Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130342e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3130342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: sqc6trqvROF9frnWPEtZZruGqi9nyzfH0mq56vcgygs=
Subject key identifier: 11:44:35:74:8F:38:2E:C9:EA:B1:FA:17:DA:BC:21:10:5F:BC:48:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F88E5FBE0836C775E4203B80901D0EC9308BB63
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 28 Sep 2026 12:29:29 +0000
ROA not before: Mon 28 Sep 2026 12:24:29 +0000
ROA not after: Mon 27 Sep 2027 12:29:29 +0000
asID: 136787
IP address blocks: 217.216.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:88:e5:fb:e0:83:6c:77:5e:42:03:b8:09:01:d0:ec:93:08:bb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 12:24:29 2026 GMT
Not After : Sep 27 12:29:29 2027 GMT
Subject: CN=114435748F382EC9EAB1FA17DABC21105FBC48CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:18:3e:da:06:40:57:6c:5b:a9:46:ab:94:
ff:a7:ae:64:0b:ae:c8:f3:fb:ff:92:0a:0e:4e:3c:
b8:2e:f7:77:bd:c1:dc:e4:8f:c1:93:dc:75:cb:90:
d0:d4:c6:7a:af:7d:cc:c7:3f:67:28:e3:e3:4a:ad:
b5:85:dd:b1:ac:08:f0:c4:43:48:18:90:8c:31:11:
06:55:f1:ce:0f:7e:36:45:c7:54:bb:61:3b:ab:b4:
80:96:be:ee:1f:c9:59:2d:45:80:30:52:a3:d8:c4:
6a:f4:0a:66:a0:f4:15:36:45:72:16:6f:27:db:85:
2c:ce:5b:97:36:44:12:f9:93:72:8f:ff:d2:81:0f:
5c:e3:6d:50:74:3b:48:d0:a3:a9:26:68:13:7c:a0:
4d:87:0e:4c:37:41:58:7f:27:89:ce:95:b2:d4:bf:
88:c6:39:05:6e:d0:4b:65:70:b1:34:64:07:87:c4:
3b:64:0c:3b:52:bf:d8:e0:1f:31:b0:01:5d:0b:a3:
d1:de:81:06:71:58:b6:37:29:69:04:49:ec:75:d0:
31:b3:a4:80:f9:32:51:26:15:8c:40:d2:61:9e:42:
0d:06:71:de:57:70:ed:db:60:4e:51:a9:b0:f2:3e:
03:27:8c:81:c7:3e:c1:95:45:70:67:af:44:71:d3:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:35:74:8F:38:2E:C9:EA:B1:FA:17:DA:BC:21:10:5F:BC:48:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1f:d8:f4:fa:6a:98:fd:76:3a:a4:7e:85:01:83:79:bc:bb:
94:4d:dd:37:b3:c5:4a:ae:bd:36:11:99:aa:6b:e4:67:8b:40:
66:65:11:06:8b:52:c1:d0:6c:f5:6c:45:32:55:a9:68:78:7a:
00:16:d9:26:6c:3a:03:18:1a:0e:6c:2c:3a:db:75:0e:0d:a9:
e3:c4:8a:7e:b8:3f:2b:5a:50:86:c2:e0:e9:d6:a1:cc:aa:eb:
a8:25:6f:54:ca:54:91:5b:ae:d0:95:4b:bc:46:55:f7:91:2b:
d0:52:2f:f5:d8:78:88:1a:2f:35:18:34:48:af:6a:fc:89:a1:
8f:31:a2:72:dc:c9:4a:79:91:59:76:a4:92:bf:f4:34:fe:9c:
52:7f:f8:ac:a0:f3:ce:b0:9e:86:37:ea:32:55:d1:99:4b:9d:
2a:2c:14:b3:1e:87:2a:e4:ec:b9:7a:c5:37:fb:b0:09:90:d0:
74:e7:51:6d:74:12:0e:fd:dc:bf:fd:09:d8:cd:88:3e:55:8b:
e2:27:56:18:e7:76:90:76:ed:48:d7:27:3b:49:a5:41:2d:1a:
56:ef:d3:20:6b:4d:40:0a:47:de:3a:d8:3f:1f:5f:f1:20:64:
b6:f0:75:76:02:e0:47:94:73:88:5e:86:5e:bc:6a:56:fe:70:
a6:b7:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:46:57 2026 by rpki-client