Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32372e302f32342d3234203d3e20313530323739.roa
File: 3231372e3231372e32372e302f32342d3234203d3e20313530323739.roa (raw, json)
Hash identifier: 5tS0qXNFmWLlxYpN5YAEF5I4OhzEVTqdaXEs/gmdYY4=
Subject key identifier: 39:1A:54:33:85:2E:3B:1F:BB:19:04:04:97:CD:F3:29:C4:DC:49:4C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7FBBC868E84F80543DF908942BFB447AF7A0C6E3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32372e302f32342d3234203d3e20313530323739.roa
Signing time: Thu 27 Aug 2026 07:28:11 +0000
ROA not before: Thu 27 Aug 2026 07:23:11 +0000
ROA not after: Thu 26 Aug 2027 07:28:11 +0000
asID: 150279
IP address blocks: 217.217.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bb:c8:68:e8:4f:80:54:3d:f9:08:94:2b:fb:44:7a:f7:a0:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 07:23:11 2026 GMT
Not After : Aug 26 07:28:11 2027 GMT
Subject: CN=391A5433852E3B1FBB19040497CDF329C4DC494C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:ce:c2:01:37:8a:0f:3c:ce:5f:db:f6:8b:
07:c0:6d:e3:25:85:b9:02:87:44:dd:a8:27:58:86:
dc:b6:7e:95:69:3e:00:72:be:2a:6d:61:86:68:b9:
3c:ff:33:3c:7f:1f:26:b3:d9:af:a2:06:a7:e4:09:
e2:c8:5a:1a:c3:4f:5f:c7:fd:ae:18:51:78:33:03:
dc:d1:e3:16:ca:4e:97:b0:81:e4:e2:7e:6a:bf:cb:
37:8e:bb:e1:33:03:21:5c:4d:04:59:d7:5e:42:38:
eb:ea:f3:6a:af:54:ee:28:7b:50:8e:22:d3:99:e9:
9e:c1:79:7d:e0:40:5c:3d:f6:0e:85:6b:e9:4e:9f:
cb:0b:c8:46:98:f3:5f:cb:6c:b0:e8:5d:d7:59:3e:
79:69:b9:4f:eb:b9:01:16:1b:34:dd:a4:5b:af:47:
05:a5:7d:8a:84:30:31:56:c8:f5:1f:bf:17:7a:5e:
c7:d9:79:af:92:aa:80:17:bb:1d:03:29:41:cf:f3:
43:5d:a9:50:66:53:d6:30:42:45:40:c4:b3:79:96:
85:d5:9c:18:85:81:03:53:2e:c4:5d:f2:89:2b:66:
0f:48:f8:0b:77:c6:88:a3:e3:fa:9d:29:50:b1:25:
53:b0:42:37:fe:b9:87:22:6d:4f:a8:9b:46:5f:26:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:54:33:85:2E:3B:1F:BB:19:04:04:97:CD:F3:29:C4:DC:49:4C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32372e302f32342d3234203d3e20313530323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e5:60:3d:0b:12:ee:9b:2f:99:a5:4d:b7:11:85:a9:fc:0d:
a2:5b:71:c0:08:c1:45:02:f5:58:84:a0:e1:83:8b:7b:9d:a5:
15:af:9e:df:9a:0c:57:9e:f2:96:91:16:62:03:06:9b:82:b0:
c5:47:85:34:7d:0c:eb:4e:09:ac:d5:84:0f:db:7f:fa:b4:69:
26:ca:f7:ab:0e:7e:52:71:41:d8:e9:6c:cd:e4:49:26:d7:f1:
88:44:b0:0f:08:fc:58:0a:08:11:80:f2:4b:09:60:ae:c8:6d:
05:bd:e6:d0:1a:b9:9f:80:6a:01:60:4e:9a:71:a3:99:af:95:
8a:58:4b:f0:b8:9a:80:59:ff:ad:6b:18:4a:d4:f7:55:96:db:
84:c8:2f:39:47:0b:99:04:d7:c4:52:f8:9d:40:4d:c1:e6:64:
9e:da:9c:14:d3:8f:92:7d:6b:f8:22:1a:93:24:84:b8:19:57:
18:73:0a:57:6b:a1:56:0b:65:c8:e9:4c:38:9c:e5:6f:7e:13:
91:a4:04:18:db:f0:dc:5a:91:f3:86:56:a6:6c:a1:57:31:a7:
01:ed:63:75:e6:9b:fe:1d:6e:68:ec:a0:33:89:f4:29:75:5e:
76:01:2d:e0:1a:94:90:5e:e6:9c:c4:3b:7a:ae:5d:a9:4f:04:
96:01:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:19:31 2026 by rpki-client