Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20333936353236.roa
File: 3231372e3231372e3139362e302f32342d3234203d3e20333936353236.roa (raw, json)
Hash identifier: lBmhlFz0xUEWVBJxekpNPnpz657yU+EEwD3i9x35b4U=
Subject key identifier: D5:A6:4D:0D:07:21:4A:A5:88:42:18:7F:65:AA:B4:8B:B6:C8:55:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23B999327CCEFB955074068A7587C3083C988CDA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20333936353236.roa
Signing time: Sat 05 Sep 2026 19:46:40 +0000
ROA not before: Sat 05 Sep 2026 19:41:40 +0000
ROA not after: Sat 04 Sep 2027 19:46:40 +0000
asID: 396526
IP address blocks: 217.217.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b9:99:32:7c:ce:fb:95:50:74:06:8a:75:87:c3:08:3c:98:8c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 5 19:41:40 2026 GMT
Not After : Sep 4 19:46:40 2027 GMT
Subject: CN=D5A64D0D07214AA58842187F65AAB48BB6C85519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:be:c5:77:4a:9b:f2:01:64:87:49:61:03:
14:54:e3:87:fb:33:6a:37:72:a9:80:7a:dc:33:b7:
3b:4b:77:eb:81:44:78:48:0f:e3:29:08:d1:4a:9a:
11:64:da:24:0e:81:13:e7:43:fa:d6:85:d0:a8:5d:
d4:33:82:2f:8b:66:65:14:a2:af:fb:3a:f4:b5:f5:
c7:21:f0:f8:29:02:4a:bf:ff:36:44:8d:c1:cd:98:
18:39:3a:81:0f:0b:61:9c:e9:09:04:aa:47:60:62:
34:a6:42:47:10:ea:d0:e1:7d:f6:8f:9a:ef:86:00:
98:8b:de:b2:a9:d3:2f:59:5d:27:30:ec:16:43:3c:
2a:ee:c8:ec:f4:58:f2:b6:aa:73:92:a1:fe:39:06:
49:06:83:db:26:85:bd:24:a3:4d:21:b6:a2:e2:99:
69:94:8a:ae:16:40:8b:76:57:9b:a9:6c:c3:e9:a9:
db:10:be:86:a9:6d:cc:3c:08:89:6e:26:ee:c9:77:
73:d3:3e:56:48:ca:6c:c0:bc:3a:90:df:85:df:b2:
64:70:93:7a:14:ee:fe:00:37:17:18:21:89:37:49:
e7:08:08:0e:b6:05:74:9d:5a:2c:6b:b1:51:7d:23:
c1:75:e8:a1:70:9a:ef:45:ea:78:14:68:47:e8:5b:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:4D:0D:07:21:4A:A5:88:42:18:7F:65:AA:B4:8B:B6:C8:55:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139362e302f32342d3234203d3e20333936353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:15:a1:45:c5:dc:89:2e:b7:2b:6e:11:37:21:f0:6c:ef:71:
30:32:e7:ee:c5:65:a4:4b:d3:b2:f9:90:98:d7:74:07:24:93:
87:5c:b3:69:4f:87:52:ac:c8:80:01:af:18:cd:39:3f:29:f0:
84:39:57:b0:27:bf:47:d3:c9:23:72:e9:ca:4a:33:51:cd:c2:
b1:0d:32:cc:93:6c:a0:aa:3a:1e:fa:89:72:d6:21:78:4f:1c:
f9:4d:38:36:ac:2e:a0:12:35:9b:10:32:fb:ce:06:9f:a6:95:
5a:7a:96:f5:42:e7:b7:3a:1b:1a:5e:18:26:70:a7:a8:8a:76:
43:c3:0b:f5:84:6d:72:61:bc:3d:4f:a8:8e:4e:f0:f4:08:75:
74:05:1c:f1:cc:50:4d:37:ec:2f:74:08:b0:3d:e9:46:56:93:
52:93:b9:c7:f9:32:3b:1a:5d:27:37:e3:98:0d:12:bd:09:2c:
3f:3c:f1:c3:b2:70:04:8d:5d:92:a8:e1:38:2d:eb:53:b7:e3:
3c:cb:93:19:45:d5:be:85:1f:74:f2:3a:a2:ec:c9:ec:4b:54:
85:3c:06:aa:5a:00:72:4d:0d:e6:dd:e9:74:56:9f:b9:5f:19:
6e:86:27:5c:d4:36:3d:e1:7e:d1:df:72:29:69:40:45:51:be:
e7:eb:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:30 2026 by rpki-client