Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32332d3234203d3e20383334.roa
File: 3231372e3231372e38302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: K9PcI5WJKmw1be6wPlTw2b1bV8VV0UDa5DzC9o51fas=
Subject key identifier: 55:AB:46:85:F6:1C:21:C1:32:58:64:BD:6D:9D:3C:DD:E7:2D:10:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1ED5A9AFEC85BC5C88D4C23DE400D9F45B7A5A87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32332d3234203d3e20383334.roa
Signing time: Fri 06 Nov 2026 13:07:01 +0000
ROA not before: Fri 06 Nov 2026 13:02:01 +0000
ROA not after: Fri 05 Nov 2027 13:07:01 +0000
asID: 834
IP address blocks: 217.217.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d5:a9:af:ec:85:bc:5c:88:d4:c2:3d:e4:00:d9:f4:5b:7a:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 6 13:02:01 2026 GMT
Not After : Nov 5 13:07:01 2027 GMT
Subject: CN=55AB4685F61C21C1325864BD6D9D3CDDE72D102B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:99:c6:56:f4:f9:26:ba:9d:77:5a:7a:70:
79:0d:54:e1:2b:eb:3b:db:d8:ad:0c:6a:bb:a6:52:
14:44:5e:90:9d:de:14:40:3b:52:17:93:c4:fe:de:
ce:b0:da:79:c4:6e:fb:65:7e:a5:11:06:ae:7e:56:
f8:d3:f1:bf:42:af:9b:7e:0b:fb:aa:3f:77:70:71:
c8:d0:ed:fc:9d:29:d2:d7:f5:af:e2:3d:75:e0:d2:
61:45:cb:ae:d4:0b:6c:7b:1d:e1:f9:68:0f:e3:e7:
34:1e:e3:a8:7d:6e:5e:2b:3f:17:df:de:58:69:2d:
c4:47:4c:6a:9a:2d:2c:2a:63:54:5d:f8:a3:d3:97:
94:34:20:90:b9:4a:78:3c:4b:01:36:5a:cb:2b:80:
07:77:43:75:f8:c5:a6:aa:6c:d7:c7:83:5d:da:46:
c0:b7:bc:d2:99:f7:87:fc:8a:62:f7:fd:f0:ee:a4:
7b:6d:50:4a:27:21:04:e2:9a:0c:18:d6:cb:5f:ee:
92:19:d4:70:d5:ba:2b:bf:c7:22:db:63:5a:a4:e6:
cf:43:ca:4b:b8:a3:00:76:2d:61:5d:39:38:56:33:
6d:da:fb:42:73:ef:4b:f2:62:cf:75:b6:e5:5d:d7:
a7:3b:22:4c:c9:8f:af:6e:00:26:fc:ba:53:17:77:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:46:85:F6:1C:21:C1:32:58:64:BD:6D:9D:3C:DD:E7:2D:10:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.80.0/23
Signature Algorithm: sha256WithRSAEncryption
23:63:35:c4:1b:60:d8:00:12:f5:f0:ec:55:68:a5:4e:90:df:
e4:31:60:23:77:94:32:a3:62:ca:6b:e9:99:7e:ec:ed:56:ae:
d1:4e:4e:99:ce:4c:bc:9e:4d:42:2e:8a:a6:1d:0c:81:03:2d:
81:75:0d:73:12:0d:5d:2b:74:b5:38:03:ed:f7:32:d1:37:f3:
d8:08:8e:64:66:fd:fb:c5:21:7c:db:4e:f2:f4:7e:42:a9:36:
8d:b4:d2:ba:d0:1b:57:ff:04:b8:4d:21:ff:d8:d5:11:cd:c4:
e5:47:bd:44:17:74:1f:85:cf:2a:f4:ef:83:d1:b8:27:e4:8a:
ed:fc:a5:4b:cb:2e:8d:7d:01:63:c1:16:cb:ed:d4:5e:ee:4a:
e8:41:66:e5:b7:12:35:40:b0:14:0f:eb:ec:cc:7b:df:a1:ca:
07:28:c7:2a:37:08:f8:4b:cd:c2:cf:7d:23:01:a3:23:ff:a1:
b8:b2:62:b6:06:1d:bd:e7:1e:df:d2:ea:19:f8:df:8f:63:a7:
57:7c:05:e3:5f:9d:77:44:13:b2:15:0e:d3:f1:44:a6:eb:8c:
f7:0b:21:60:42:c3:6d:98:eb:46:b7:d3:0a:f4:27:7f:9c:b4:
0f:eb:f3:3f:45:6e:1c:38:9b:fe:0d:35:d5:e8:fa:42:7d:fe:
da:c7:8f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:37 2026 by rpki-client