Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3231372e392e3235342e302f32332d3233203d3e203135343139.roa
File: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (raw, json)
Hash identifier: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=
Subject key identifier: 2A:4D:19:9D:A9:2D:98:55:19:BD:13:5D:FF:A8:2E:39:A7:20:FC:07
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 7DE1854044B5D7CF48D170402D889121566BB760
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3231372e392e3235342e302f32332d3233203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:11:00 +0000
ROA not before: Fri 10 Apr 2026 10:06:00 +0000
ROA not after: Fri 09 Apr 2027 10:11:00 +0000
asID: 15419
IP address blocks: 217.9.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e1:85:40:44:b5:d7:cf:48:d1:70:40:2d:88:91:21:56:6b:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:06:00 2026 GMT
Not After : Apr 9 10:11:00 2027 GMT
Subject: CN=2A4D199DA92D985519BD135DFFA82E39A720FC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:fd:30:8d:c4:24:6a:cd:a9:fc:54:06:2f:
ad:d4:5d:01:ac:ea:e6:7f:be:70:ef:d0:07:8a:ac:
51:78:10:dd:9b:ef:e1:a1:99:e4:50:d8:5f:ac:0a:
70:32:68:40:a1:0c:7b:38:77:b3:48:aa:ba:83:c1:
61:2b:bf:28:a9:d3:a1:ed:b4:18:ad:17:b5:9f:5c:
6b:47:1d:b5:f9:b9:43:c1:13:13:e8:55:3e:e7:f9:
1b:3b:0d:3f:a8:52:66:0a:13:99:cb:c2:b8:0d:15:
33:e8:83:4a:87:9f:ec:e7:55:fc:96:4f:b9:2d:07:
ff:5d:d5:82:bf:0a:4e:6d:b5:bf:f2:e9:46:c2:f3:
8d:d3:e2:c8:fe:bb:3b:3d:4d:c8:d9:8f:15:22:02:
f6:ed:5a:27:88:7f:4b:af:77:18:dd:e7:26:40:52:
cc:e9:41:a2:af:fd:8e:20:58:54:fb:a9:8d:46:39:
3d:eb:14:70:cf:37:c5:ad:5b:96:7e:7e:06:2a:fa:
33:d8:31:7c:59:50:91:7c:3b:1b:f2:9d:60:54:c3:
3d:c4:d2:23:22:3b:f2:25:fe:bc:8a:57:13:f7:62:
fb:52:8a:93:a7:22:48:53:47:0d:45:4c:aa:b0:95:
d0:32:24:2e:2f:e6:21:d5:5f:57:80:b1:9f:65:07:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:19:9D:A9:2D:98:55:19:BD:13:5D:FF:A8:2E:39:A7:20:FC:07
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3231372e392e3235342e302f32332d3233203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:70:a7:55:6f:6a:41:33:5a:03:a8:b5:1c:7a:43:ba:9c:5e:
ce:7c:da:f5:b7:10:8f:71:f2:6e:a6:cd:88:80:1d:98:39:9d:
2d:37:ab:24:c8:3a:38:0b:5c:89:e0:b6:d4:b7:6e:8d:8e:b5:
05:31:aa:d3:ba:eb:d3:54:43:a1:7c:07:e7:82:fc:e4:0d:d7:
a8:ea:53:0b:f8:8e:34:a3:1c:4f:ce:48:8e:ae:fc:1c:9e:d0:
dd:9f:b7:0b:07:39:44:44:e8:53:19:a4:de:75:43:2e:62:24:
45:1f:72:d3:4e:cc:e9:dd:f9:a6:27:24:86:68:71:81:b5:cf:
34:89:3c:a8:da:1e:e1:87:56:d3:85:4c:74:2c:58:b2:75:a2:
94:38:f8:27:71:55:9d:f3:e0:ac:cb:47:af:da:d7:55:60:be:
cd:da:ab:73:0c:e1:87:c0:68:ec:0c:37:fc:67:a4:f6:c2:a1:
c4:6a:64:82:79:b7:ba:17:b2:1c:bd:c9:b5:f3:ff:d6:33:37:
3f:3d:cd:b8:51:fc:d3:ae:92:af:cc:fa:98:83:1b:f9:2a:f9:
bb:3a:b7:a8:68:6b:63:d4:61:81:b8:49:24:31:e8:92:73:27:
04:e1:47:3a:fb:fd:92:da:b5:c8:59:1f:fc:bf:ef:16:34:12:
02:78:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:36 2026 by rpki-client