Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136302e302f32312d3332203d3e20313431393935.roa
File: 3231372e31352e3136302e302f32312d3332203d3e20313431393935.roa (raw, json)
Hash identifier: tKjEk2dPh+XE2dvu3Z1rhrWSeRtH8pC7wMMhx+5QePs=
Subject key identifier: 9A:2E:66:61:C9:71:2B:19:10:14:81:37:61:BA:FA:6E:F8:AF:EE:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26F5173FA7F97D46E56326A186C5493381BFE432
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136302e302f32312d3332203d3e20313431393935.roa
Signing time: Thu 05 Feb 2026 21:23:17 +0000
ROA not before: Thu 05 Feb 2026 21:18:17 +0000
ROA not after: Thu 04 Feb 2027 21:23:17 +0000
asID: 141995
IP address blocks: 217.15.160.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f5:17:3f:a7:f9:7d:46:e5:63:26:a1:86:c5:49:33:81:bf:e4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 5 21:18:17 2026 GMT
Not After : Feb 4 21:23:17 2027 GMT
Subject: CN=9A2E6661C9712B191014813761BAFA6EF8AFEEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:a0:16:91:ae:58:8a:13:e6:34:f6:77:5d:
86:01:52:d2:b6:9e:cb:79:9b:ce:35:1b:58:0f:f3:
58:60:42:8e:60:7c:2c:f0:f0:e1:c3:31:44:6a:04:
84:94:e4:9a:19:2f:13:0b:a7:eb:8d:cc:a1:3b:9f:
2a:cf:42:af:dd:b8:26:0c:04:0e:f1:00:cb:93:24:
ab:81:f2:f4:80:8f:27:f3:49:99:0f:e7:56:11:75:
0a:8d:56:cf:fa:d9:14:07:8a:14:fb:a4:0a:b9:36:
ae:b6:0f:44:e1:30:12:33:a4:46:49:43:4d:cb:38:
d3:df:82:bc:89:f7:b3:7a:cd:cb:31:4c:c1:67:b3:
bb:f5:ac:9a:b0:1a:bd:4a:59:a0:47:dd:e1:45:0a:
8e:e6:b2:27:7d:48:9c:b4:ec:a5:0e:2b:12:c9:8d:
97:84:fd:67:b7:8e:b1:b0:52:71:c0:47:08:3f:ba:
90:b3:bb:4d:0b:c8:0a:59:0a:16:bd:82:f5:be:b8:
c7:08:7c:e3:d3:08:cb:8f:db:0e:e2:f1:33:65:04:
ee:c2:05:d0:d4:25:f5:a6:88:59:a0:69:bd:09:41:
56:48:09:0a:35:97:30:87:94:2d:51:88:ee:49:cf:
60:6b:dc:35:62:9b:9c:5a:eb:c4:f6:a8:c0:5f:b9:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:66:61:C9:71:2B:19:10:14:81:37:61:BA:FA:6E:F8:AF:EE:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136302e302f32312d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.160.0/21
Signature Algorithm: sha256WithRSAEncryption
33:9f:92:e0:d0:61:cb:e4:73:ed:64:b8:5d:07:03:26:94:ef:
f8:ca:e2:1a:6a:0b:b4:7f:1b:2a:11:2d:16:e7:94:73:01:f4:
9d:88:26:58:32:b8:ca:9f:51:d9:1e:b8:ff:cf:1e:c4:9c:d3:
f0:7c:94:cb:99:e0:ef:66:77:69:8a:71:48:86:3b:ce:8d:d2:
44:40:8d:4f:0d:11:3a:4c:ec:b3:a3:06:9e:4a:72:65:35:23:
50:ef:9d:16:ef:18:e3:8f:b7:62:e6:a8:b7:1b:37:4a:80:6d:
6d:34:7c:38:94:ab:7e:29:58:f0:0f:d5:9f:42:1b:f6:d0:75:
2d:79:dd:2e:cb:b0:67:61:49:ad:46:ec:26:d8:ea:c9:c6:29:
46:e1:81:1b:95:37:40:6e:21:2b:56:a1:34:22:3b:ba:14:d4:
81:95:62:57:72:b2:96:58:3c:cf:98:5e:68:4f:f0:5d:2a:df:
8c:42:fb:0f:6b:0a:8a:44:82:bc:fd:58:e8:1b:c9:59:f9:7f:
3f:73:7c:b6:48:7c:24:d6:2c:f8:e4:bd:87:0c:1e:9b:ba:9e:
63:c7:5f:3f:78:9e:86:22:1b:e7:32:e2:50:84:d2:30:b2:3f:
82:6e:10:26:05:3f:70:19:9a:58:4d:56:4b:e3:8d:1f:35:36:
21:13:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:37 2026 by rpki-client