87:af:91:13:62:75:99:e0:f9:20:
ab:e8:63:68:d7:9c:a7:03:f1:27:41:54:a7:de:72:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:82:3E:27:F0:39:A8:15:09:4F:3E:1C:38:DE:3C:C4:7F:8F:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.68.0/22
Signature Algorithm: sha256WithRSAEncryption
87:51:67:68:f2:d2:eb:2a:60:0b:ce:49:ea:75:98:d8:85:8a:
e7:e6:64:c9:a6:9d:48:23:44:da:41:5e:b5:3f:d1:58:49:7c:
0b:7e:f5:0d:14:f6:d7:e2:8b:41:d4:8d:25:ad:85:2c:e3:7c:
84:37:17:9f:b8:5a:d7:37:21:cd:19:09:97:84:5a:e8:40:ad:
0c:a6:59:54:3c:e4:6c:3e:73:58:f5:7e:b7:e2:34:52:bf:72:
59:61:45:34:fb:6a:11:c0:a3:a0:21:0d:5a:17:1e:49:17:9c:
84:31:e0:48:a3:6a:90:15:5f:e6:d0:09:c9:7d:2a:cd:b3:e8:
88:35:93:bf:45:9c:c2:56:ea:3b:a1:e6:5e:4d:0d:7b:eb:65:
06:13:6f:b6:9a:c0:c5:4e:b6:e8:15:35:5e:79:ed:a4:34:21:
82:27:ad:91:ab:e9:36:6c:24:92:f2:f4:f8:3d:a9:e4:c5:65:
f3:1a:e3:14:74:fb:fa:0e:4f:24:02:3d:89:f7:3b:fa:2b:73:
93:c8:7d:b6:fe:48:00:02:de:aa:60:65:59:cc:1d:03:e4:6f:
b8:83:98:0e:81:bd:d1:e7:ee:ae:48:e2:e3:13:0b:df:a2:83:
6e:fe:e1:79:36:a0:b9:0d:e7:dd:4f:0c:10:bc:50:3d:8f:95:
b7:b4:f2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:01 2026 by rpki-client