Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132372e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3132372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JBEYa/059DLXC6aa5PcxOToD567AezebaAATWmCVQ4Y=
Subject key identifier: E3:26:86:2A:5C:84:C0:86:C2:49:E7:74:51:2E:C1:EF:81:51:38:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B99A886CE61E348563B0FF2DB9A95B79975207C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 14 Oct 2026 16:29:45 +0000
ROA not before: Wed 14 Oct 2026 16:24:45 +0000
ROA not after: Wed 13 Oct 2027 16:29:45 +0000
asID: 136787
IP address blocks: 217.216.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:99:a8:86:ce:61:e3:48:56:3b:0f:f2:db:9a:95:b7:99:75:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 16:24:45 2026 GMT
Not After : Oct 13 16:29:45 2027 GMT
Subject: CN=E326862A5C84C086C249E774512EC1EF81513843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:17:9c:03:da:f9:5b:c5:04:2c:b4:99:53:
e6:2b:d4:c4:89:cb:9b:50:4c:fc:97:06:fe:ca:73:
1c:73:77:d6:3f:45:dd:be:cb:c2:0f:3f:eb:d5:ab:
62:ba:91:0f:d0:ca:0b:49:8e:7a:cc:22:45:58:07:
5d:1f:6c:65:ef:e6:d0:f2:5a:79:3b:5c:91:e5:75:
3c:64:79:ba:d9:ae:6f:b4:5c:c8:64:7b:a2:b5:25:
17:b0:69:01:93:cc:fa:12:56:34:5e:06:d5:f4:ac:
d8:b2:83:1a:7f:c2:b9:42:9a:54:5d:b9:c3:5d:0a:
f5:58:e6:22:c6:5b:82:79:14:ae:6f:35:14:6b:2e:
f6:1c:85:13:55:df:cb:0e:a8:db:77:5a:11:4a:50:
9e:07:d0:9e:d6:7a:7d:46:63:73:3b:a4:fa:88:3c:
ad:9b:fe:09:5f:b6:22:e8:0e:5d:c4:cb:2e:e7:7b:
05:e2:ab:e9:8e:7c:94:98:b3:00:71:03:09:6d:26:
99:a3:fa:26:30:f3:92:6b:60:b4:31:02:26:5f:96:
2f:2d:f1:5e:6e:4c:d5:34:a2:be:bc:b4:a1:cf:49:
a6:b8:c2:47:2e:66:4a:e7:64:58:0f:c9:98:92:ed:
89:0f:47:99:d6:3e:c5:ae:ca:90:72:02:2b:6a:90:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:86:2A:5C:84:C0:86:C2:49:E7:74:51:2E:C1:EF:81:51:38:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.127.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2f:b2:63:7d:74:95:ae:2a:8e:94:ad:e9:ac:a6:fd:05:5d:
56:49:66:cf:bd:5a:f3:1d:09:01:a8:43:d1:bc:6f:46:ce:f5:
1c:b2:00:5a:ce:54:aa:1e:96:2a:f4:2a:f1:7d:62:2a:a3:40:
4c:a5:2f:a8:53:09:9c:0b:f1:39:32:aa:b2:7a:13:53:f2:64:
f9:06:08:d6:c0:24:c0:b0:8c:e9:93:76:a1:cf:50:85:69:65:
9d:41:f8:c4:eb:75:43:4f:4e:98:00:67:23:d7:06:b8:bf:ca:
1c:80:e7:c7:0f:06:bf:19:d7:10:38:38:60:d9:18:d4:72:7f:
93:f7:2c:ff:a2:5b:3c:32:7c:1b:0a:a6:4d:b1:9e:cc:c6:8d:
27:5f:5f:61:06:02:c6:15:e0:34:21:71:bc:66:97:fe:49:99:
8b:e2:47:6a:91:5e:2a:57:85:59:79:36:8c:fb:c9:fd:9b:de:
99:17:d7:1c:85:2c:58:c8:bf:60:b6:06:2d:aa:24:c6:03:1a:
d4:f9:f7:21:ab:f0:e4:d7:66:fc:df:d6:a9:db:a6:98:dc:29:
e7:8c:26:2a:59:b9:3e:83:95:0c:40:cf:30:25:9c:1f:ae:8a:
04:9e:bd:60:a9:13:f9:aa:0c:80:23:79:26:14:2a:9f:0e:ef:
c5:bf:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:15:13 2026 by rpki-client