Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20313532313739.roa
File: 3231372e3231372e3139372e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: ezSSfZQx7uwFlPSKn1qwodyqUVPfL5TFlu9lTg1cU7w=
Subject key identifier: 1D:9D:4C:25:E9:78:8C:3F:FE:F0:9B:75:9A:22:11:62:17:06:0F:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 11FEA88026FD076DD73BF415FDA4AF761AE021EB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20313532313739.roa
Signing time: Mon 27 Jul 2026 10:35:46 +0000
ROA not before: Mon 27 Jul 2026 10:30:46 +0000
ROA not after: Mon 26 Jul 2027 10:35:46 +0000
asID: 152179
IP address blocks: 217.217.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fe:a8:80:26:fd:07:6d:d7:3b:f4:15:fd:a4:af:76:1a:e0:21:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 27 10:30:46 2026 GMT
Not After : Jul 26 10:35:46 2027 GMT
Subject: CN=1D9D4C25E9788C3FFEF09B759A22116217060FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:27:9f:fe:10:33:7c:e3:35:a7:87:32:cf:
0c:ab:1b:4c:28:01:0d:23:8b:0e:e0:99:28:9c:74:
8e:ca:40:76:68:c1:61:27:bc:b1:aa:f2:04:39:70:
40:88:da:a1:90:d4:ba:0a:d8:ec:14:1a:09:6c:b3:
f2:fe:f6:38:97:9b:86:60:04:5c:77:cf:6c:e8:ff:
e8:b5:1e:cd:e8:36:87:55:a2:c7:ad:e6:8f:20:0b:
b5:4b:13:41:ea:60:c4:a5:c9:c6:8c:1b:0b:3d:64:
04:2f:6c:bf:15:6a:c3:1d:a2:27:af:c4:0a:4b:c0:
16:ce:d7:03:58:5d:d9:c0:c0:22:58:8e:47:76:05:
cd:88:3b:30:94:cf:a6:b1:70:ef:23:51:bb:d4:19:
16:34:71:fe:74:f0:a2:ee:b7:a2:d9:5e:85:3c:7c:
05:52:69:0a:3b:bf:2b:22:59:75:8d:4c:f0:2b:d3:
2c:25:7f:68:67:ef:b0:c8:44:1d:1a:52:ae:63:e0:
3a:39:98:f7:73:1b:c6:06:b7:7e:50:32:cc:18:6f:
4b:8a:5e:89:92:21:17:fc:f4:29:4d:aa:c7:50:db:
99:97:bf:bf:95:7f:cf:97:d5:08:9b:56:f5:7d:d9:
6f:5e:91:e7:21:93:6c:72:00:3c:64:56:06:28:3c:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:4C:25:E9:78:8C:3F:FE:F0:9B:75:9A:22:11:62:17:06:0F:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:71:be:ea:f4:fd:91:16:66:44:d2:8f:88:03:bc:c1:3e:9d:
ba:85:d5:a9:85:b4:3b:01:de:8b:ff:c7:b2:ac:75:8f:01:3e:
1f:f0:ab:93:df:3b:ec:bb:80:8c:b3:1b:87:3e:ec:7a:ab:ec:
31:5b:8b:e8:1f:8e:b4:23:81:4e:a0:1e:08:c5:30:9f:b7:17:
64:47:d4:f7:0e:8a:1c:2a:db:20:8e:f1:56:b4:a1:f9:88:c7:
1e:75:83:e7:62:fd:00:6e:b0:5a:b5:1c:d0:8a:1b:bd:02:4a:
09:a8:3d:8d:e5:32:fb:e8:e6:a4:a2:ec:8a:f5:54:b1:21:c4:
c4:8f:ec:15:21:8f:68:4f:76:97:0a:3a:72:63:65:0f:67:bd:
8e:ec:51:16:83:e7:fa:20:63:d1:3b:8c:c3:fe:84:4e:31:46:
57:8b:71:4d:ef:f9:bc:b6:6a:79:f3:2f:d8:21:a2:02:36:9c:
37:75:51:65:ea:2e:4f:c9:0c:2d:36:1e:a5:85:77:26:a2:c3:
a3:17:2b:71:91:56:1b:b0:af:07:84:d1:ae:6d:4f:e1:ba:d0:
13:9f:78:30:0d:cf:de:f2:a6:cf:73:b1:11:1a:55:63:1d:7d:
b8:93:65:0b:2a:a5:15:99:a2:b1:65:b9:eb:bf:8d:a4:b0:0d:
b1:7b:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:41 2026 by rpki-client