Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231382e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3231382e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: bN+z3T66n0t3xSZ2YP9W8nQOj1Ds/EKzg9BjXj3lDQM=
Subject key identifier: 2D:54:B2:77:4C:98:9C:1E:72:F9:77:0B:06:AF:3D:6A:6B:63:96:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 71157FC1F165FAA16908B0DD7392C5045D5A3EBA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231382e302f32342d3234203d3e2033323537.roa
Signing time: Thu 06 Aug 2026 07:27:41 +0000
ROA not before: Thu 06 Aug 2026 07:22:41 +0000
ROA not after: Thu 05 Aug 2027 07:27:41 +0000
asID: 3257
IP address blocks: 217.217.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:15:7f:c1:f1:65:fa:a1:69:08:b0:dd:73:92:c5:04:5d:5a:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 07:22:41 2026 GMT
Not After : Aug 5 07:27:41 2027 GMT
Subject: CN=2D54B2774C989C1E72F9770B06AF3D6A6B639619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:b4:78:22:11:ba:16:1c:f0:1a:de:31:b3:
77:80:af:f6:1e:e4:0e:1b:a8:56:82:02:8e:95:03:
6e:a0:f5:80:53:69:63:66:ec:e1:62:ad:f0:0b:71:
05:80:ec:07:9f:cc:38:90:37:17:69:ac:6f:0b:54:
31:80:eb:df:86:95:da:f7:aa:43:53:3d:81:e4:f9:
4f:14:ad:cc:97:10:1e:a8:50:8c:d5:8c:18:c2:4f:
7d:1c:0e:a3:f0:3d:3c:32:9f:c4:ec:7f:29:52:29:
e7:7f:b1:41:ae:32:55:fd:11:b9:50:3c:45:db:7d:
fa:72:be:bd:0f:7a:99:7b:bb:09:5a:2f:00:43:50:
f8:2a:fd:86:cc:74:2f:57:cc:0b:72:c6:77:79:07:
a2:a5:87:e3:cf:d9:b1:fb:98:f6:06:7e:30:3b:d4:
cf:1d:9a:7d:62:75:d9:da:ac:7b:c6:f2:4d:53:f0:
9f:09:8c:b3:0e:80:0d:b7:9b:ee:a3:dc:b8:c8:3e:
f2:95:62:ff:0c:67:4f:85:5f:71:37:60:b0:4e:4c:
2f:c1:dd:7d:7c:75:e5:66:e5:b9:3e:02:b5:a9:35:
f2:ef:5c:94:d6:bd:31:7d:a1:ce:ed:60:57:e2:91:
77:12:61:f1:ad:2a:cf:87:b4:ff:0e:a6:01:db:84:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:B2:77:4C:98:9C:1E:72:F9:77:0B:06:AF:3D:6A:6B:63:96:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231382e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.218.0/24
Signature Algorithm: sha256WithRSAEncryption
10:bb:bd:b2:b3:1b:cb:e1:11:75:6b:cb:af:ac:f1:b4:ca:21:
0b:e8:64:23:ba:ba:53:8d:eb:21:09:2e:88:ec:d2:5e:78:1b:
78:25:34:98:13:57:e6:f3:d5:d6:04:1c:d8:45:0b:4a:cb:a7:
09:25:67:1a:00:28:e1:67:41:4c:3e:0f:e6:ef:4b:59:44:c0:
89:7a:ad:2c:bb:63:fc:f9:40:2d:24:1f:f4:7d:f5:ef:2d:be:
b7:02:cc:d4:47:10:75:5a:e2:5d:59:52:6b:e1:00:ab:13:7c:
67:91:e1:8e:4f:b9:73:f7:30:37:df:70:12:76:2c:12:fe:29:
40:24:75:fd:29:ba:07:7a:b8:06:42:c5:25:3e:e6:22:27:f4:
47:b9:1d:e4:49:36:f0:90:4d:19:48:0c:28:5e:3b:29:12:e4:
c2:66:ad:12:2d:c5:bd:6b:4c:3f:ae:55:91:26:ee:bd:1e:58:
b9:22:c0:50:c4:e1:72:a7:73:25:f8:cb:e4:87:db:df:89:f4:
00:48:50:21:4b:bc:36:ea:71:9b:37:c6:28:07:68:84:f9:b1:
1f:f7:e8:ef:45:c0:85:48:c4:32:69:cb:5d:ca:68:d6:18:65:
8e:f8:95:90:06:ec:90:86:e8:30:88:70:98:30:b8:09:d4:95:
19:7c:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:13:47 2026 by rpki-client