Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132312e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3132312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iTfXXWx1ovZB7UfzZauIaCG6nQ4neOdmzfMD5hDR6uE=
Subject key identifier: 64:9A:51:9E:6B:4C:76:B8:9E:AF:99:DE:CB:2B:BC:F2:D1:39:F8:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37AD27B8C417A2930A95EC89D6248468E5431173
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:47 +0000
ROA not before: Thu 10 Sep 2026 13:23:47 +0000
ROA not after: Thu 09 Sep 2027 13:28:47 +0000
asID: 136787
IP address blocks: 217.216.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ad:27:b8:c4:17:a2:93:0a:95:ec:89:d6:24:84:68:e5:43:11:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:47 2026 GMT
Not After : Sep 9 13:28:47 2027 GMT
Subject: CN=649A519E6B4C76B89EAF99DECB2BBCF2D139F87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:2b:72:86:f2:fe:4a:4e:2d:57:35:94:8a:
c4:37:83:9e:bd:c5:7f:7c:dc:71:1b:db:9e:77:7a:
8d:a5:11:16:5e:f4:30:89:f8:ca:0b:63:3e:45:7b:
6c:44:aa:2d:e9:65:53:e8:dc:c5:2f:b1:d6:5c:61:
0a:25:67:33:79:9f:87:ed:73:4a:98:0c:f8:32:46:
c2:24:b5:a0:17:6e:b3:4b:e3:de:18:a4:65:41:a8:
11:20:86:76:2d:43:0b:54:47:e7:20:96:57:a7:a3:
e3:c5:4f:53:d8:1f:f4:10:f3:87:8f:7d:e5:55:83:
f5:01:32:cc:15:6f:e8:50:1d:1b:13:4d:02:53:5d:
0b:f8:b5:d7:71:e7:cc:b1:f0:06:50:39:dc:52:dd:
73:76:09:7d:6f:0c:77:0c:92:74:7d:d5:f6:be:62:
ca:15:ac:69:26:2a:72:84:15:fe:a4:26:00:6a:53:
58:de:e0:cd:9b:c8:34:90:d8:b4:d7:16:34:6b:ef:
98:52:e9:6b:5a:73:56:72:2a:f7:2c:d0:d7:22:5d:
0a:43:1e:df:95:83:ec:52:76:1f:74:43:6b:64:96:
9d:eb:ea:df:b5:99:0b:2c:cf:ac:84:f3:96:46:c4:
32:7a:da:6d:fa:43:0f:67:0b:00:a8:43:6a:2e:42:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:51:9E:6B:4C:76:B8:9E:AF:99:DE:CB:2B:BC:F2:D1:39:F8:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:df:2f:3c:bf:e9:a3:b6:0b:95:14:a1:b1:0c:95:d7:dc:58:
a4:49:1d:0d:f8:df:93:31:64:b4:52:d1:41:6a:c9:7f:d5:9d:
c9:c4:b9:c3:54:ac:b5:78:f6:1d:98:56:04:52:8e:e7:df:f9:
f2:f4:8e:87:36:a0:fd:a0:b6:8f:9e:b8:75:3c:0a:52:f3:71:
cf:9e:d5:26:16:ea:bb:11:df:52:f4:1f:ea:01:a5:01:5a:bf:
42:9f:04:3f:ec:bc:6c:33:c5:f9:59:95:35:35:d8:6c:3b:05:
97:d9:e4:35:5b:2e:cc:70:c6:21:d2:85:ba:be:f2:0a:04:0e:
a2:d1:05:e9:a9:a8:16:74:9c:49:59:12:c3:fd:4e:f0:98:2c:
0e:1e:5e:6e:37:5e:ac:c0:f6:d9:82:70:24:ee:b2:7f:66:66:
4f:45:7c:5e:0e:14:b7:88:7e:4a:94:ba:d9:fa:9b:70:e7:08:
b5:9d:fa:74:b0:fa:09:ed:cf:32:a3:04:b6:0b:80:f6:d7:88:
a2:b0:49:20:8c:3b:80:53:e7:c1:05:90:ef:50:a4:58:84:73:
1f:e9:b5:42:6d:ab:2d:d6:1f:8b:84:6f:b2:ad:30:2a:b2:5c:
86:13:93:e9:3d:4d:b2:3e:da:9c:bc:04:c3:42:ac:bb:1d:a9:
32:7d:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:31 2026 by rpki-client