Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232352e302f32342d3234203d3e20323138333630.roa
File: 3231372e3231362e3232352e302f32342d3234203d3e20323138333630.roa (raw, json)
Hash identifier: Go1xXq9M1MJqbl+X/hZnwf90e4kGRc3d/QuKWyeZf7E=
Subject key identifier: 4A:3F:2A:08:66:71:11:9B:8F:DD:D8:32:A7:BD:AC:B1:2A:E2:79:90
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 623EFB1249062929006FE699BDEBAD923BFB8CF5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232352e302f32342d3234203d3e20323138333630.roa
Signing time: Thu 22 Oct 2026 09:36:18 +0000
ROA not before: Thu 22 Oct 2026 09:31:18 +0000
ROA not after: Thu 21 Oct 2027 09:36:18 +0000
asID: 218360
IP address blocks: 217.216.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3e:fb:12:49:06:29:29:00:6f:e6:99:bd:eb:ad:92:3b:fb:8c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 22 09:31:18 2026 GMT
Not After : Oct 21 09:36:18 2027 GMT
Subject: CN=4A3F2A086671119B8FDDD832A7BDACB12AE27990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:40:68:dc:fd:8c:a2:49:55:63:b4:80:1b:
92:30:01:25:10:9e:e0:ef:43:fe:13:49:85:c3:cc:
d5:b3:5a:62:96:f4:28:03:f6:b5:0a:5c:69:63:6c:
b6:91:25:c6:41:6a:91:42:3c:06:87:5a:d8:1a:a5:
72:05:9a:39:7d:02:4b:bc:98:ae:51:f2:c3:d9:2b:
44:02:9b:bb:27:0e:63:33:c6:77:2d:0a:a3:27:48:
1d:cd:3b:3f:9a:27:fe:9d:d2:45:47:c4:f0:6d:de:
00:6b:e8:0a:58:dd:5c:05:d8:c4:f9:60:da:cb:36:
45:f3:ef:00:9d:1c:74:c2:93:3b:46:6c:94:8f:c6:
b7:dd:3d:77:2c:30:e3:7b:c4:3a:de:09:8a:20:ac:
6b:91:21:52:8d:d5:95:af:ea:14:2f:4d:13:02:f8:
78:0d:e1:68:ae:63:27:2a:e4:6b:ce:b9:87:23:08:
19:2d:93:5c:75:2c:7c:b3:3a:9d:47:bd:06:09:74:
a7:a4:f2:8f:74:78:05:66:de:22:3b:39:27:4f:ce:
27:02:0f:e7:08:d5:92:3b:80:17:71:8c:4d:0c:a6:
e8:3a:8f:4b:d4:0a:f8:05:ca:08:2c:2b:d0:73:34:
d0:b9:e8:2d:cf:e1:66:a9:c0:66:e3:45:57:6b:cb:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:2A:08:66:71:11:9B:8F:DD:D8:32:A7:BD:AC:B1:2A:E2:79:90
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232352e302f32342d3234203d3e20323138333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.225.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d3:1e:b1:73:73:e8:87:3c:f6:09:80:86:91:d6:79:cc:5e:
1f:ea:77:df:c1:bc:fc:8f:6f:a2:b8:c1:6a:57:3c:26:f1:46:
35:3b:40:05:23:b2:1c:8d:60:0a:d9:40:f3:ae:4b:76:7d:fe:
2e:ab:f4:f8:dc:70:ed:88:aa:8c:13:75:c2:0d:29:29:e8:3b:
20:04:aa:90:8c:d9:3c:07:56:06:31:e4:6d:32:d6:7c:70:40:
87:23:e6:c4:16:ab:6a:a2:62:03:9e:81:e6:b3:2f:df:63:d4:
65:36:ba:7a:c0:1a:46:fa:04:92:12:ba:df:f1:14:ac:71:30:
a2:17:12:c9:bb:71:2e:89:ef:36:ff:57:bb:be:82:7a:5e:1d:
a4:40:aa:ab:53:86:4c:f6:d1:61:c2:64:fc:28:d3:b2:57:81:
fa:5d:16:33:20:5f:87:ac:84:52:0e:fb:6d:e0:7a:a2:58:ff:
19:d5:05:9e:c8:59:8c:7e:a7:30:50:e7:d8:a9:9c:c7:16:6b:
9b:e8:e7:89:0f:4a:b1:1b:d6:fb:a9:50:fc:e6:ea:c4:b1:ca:
97:b0:7d:20:57:1c:0e:c6:cf:86:16:22:7b:b8:49:24:8d:b7:
6f:87:18:92:c5:bd:49:71:10:e5:86:e0:4f:52:b9:14:e4:2f:
83:0e:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:32:49 2026 by rpki-client