Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20343031333632.roa
File: 3231372e3231372e3139372e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: pR7+WbMtQNd9nvrOebf3C0WsbQMkpP9St2Ds5kEjQbM=
Subject key identifier: 01:20:94:E1:4C:97:94:3B:75:8A:8A:70:5B:C0:0C:40:6D:6E:BD:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5851E67D6C433BD99F9D9994469417BA7B31EA98
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20343031333632.roa
Signing time: Sat 05 Sep 2026 19:46:47 +0000
ROA not before: Sat 05 Sep 2026 19:41:47 +0000
ROA not after: Sat 04 Sep 2027 19:46:47 +0000
asID: 401362
IP address blocks: 217.217.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:51:e6:7d:6c:43:3b:d9:9f:9d:99:94:46:94:17:ba:7b:31:ea:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 5 19:41:47 2026 GMT
Not After : Sep 4 19:46:47 2027 GMT
Subject: CN=012094E14C97943B758A8A705BC00C406D6EBD5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:89:ec:69:5e:db:83:b0:1f:50:f9:34:84:
cd:15:22:ee:22:49:fc:ac:79:bf:d6:7e:a1:e6:72:
ab:5d:84:96:63:0d:4b:02:de:56:5f:49:77:05:25:
4a:88:0a:70:a2:98:5a:87:95:aa:ee:59:0c:10:8a:
43:c0:d8:58:fc:ab:03:1a:70:20:12:6d:86:1a:cb:
1b:6c:b1:f6:1f:b2:cb:ce:89:15:0d:9b:7d:9b:42:
b6:47:77:cf:28:cf:c9:1a:c0:33:29:03:48:82:af:
8a:e7:2c:d1:25:84:f8:d4:72:86:f4:9e:27:a7:c9:
3a:b3:29:92:94:ed:e7:cf:a2:89:15:86:3b:62:53:
75:6f:3a:e8:c2:93:47:52:76:23:2b:65:cd:1f:3d:
d4:34:9e:c7:38:3f:af:6c:85:2a:d8:16:12:61:37:
e0:ab:d1:df:1c:21:28:09:86:cf:88:27:ad:bc:ba:
52:18:5d:b3:21:ff:be:5b:d2:5a:83:bf:1c:7b:61:
40:15:c0:1c:f1:7f:26:1e:0c:c8:28:4d:c1:7c:98:
28:27:33:1d:22:e5:be:22:91:bb:d8:d0:db:60:74:
c4:78:5c:e5:5d:2c:21:f1:b8:67:04:c2:b1:3f:b5:
7d:47:04:95:37:c4:a6:6d:7b:c4:16:b5:f8:06:56:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:94:E1:4C:97:94:3B:75:8A:8A:70:5B:C0:0C:40:6D:6E:BD:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e5:35:e3:e4:0d:4e:a2:c1:51:2c:2b:17:11:cc:e0:1f:42:
17:08:eb:b5:0f:0b:e2:c0:ed:75:57:a5:5b:a4:d7:fc:c7:b1:
18:d3:14:95:c7:b2:98:ab:f4:b8:2c:dc:48:a4:87:c5:ee:8a:
2b:4e:c5:01:32:27:0b:07:40:13:db:1b:a8:1b:8c:05:94:0e:
88:f9:e8:66:aa:44:39:34:23:63:26:1b:85:38:a1:1a:7d:c2:
bf:f5:e9:4e:9e:38:95:46:a6:6f:92:f2:3f:e4:de:6c:f8:a8:
47:8f:1d:d1:f6:db:e9:62:b8:0e:04:33:3b:44:ef:6a:79:b0:
f9:ec:d1:0b:ff:a5:56:35:f7:85:52:27:66:0f:5f:72:bf:82:
24:80:66:0c:42:60:11:c5:8e:31:15:b4:0d:a6:41:ee:f8:79:
81:74:31:06:75:9e:9c:64:32:3d:9c:f0:90:4e:83:26:b5:fe:
d0:8d:9a:9e:f1:bd:c9:36:dc:ed:f9:60:5c:f6:ec:d4:20:63:
b5:6f:bd:1e:d7:d6:8f:98:9c:bd:dc:01:7e:f2:e9:ac:29:8a:
7e:a9:fc:77:af:ff:b5:37:48:08:b5:d5:25:42:78:e6:83:bc:
d7:a3:b8:21:84:d3:d8:bb:2e:5b:34:7c:14:78:b8:bb:91:d2:
80:73:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:49:19 2026 by rpki-client