Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139392e302f32342d3234203d3e20323039313034.roa
File: 3231372e3231362e3139392e302f32342d3234203d3e20323039313034.roa (raw, json)
Hash identifier: utrFYGIkYPSX0oocBMfCwiXMgf1QPbimg0t96n6aYt4=
Subject key identifier: B1:9A:83:E1:88:1F:D6:02:1A:AA:B0:6F:6B:21:45:0A:11:CC:77:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B76BF13B797FC51D579E435768DAC1D8FE51238
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139392e302f32342d3234203d3e20323039313034.roa
Signing time: Mon 13 Apr 2026 11:06:13 +0000
ROA not before: Mon 13 Apr 2026 11:01:13 +0000
ROA not after: Mon 12 Apr 2027 11:06:13 +0000
asID: 209104
IP address blocks: 217.216.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:76:bf:13:b7:97:fc:51:d5:79:e4:35:76:8d:ac:1d:8f:e5:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:01:13 2026 GMT
Not After : Apr 12 11:06:13 2027 GMT
Subject: CN=B19A83E1881FD6021AAAB06F6B21450A11CC7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:ac:16:e6:c6:ef:19:d4:1e:9b:32:68:62:
01:e7:06:d1:00:6e:c6:0f:53:99:5a:d6:73:55:82:
b8:11:6f:af:35:49:e5:60:0a:27:f5:99:e4:2f:dd:
e2:7e:66:41:71:0f:7a:5b:fd:bb:50:9e:22:b7:15:
e7:5a:8a:87:64:16:18:2f:b9:bb:71:28:f2:6f:c1:
2a:4a:e1:25:28:9c:16:8b:cd:73:d9:c3:89:e2:a0:
fe:6a:8f:43:99:c2:f6:ba:8f:c9:f5:a4:d3:66:0d:
31:1e:dc:bc:f6:89:4d:c9:40:eb:66:5d:c2:a6:d8:
13:84:dd:02:3a:09:71:cf:85:09:e8:5d:b1:bf:43:
e1:4b:69:f0:c3:3c:05:59:14:55:5c:82:3d:63:c2:
4e:9f:e6:64:e8:5f:a4:b0:1c:5d:3e:1f:b2:68:70:
c6:2a:06:a9:13:50:8a:ee:f9:55:a5:89:7b:b4:1d:
ea:cc:9c:90:66:53:8d:0d:76:4f:c5:42:9f:de:1b:
09:a1:d9:17:e1:0f:9e:00:67:9a:ea:c1:e0:7f:fd:
13:38:7d:4c:0a:41:8c:2c:ed:6b:26:8d:cd:5d:78:
94:1d:e8:b6:29:ac:40:37:53:b7:07:f7:8e:97:c3:
de:a8:a5:2d:9b:ae:3c:f7:fc:1d:03:a7:7a:ba:81:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:83:E1:88:1F:D6:02:1A:AA:B0:6F:6B:21:45:0A:11:CC:77:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139392e302f32342d3234203d3e20323039313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.199.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fc:62:c3:f8:f2:57:e1:15:55:e5:d3:3c:5c:43:a0:3c:08:
2d:57:36:c8:20:89:c2:fa:d4:52:d5:b8:e5:ce:9f:d3:dd:8f:
8f:74:2e:a3:37:b1:ff:d2:a2:ff:ea:79:fd:0f:4d:5e:8d:bd:
92:ef:ea:30:0b:03:0b:f1:d3:99:83:26:3b:40:ed:57:2a:ca:
a6:fe:2d:2c:a6:83:c1:08:2a:56:cf:10:11:aa:8c:03:b5:60:
65:5e:60:05:76:93:a2:4a:a3:f8:45:81:d4:b4:94:71:6a:95:
10:51:98:9d:7d:27:39:80:41:74:36:bf:94:7a:4c:a8:24:b0:
44:39:a1:30:ca:63:0c:bd:ac:ee:72:00:25:35:03:d3:ca:cb:
3b:04:41:ff:40:20:6a:67:9d:1b:c7:5e:bc:91:e7:cd:8c:f6:
ed:b8:f6:06:e7:39:b2:24:0a:dd:d4:20:43:1e:47:06:05:68:
6e:50:d4:ce:41:6e:28:4d:21:4b:0b:f6:97:0c:94:b7:e6:4f:
33:34:e6:a3:5b:16:38:1e:e1:df:e5:8f:c4:01:72:78:cf:6c:
34:78:2a:3c:1e:27:28:ad:63:70:b1:78:4e:b5:01:5a:79:a5:
a8:9b:ff:78:0d:01:69:c7:83:e9:e6:6a:b0:9f:ad:1c:f8:91:
44:44:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:49 2026 by rpki-client