Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230352e302f32342d3234203d3e20313937353730.roa
File: 3231372e3231372e3230352e302f32342d3234203d3e20313937353730.roa (raw, json)
Hash identifier: BCSzIcRonUAqvrkiMqqwGkNMKF+FngtGbKloe3i/H7M=
Subject key identifier: 1F:F2:4D:1D:01:85:BA:E2:EA:52:B2:AA:80:98:FE:07:B1:2D:EF:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21BAC56C682FAA1D3C05BCC5C50161DF9F2C3848
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230352e302f32342d3234203d3e20313937353730.roa
Signing time: Mon 07 Sep 2026 18:39:27 +0000
ROA not before: Mon 07 Sep 2026 18:34:27 +0000
ROA not after: Mon 06 Sep 2027 18:39:27 +0000
asID: 197570
IP address blocks: 217.217.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:c5:6c:68:2f:aa:1d:3c:05:bc:c5:c5:01:61:df:9f:2c:38:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 18:34:27 2026 GMT
Not After : Sep 6 18:39:27 2027 GMT
Subject: CN=1FF24D1D0185BAE2EA52B2AA8098FE07B12DEF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:a2:4d:42:58:a4:1c:10:f9:8e:4c:4b:db:
f8:f5:b5:48:f6:d3:01:77:8e:4f:fc:df:44:aa:ac:
12:8e:84:b3:3e:32:20:e5:4a:13:98:e2:e3:93:6a:
9a:97:38:8a:14:16:bb:64:7c:88:59:81:7f:9f:9d:
9c:3c:e9:12:57:63:38:09:41:08:e0:0f:fd:e6:1c:
56:72:c4:17:5c:41:1d:5e:2f:04:43:4b:25:79:c7:
db:68:3b:02:d6:b4:f2:16:5d:13:4d:64:4c:7a:d0:
7d:7a:65:e6:d3:6f:24:6d:c1:68:b6:57:60:f8:e5:
9c:87:7d:b8:8a:0d:f7:70:26:a4:e0:6d:b2:7c:3e:
64:5c:29:92:4e:db:f3:eb:0d:4c:31:96:7b:f9:73:
25:81:85:a0:48:c7:d7:09:4e:b7:22:03:1d:d0:ab:
61:83:9e:97:ac:03:83:31:51:17:a6:50:2f:f8:23:
b8:a4:70:b4:d3:1b:83:b7:5d:23:a1:0f:53:1f:84:
fc:74:35:20:da:a2:d6:53:0d:18:76:1b:08:4b:89:
f1:a2:77:b4:2b:80:81:4f:6b:f4:9e:10:97:53:ba:
f3:5f:04:08:87:06:e1:42:b1:4d:2f:2b:2c:ea:be:
51:03:5e:15:82:4e:db:73:f5:5c:e7:ee:69:cf:13:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:4D:1D:01:85:BA:E2:EA:52:B2:AA:80:98:FE:07:B1:2D:EF:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230352e302f32342d3234203d3e20313937353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.205.0/24
Signature Algorithm: sha256WithRSAEncryption
32:02:50:57:18:93:b3:55:d1:a3:a1:b0:35:44:46:61:3d:a2:
8e:89:27:e1:f7:03:f2:64:d8:46:3a:d3:25:ba:a3:ae:84:40:
48:1f:44:e5:9b:0d:1a:e6:eb:0f:85:da:89:57:00:82:7f:9b:
8b:fa:27:85:42:81:ef:2f:d8:72:6b:53:2e:e9:b8:e5:9b:63:
68:e7:c1:c3:17:dd:02:1a:fc:ea:ac:91:e0:83:d7:3b:9c:40:
d6:6e:c6:f4:cc:a2:5f:4d:58:cc:c8:56:1d:06:b0:eb:86:40:
be:f8:81:ae:2d:2e:cc:c7:fb:16:b6:ca:f8:d1:a7:63:86:3b:
b2:bb:b4:71:55:c7:2a:8c:57:6f:78:66:8b:43:aa:a9:20:0d:
c2:c7:39:49:6f:d4:88:6a:db:a2:89:25:2d:2a:d3:41:2e:61:
d8:14:14:01:c1:c5:fa:76:9f:a1:ff:5b:a3:91:0a:b5:af:e2:
6d:58:d5:7e:b5:9b:0a:1b:4f:46:0e:4b:60:69:18:74:f4:ec:
89:7a:50:30:84:d4:7b:76:ea:75:e3:56:f0:6f:95:e3:18:41:
50:fb:53:39:0c:1d:17:b9:73:96:43:4e:34:a8:24:76:a8:24:
a2:bd:74:fa:53:a6:87:1b:a0:65:c2:18:41:24:f4:d7:9a:a9:
ab:c0:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:23 2026 by rpki-client