Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3232203d3e20313937353337.roa
File: 3231372e3231362e3134382e302f32322d3232203d3e20313937353337.roa (raw, json)
Hash identifier: ZC3eqMJJz5IFJHcDyQp9o+JNOX56iI6o8k8qk2kV9Bs=
Subject key identifier: 5B:85:83:5D:2F:91:BD:DD:3D:13:B8:B7:9F:67:F4:B9:DD:45:84:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1056FCFDE2EEFF854ADBCA8D7F4114B087989F36
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3232203d3e20313937353337.roa
Signing time: Mon 23 Feb 2026 09:53:00 +0000
ROA not before: Mon 23 Feb 2026 09:48:00 +0000
ROA not after: Mon 22 Feb 2027 09:53:00 +0000
asID: 197537
IP address blocks: 217.216.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:56:fc:fd:e2:ee:ff:85:4a:db:ca:8d:7f:41:14:b0:87:98:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 23 09:48:00 2026 GMT
Not After : Feb 22 09:53:00 2027 GMT
Subject: CN=5B85835D2F91BDDD3D13B8B79F67F4B9DD45843D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:65:37:7c:ff:94:d0:0c:8d:85:b1:b7:b3:
83:be:ee:7b:cf:87:b2:85:7f:e2:f3:91:bc:1a:54:
28:49:3c:eb:16:64:e5:10:be:4a:3e:52:cd:df:dc:
ff:44:ae:71:43:08:16:dc:23:67:f8:85:1e:24:cc:
c6:25:1a:02:90:3c:e3:01:5e:2b:60:39:b1:2a:9f:
8b:c7:ee:22:fb:db:e2:d4:96:66:38:65:48:ec:0f:
e8:9f:dd:c5:2e:ea:45:72:37:67:74:c6:33:e0:fb:
cb:69:eb:ce:60:53:e3:c2:80:8f:f8:6e:a3:e0:82:
eb:88:04:83:df:91:8b:b6:c0:a9:8a:66:af:12:eb:
e6:1b:be:03:a8:00:0f:40:b9:53:9d:9d:66:0b:b4:
66:55:f2:6d:a2:4f:48:37:05:33:2f:9b:1a:70:70:
09:20:5e:a4:61:3e:96:45:16:c4:a3:07:53:7a:64:
e6:cf:75:3b:ad:d1:c3:ff:3e:8b:1f:93:94:19:3b:
4d:7e:2a:96:c1:18:13:65:c7:41:bc:d3:06:d5:9a:
60:28:6d:28:58:38:fc:f6:fa:4b:c2:90:03:1c:a5:
5f:58:e4:ed:d2:78:b1:27:3e:90:1f:a8:2b:86:c0:
42:81:d5:64:25:59:cf:f1:93:d5:35:cb:84:e3:60:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:83:5D:2F:91:BD:DD:3D:13:B8:B7:9F:67:F4:B9:DD:45:84:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134382e302f32322d3232203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.148.0/22
Signature Algorithm: sha256WithRSAEncryption
51:bb:d4:59:2a:32:5a:0e:ae:7e:ed:76:ba:25:e5:32:e0:9d:
9e:2d:e2:99:82:6a:97:09:a5:fc:e7:c6:97:30:2d:71:e5:3f:
0a:7d:85:60:35:f5:00:82:f9:80:cc:82:4b:ec:61:2c:db:11:
87:dd:ba:54:88:0e:19:29:13:42:55:f0:4b:73:e8:e3:ed:53:
47:18:88:41:c9:8d:6c:8c:ee:1b:b5:9a:64:8a:fc:d3:62:67:
79:61:83:af:51:a1:d5:50:7f:d0:51:46:41:3c:dd:5c:4f:35:
b8:09:ba:2a:20:c2:f0:cd:6e:a0:13:9d:8f:ca:c9:71:9e:ee:
9d:43:a1:cd:c1:da:b3:84:e5:03:71:25:cf:eb:d0:20:3e:69:
28:c5:41:0c:b0:74:aa:ab:2a:96:64:85:d8:27:68:92:53:8d:
0e:95:d6:74:f3:4a:7b:fb:78:dc:07:e0:6d:74:9e:95:9d:a5:
23:50:fc:79:b1:8d:42:50:35:3f:f3:2e:95:c2:8c:b3:01:c2:
07:91:42:ca:27:95:5a:8e:82:37:c9:59:cb:65:d8:9e:9b:53:
31:45:ce:8a:51:56:4e:25:e0:56:c6:1e:d5:ab:17:e0:ed:71:
db:3c:b6:4c:a4:c0:67:6e:11:f1:b8:2d:50:c0:fd:02:64:77:
b5:72:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:06:44 2026 by rpki-client