Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131382e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5kCsT27PBdxyyF2mV2oAFbtpAONrqp5UEvFnkIXJ7YY=
Subject key identifier: E0:99:7B:BF:13:93:95:DE:BB:DC:A6:C3:1B:4E:E9:CD:2D:01:7D:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 09E19D38BE958A4466A53AA204B1197461463094
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:47 +0000
ROA not before: Thu 10 Sep 2026 13:23:47 +0000
ROA not after: Thu 09 Sep 2027 13:28:47 +0000
asID: 136787
IP address blocks: 217.216.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e1:9d:38:be:95:8a:44:66:a5:3a:a2:04:b1:19:74:61:46:30:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:47 2026 GMT
Not After : Sep 9 13:28:47 2027 GMT
Subject: CN=E0997BBF139395DEBBDCA6C31B4EE9CD2D017DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:2e:0d:58:50:21:c2:d3:fe:78:d4:6d:42:
e3:d1:af:f9:24:33:97:4c:c1:8f:50:a4:c1:78:b1:
b4:85:6d:d6:f9:f1:c1:f0:c5:18:78:f5:0f:1d:8a:
de:54:ad:e1:56:db:fb:5d:c6:76:0c:d7:7e:3a:4d:
7b:4d:a5:62:6a:ba:ec:20:96:8e:79:1d:63:02:fc:
99:57:f2:6f:3f:2c:69:c0:02:e8:ac:74:4f:4f:8e:
47:db:03:64:02:d4:3b:7a:f4:0c:ac:44:d3:ad:d6:
a2:d3:77:aa:a8:4a:8e:19:28:af:83:8c:55:25:bf:
16:d6:42:52:7e:d2:96:7b:41:8e:3b:90:23:77:04:
2c:fa:42:87:86:e0:d6:94:92:4a:9c:6e:95:5e:63:
de:da:01:29:d0:1e:1c:ca:37:61:7b:19:69:97:60:
57:91:79:16:95:60:97:50:b7:0d:5f:bc:85:02:5b:
06:a7:f4:94:49:a8:6e:4b:e8:d1:d5:12:57:d3:a8:
25:fa:83:6d:ef:45:03:d4:c0:e2:56:b7:a0:72:68:
f3:4f:c9:c4:4a:9c:4e:40:52:0e:46:d7:6b:95:3f:
03:c5:92:b5:4e:6a:68:ea:24:ec:e2:c8:8c:16:ec:
ca:3e:8e:a0:a4:5c:6d:0d:56:8f:e2:81:ea:96:35:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:7B:BF:13:93:95:DE:BB:DC:A6:C3:1B:4E:E9:CD:2D:01:7D:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:12:c1:0f:55:e6:ac:5b:cb:da:89:b8:50:94:09:bd:4c:7c:
e8:9c:57:76:e4:fa:6d:45:51:86:03:34:56:25:7d:06:c3:e2:
10:ce:86:ff:d2:41:f5:16:6c:b8:35:fe:a6:11:fe:01:57:61:
b3:ea:0d:44:82:3f:ba:a7:1f:e6:6d:8b:0d:e4:29:45:e2:47:
c3:9f:e8:9e:be:f4:4c:41:af:0f:43:df:08:f1:76:02:69:9f:
fe:86:6e:49:a7:70:fa:3e:b0:63:8d:1c:28:4a:41:71:f2:c0:
c7:48:76:82:4d:a2:a7:a0:06:99:a2:28:17:8e:d3:87:70:e9:
f0:68:79:2b:b4:1c:3d:eb:f8:3b:ce:5a:23:0e:57:b7:88:2b:
75:77:92:66:f7:1b:25:8d:1d:e4:37:c9:28:16:d7:b6:1e:8d:
52:8c:b1:2b:7f:1b:20:be:67:aa:52:44:75:ba:63:c9:19:87:
c2:a1:da:96:f5:a0:9e:0f:df:c0:33:88:c5:76:d5:8e:04:c9:
48:b2:f5:fd:4e:b6:b5:78:a0:24:71:44:f9:54:b6:67:98:eb:
d2:b7:f1:0f:05:3b:85:4b:66:aa:f3:66:a0:36:91:03:72:46:
39:8d:0f:50:04:35:bd:ec:8f:88:48:4c:7c:b9:59:64:3b:73:
d1:a6:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:52:31 2026 by rpki-client