Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130382e302f32322d3332203d3e20313431393935.roa
File: 3231372e3231362e3130382e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: pjtyxEHUAGazAeDiPnpUnBBHtRI9tVS5GL5PLGGRIOI=
Subject key identifier: B3:A8:59:C9:8D:B2:D6:34:AF:C8:15:89:C0:94:8B:C1:10:76:DF:77
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1EA40D0CDADFE79F48092BA4FCB58B362ECC56B3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130382e302f32322d3332203d3e20313431393935.roa
Signing time: Thu 03 Sep 2026 15:28:32 +0000
ROA not before: Thu 03 Sep 2026 15:23:32 +0000
ROA not after: Thu 02 Sep 2027 15:28:32 +0000
asID: 141995
IP address blocks: 217.216.108.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a4:0d:0c:da:df:e7:9f:48:09:2b:a4:fc:b5:8b:36:2e:cc:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 3 15:23:32 2026 GMT
Not After : Sep 2 15:28:32 2027 GMT
Subject: CN=B3A859C98DB2D634AFC81589C0948BC11076DF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:ca:d8:c9:99:54:47:a8:88:bd:aa:5a:31:
8b:4d:52:ba:77:77:a6:b3:8b:09:cf:35:ab:f9:0a:
6e:b7:c5:34:d9:51:83:bf:08:94:b8:62:74:6a:53:
73:01:7d:2b:dd:53:cc:89:58:43:49:fb:92:ae:89:
9b:b6:f1:fd:9b:d1:fd:c4:d5:87:64:21:f8:3e:a3:
8d:10:03:68:02:84:b6:2b:7a:80:33:d6:1b:e2:e6:
f7:5e:bd:00:cb:52:f0:30:15:ca:d7:c2:05:9e:cd:
f8:bf:a9:74:0a:60:0d:52:60:9f:85:81:48:7a:3d:
7a:bd:fa:63:af:a9:18:a7:d4:16:9f:d4:ea:17:6f:
7a:bc:10:f0:71:10:d6:6c:6c:93:e3:6b:c7:72:62:
ec:cb:33:30:43:bd:97:b9:2d:11:c9:6f:ce:c1:cf:
8f:bb:05:a0:f9:20:01:01:51:c6:7f:35:cd:d6:b4:
37:e0:14:97:41:cd:81:80:fa:e0:0e:a3:96:1f:bd:
d8:5b:09:1d:aa:db:27:8b:c4:ba:89:f5:5b:f0:68:
0e:6c:e2:a2:69:21:4e:a7:02:bc:74:04:7e:4d:cf:
c3:7a:13:1b:27:84:58:28:1c:2c:8d:9c:d7:69:33:
61:89:8c:90:a1:b7:37:96:d6:92:d9:3d:50:c4:88:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A8:59:C9:8D:B2:D6:34:AF:C8:15:89:C0:94:8B:C1:10:76:DF:77
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130382e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.108.0/22
Signature Algorithm: sha256WithRSAEncryption
20:bf:b3:86:09:5b:1e:c2:37:92:b9:1f:d9:e5:2e:12:4a:b0:
a3:e4:aa:e9:30:9e:cc:76:d8:32:08:af:98:e3:4d:80:e7:30:
38:d4:c6:f8:47:b6:93:8b:8c:a9:e8:20:af:46:d6:c3:28:51:
81:02:35:05:ce:a3:91:7e:48:fa:ae:4b:76:0f:b3:42:5b:6a:
d2:08:3a:d2:fc:9e:c5:ca:5c:2a:91:eb:03:85:36:5b:3b:14:
18:fd:5b:1a:fe:dd:cd:c2:59:0b:45:7d:f8:fa:f9:a6:a1:3c:
70:4f:00:be:c2:d6:49:fa:4f:51:b7:0d:9f:56:8d:b2:8b:8f:
7b:d9:b7:7a:f7:7c:c0:a0:55:f0:64:99:2d:fb:c5:16:7f:07:
fc:04:2a:df:09:b0:ff:3d:ad:06:80:a8:07:de:6f:7d:af:74:
63:08:30:b8:d0:87:b0:4a:57:6b:f1:c1:26:13:67:31:44:f6:
1a:c0:b6:ed:3b:02:65:0b:08:35:f4:c3:4b:f1:4b:f5:c3:47:
62:7c:48:52:2a:7b:32:88:7b:68:6a:7f:c2:13:3a:1a:15:03:
32:e5:4f:48:c6:77:7f:25:06:0a:b4:5b:80:13:ae:cf:2c:a1:
0e:42:18:64:54:71:31:d5:52:56:f5:89:79:98:ca:8f:e2:1a:
7a:87:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:04:13 2026 by rpki-client