Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1YyLFDKAHinrYn0E9SYet3UCjHXeY/uatI10Cds7uZU=
Subject key identifier: 73:DA:77:A3:64:79:1F:3C:CC:28:E4:AA:52:DB:CB:F6:54:97:40:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0AE1E91092B3ABC1AD0E45428E9647E87236F590
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Nov 2026 19:39:57 +0000
ROA not before: Wed 04 Nov 2026 19:34:57 +0000
ROA not after: Wed 03 Nov 2027 19:39:57 +0000
asID: 834
IP address blocks: 217.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e1:e9:10:92:b3:ab:c1:ad:0e:45:42:8e:96:47:e8:72:36:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 4 19:34:57 2026 GMT
Not After : Nov 3 19:39:57 2027 GMT
Subject: CN=73DA77A364791F3CCC28E4AA52DBCBF6549740A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:fb:dc:01:40:90:9f:2b:7d:8f:b9:5e:4e:
02:3c:30:20:5a:c4:dd:09:dd:c1:f9:09:6e:03:28:
75:ae:16:11:88:a7:99:85:ee:6c:28:b7:44:27:29:
05:10:8a:81:ed:30:bb:a6:e5:57:a7:8f:8a:70:90:
15:6d:bd:14:dd:58:ea:d2:cb:39:e6:f9:03:f1:d1:
8a:10:c9:f4:1e:de:7e:76:9d:b2:e3:65:9d:4c:d6:
b0:e8:b6:a1:d4:96:5a:59:91:a4:2b:f6:72:8d:da:
b8:cd:72:00:15:40:04:0f:f8:14:c0:c2:20:94:6a:
6e:1a:d4:72:ce:7a:60:54:cb:5c:34:f3:10:42:16:
1c:4d:84:bc:84:8e:25:b2:d0:90:e0:84:ea:b1:54:
0e:bf:59:d3:4f:08:0d:71:1a:66:3a:83:44:cc:a0:
38:cd:79:ac:18:d5:2c:42:cd:1a:21:df:3d:fd:77:
f4:ec:20:20:ea:be:fd:86:7e:50:d5:b7:47:18:c9:
c4:09:1a:b0:d8:2e:79:f0:9d:a1:96:9f:a7:8c:c7:
3e:6b:e6:b2:25:52:cd:56:fc:95:6c:17:c5:1b:24:
c7:c4:45:85:89:54:6d:a3:c8:50:a2:17:f5:85:72:
5c:46:c4:f7:ab:99:2c:89:4f:17:96:b4:5b:22:78:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:77:A3:64:79:1F:3C:CC:28:E4:AA:52:DB:CB:F6:54:97:40:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b7:02:ce:17:8d:01:05:e1:e6:f7:cc:a4:52:e3:2b:d9:3c:
49:8a:02:db:77:1b:e1:6f:61:8c:e1:b6:00:cc:e7:b7:1e:12:
13:c2:61:2a:f5:01:99:db:62:9e:dc:fb:aa:a8:39:79:ae:48:
de:35:8e:7b:03:3f:0e:9e:c6:8c:c3:23:a3:e5:f2:62:9b:cb:
ae:2f:e0:7e:f5:77:d9:40:23:be:88:ee:ad:40:c5:0f:21:06:
d4:a4:2c:0f:63:f7:ae:06:96:60:3a:2e:02:3a:db:85:de:e9:
68:0b:7a:6b:78:8a:b0:d0:f5:45:01:c4:ca:32:c8:4d:5f:a3:
97:01:d0:e6:d3:3b:d0:11:f1:a6:15:37:a9:0d:91:c2:d8:4d:
66:9f:a4:93:69:19:2f:5d:02:54:8f:43:fd:62:f2:5c:e9:40:
ef:fc:e2:be:ce:0a:95:c3:0d:3d:58:db:74:dc:31:19:fb:b6:
61:4d:da:e7:e6:9f:02:90:52:96:44:33:1d:2f:d4:ac:af:87:
d3:d2:cb:52:c3:b1:d3:47:38:d2:23:1a:4e:ee:4a:d5:dc:0a:
1f:77:5b:57:df:8f:49:d9:90:ac:2f:4e:03:eb:d3:1e:17:26:
1c:18:ca:74:8d:fb:68:63:de:71:36:ff:a1:46:05:9b:21:f5:
f4:5f:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:00:31 2026 by rpki-client