Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231372e302f32342d3234203d3e20323037383938.roa
File: 3231372e3231372e3231372e302f32342d3234203d3e20323037383938.roa (raw, json)
Hash identifier: q/bE/5c4XQp5/BHyiw8qhnB7yGqZH4+RuZWQbiHnRQk=
Subject key identifier: CE:00:01:DD:AB:6F:54:4C:6B:65:DF:24:0A:B6:68:A9:B3:DE:53:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34B4CC5878BDE1DF8B544C8FA22DE018739436B9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231372e302f32342d3234203d3e20323037383938.roa
Signing time: Mon 24 Aug 2026 14:28:08 +0000
ROA not before: Mon 24 Aug 2026 14:23:08 +0000
ROA not after: Mon 23 Aug 2027 14:28:08 +0000
asID: 207898
IP address blocks: 217.217.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b4:cc:58:78:bd:e1:df:8b:54:4c:8f:a2:2d:e0:18:73:94:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 14:23:08 2026 GMT
Not After : Aug 23 14:28:08 2027 GMT
Subject: CN=CE0001DDAB6F544C6B65DF240AB668A9B3DE53DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:7d:ab:65:65:2e:38:5a:a3:7e:90:c9:24:
7c:3d:cc:cf:91:5e:57:40:11:af:1f:1b:e4:ea:2f:
c0:8c:c4:c3:f2:82:eb:2f:a0:31:89:cc:65:e9:51:
58:43:41:72:73:d8:af:de:18:12:05:27:44:8a:33:
bc:20:1a:2e:c6:94:6e:91:c7:e1:08:cb:c2:74:97:
15:96:5b:91:4b:01:b0:bb:9b:f7:94:f6:89:06:a2:
dd:10:cb:3e:04:a5:44:fe:95:dd:a8:3e:7e:97:78:
85:35:c3:81:1f:a9:2c:13:3a:00:e5:50:a8:1b:23:
35:b6:78:89:d4:64:c6:f4:a7:13:fa:cd:30:04:cf:
ad:24:40:d0:38:06:89:16:02:be:5d:4c:25:cd:cb:
23:29:56:a3:67:2b:e7:de:71:d9:aa:ec:5b:05:db:
34:d4:ee:0f:03:d9:49:c6:76:46:be:0b:fe:12:f8:
ac:75:61:75:22:10:15:db:8c:da:2c:8c:85:ff:7a:
0a:a4:01:2c:a0:c7:12:66:05:34:2b:d3:5e:7b:c0:
8d:34:60:63:9d:81:40:69:2a:2a:4a:89:6d:43:4b:
59:47:bb:ab:35:f4:63:66:93:61:45:50:d7:c1:ef:
10:f3:f6:3f:d3:76:de:a4:ae:c3:1a:f2:83:4b:97:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:01:DD:AB:6F:54:4C:6B:65:DF:24:0A:B6:68:A9:B3:DE:53:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231372e302f32342d3234203d3e20323037383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:4d:76:b3:4a:f4:a5:c7:7d:38:ae:c4:50:16:18:0c:cb:f8:
8d:11:ce:94:b8:00:78:70:20:72:8a:db:f9:b7:9f:29:53:c0:
7b:30:cf:95:00:91:ad:f6:f7:5a:90:ca:bb:7e:74:1e:6b:d8:
32:d6:83:fe:ba:1b:3d:0b:3a:ec:8f:88:71:03:34:a5:51:e5:
88:cd:ff:6f:83:55:6a:0c:d8:ee:f2:77:df:b7:d5:b1:48:45:
88:aa:6f:e3:bf:65:06:95:e8:f5:57:2b:ce:71:d9:8d:2f:0d:
ab:14:60:eb:0c:7b:01:9b:83:d8:df:16:e4:71:39:db:da:bf:
e5:07:9a:7c:60:da:ea:15:8e:65:83:2a:d4:ac:42:91:0a:09:
6c:cc:7f:54:e0:82:93:b4:64:04:16:9a:51:a3:3e:b8:7b:80:
65:47:04:f5:d2:c5:9f:43:2c:2e:85:6f:0d:59:78:db:42:b4:
a6:d6:04:90:05:3c:64:85:dc:31:e3:96:0b:71:7b:b1:f0:1e:
97:4f:c4:7b:33:d8:6d:c7:b8:4a:9e:0a:aa:4c:08:bd:78:e7:
96:d7:7e:d5:22:39:12:e2:f6:3b:ca:dd:91:6d:34:ea:05:bd:
a9:0a:f4:85:91:5a:26:ba:06:41:fb:4e:c2:29:4e:cb:c7:51:
97:64:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:53:57 2026 by rpki-client