Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e20343032323635.roa
File: 3231372e3231372e3139322e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: s/sLPtCAp2yWd7xA9oeLq7KdlgbuP8DMg2SGd9vlM6o=
Subject key identifier: EB:0E:E2:82:1D:8F:7F:84:D2:F3:9C:B5:A5:56:01:54:14:F4:37:42
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10993CA231C5C94E657F9D3887C241314C7397DB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e20343032323635.roa
Signing time: Sun 26 Jul 2026 10:08:46 +0000
ROA not before: Sun 26 Jul 2026 10:03:46 +0000
ROA not after: Sun 25 Jul 2027 10:08:46 +0000
asID: 402265
IP address blocks: 217.217.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:99:3c:a2:31:c5:c9:4e:65:7f:9d:38:87:c2:41:31:4c:73:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 26 10:03:46 2026 GMT
Not After : Jul 25 10:08:46 2027 GMT
Subject: CN=EB0EE2821D8F7F84D2F39CB5A556015414F43742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:5e:b4:bb:6f:b4:d8:44:d9:43:9a:c7:f8:
ee:97:5b:4f:3d:65:52:d4:ca:52:0c:70:c6:71:25:
6e:60:a1:2d:a8:c4:ce:d6:4b:a5:b8:73:9d:c8:56:
73:57:5d:da:40:92:62:94:6f:e0:6c:fb:f7:09:cb:
e6:a1:e4:1a:39:b2:28:cb:6f:99:ba:96:f8:2f:2f:
e1:d3:c9:86:1b:49:40:e5:7d:70:8d:45:f6:9a:5d:
2f:45:f7:78:d4:17:f1:ad:ba:36:65:50:d4:79:fd:
5c:fb:05:6a:aa:96:55:e4:6b:99:4a:eb:f2:97:ce:
3b:a3:42:b5:b7:4c:0f:51:d5:b0:e2:ab:fc:e4:2e:
76:67:c4:58:06:e8:84:37:f6:1b:77:5e:fb:f5:bb:
30:69:2f:03:35:b6:7f:67:7f:bb:cc:35:0d:1d:91:
c6:6f:cf:52:eb:82:bb:bc:23:b5:ba:09:e2:f6:fa:
cd:f5:2b:2c:38:7b:ef:55:b8:87:9c:39:13:18:b3:
52:e5:fc:dc:f9:ab:cc:40:92:85:8a:9e:d1:42:30:
45:fa:a1:ed:f7:c4:88:47:c5:7f:6d:68:be:b4:bd:
a3:15:59:79:78:c0:11:74:09:5b:ee:a3:a9:ad:a5:
3c:97:67:c6:5e:34:fd:26:16:82:e0:3b:c6:43:20:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:E2:82:1D:8F:7F:84:D2:F3:9C:B5:A5:56:01:54:14:F4:37:42
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.192.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d6:a4:2e:5f:95:ef:81:ea:ca:44:72:f5:d5:af:04:41:33:
6c:43:8e:99:72:d9:e9:7a:b5:44:22:1d:73:45:d7:ca:ad:20:
1d:bd:c7:e8:33:c7:0a:98:f7:cf:88:f4:96:43:4f:1d:13:59:
0c:72:39:a7:8f:26:ac:05:f4:14:0c:f5:c2:65:42:5f:7f:28:
03:95:7e:fb:a9:ae:e2:d8:db:f5:81:ac:1d:94:f5:db:2a:70:
77:d6:ff:c7:02:a8:85:94:85:e6:78:ed:ab:5d:0d:88:98:17:
b9:c9:eb:30:6e:9c:ae:80:49:c6:60:48:cf:4c:08:aa:b8:20:
70:f2:f6:c6:76:52:d7:f9:7c:fb:5e:71:15:5a:05:af:49:07:
88:c9:90:60:7d:a5:81:fc:b4:20:10:1f:8e:1c:fb:4e:24:0e:
49:15:41:52:8b:11:60:25:73:92:fd:9e:0c:6f:6c:00:d1:cc:
00:e5:d4:6e:7a:a1:72:a2:49:71:b4:36:24:2f:bf:96:77:50:
17:a1:7d:60:ee:b9:8b:63:46:88:9c:7d:84:7f:03:68:df:6b:
25:09:74:75:36:74:33:0e:15:fa:c0:1c:89:0b:98:8b:05:d2:
af:1e:96:4f:c5:0a:81:df:4b:97:42:f3:d1:eb:eb:42:ff:cb:
fe:64:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:15 2026 by rpki-client