Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20313937353337.roa
File: 3231372e3231362e3230382e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: 1q/7ZXktYk0CGYyTeiTAV3RFUcu5hdQgNU4MSpokdzs=
Subject key identifier: 17:18:55:15:61:5D:1E:B1:45:81:6F:0E:A9:6E:A0:DE:2E:F1:32:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58D9FE5DB17F77C46C0D4B10BEE0CFDD51DBDCF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20313937353337.roa
Signing time: Sun 15 Feb 2026 08:26:48 +0000
ROA not before: Sun 15 Feb 2026 08:21:48 +0000
ROA not after: Sun 14 Feb 2027 08:26:48 +0000
asID: 197537
IP address blocks: 217.216.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:fe:5d:b1:7f:77:c4:6c:0d:4b:10:be:e0:cf:dd:51:db:dc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 15 08:21:48 2026 GMT
Not After : Feb 14 08:26:48 2027 GMT
Subject: CN=17185515615D1EB145816F0EA96EA0DE2EF132FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:27:12:ce:38:43:88:37:20:2d:7f:2e:c1:
41:70:26:35:80:79:35:2e:95:e7:5b:9c:93:8f:b6:
a1:2b:64:d3:e2:9a:40:ed:41:2e:4a:52:f9:34:85:
78:a4:80:40:e9:27:10:c1:c8:ac:54:7d:56:6c:81:
28:fe:ed:09:3b:a6:75:47:d5:3e:c1:71:f3:e2:f1:
34:51:38:92:98:8c:02:40:3e:af:72:ee:e4:5f:6b:
9e:52:73:bb:01:ad:84:de:e7:c9:f1:85:a5:5d:7b:
a2:d8:c3:94:c1:84:e3:6d:72:2f:9b:82:1b:dd:29:
37:2c:de:c8:c6:15:c0:e0:ba:b0:72:4b:63:29:d7:
ae:c7:c9:f4:a4:c5:b6:80:a8:0d:26:17:18:c1:3b:
5b:08:29:9d:59:54:24:e2:27:fa:60:6e:3f:93:70:
d0:54:6c:5e:0b:9f:8a:77:6c:05:a9:d4:14:ba:86:
9b:e7:6a:93:d5:81:f5:26:f5:53:41:ae:bf:a0:cb:
4d:35:4f:7c:9e:13:4e:5f:fb:9a:e7:58:6e:da:5d:
ec:35:d2:93:85:59:ad:52:59:8a:49:28:38:9c:29:
5a:bb:43:03:a3:31:22:a8:33:5e:bf:a7:41:9f:20:
a4:00:56:35:07:3d:c2:c6:12:f2:d7:52:f5:a7:31:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:55:15:61:5D:1E:B1:45:81:6F:0E:A9:6E:A0:DE:2E:F1:32:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f5:de:51:0c:f0:4c:53:dd:2d:9e:d6:e9:3f:fa:1e:9e:a8:
87:34:52:61:58:aa:7e:bf:ad:37:38:7d:14:93:73:76:7b:6c:
53:b9:00:d1:52:3c:6a:7b:ea:7a:c7:07:35:7f:a2:0c:f5:95:
69:29:2b:19:e0:fd:4f:af:3f:e1:bd:61:00:1a:f1:42:5d:24:
76:a6:32:07:0b:cb:7a:11:f3:7b:1b:ce:f2:5e:9e:b4:6a:0e:
89:92:3d:5e:55:df:e4:63:bf:34:29:51:bc:14:ae:23:1d:39:
8b:ee:96:a5:0b:fb:3d:16:12:33:27:4a:b4:52:cc:6b:9d:a2:
8e:05:88:d9:47:a8:9f:e1:16:df:34:f4:ba:34:0f:fc:ce:58:
f6:5b:6e:64:34:44:20:5f:96:46:92:8c:84:b8:b8:18:3e:e8:
03:d0:5f:42:d6:0d:26:3e:1b:39:fb:9a:8c:9c:92:54:c1:50:
8a:73:71:ff:5c:57:8a:84:a8:1d:f6:80:05:99:96:85:e3:12:
18:76:55:46:cd:30:cc:a6:63:94:fd:fe:dd:c4:e9:12:e2:c4:
4d:cd:9b:8c:bd:1f:f0:ae:11:89:86:52:53:6e:02:43:21:4f:
54:86:d1:9e:e2:24:e3:ff:99:9f:39:1f:19:48:f4:64:d1:59:
e4:d0:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:00 2026 by rpki-client