Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133312e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: nBwy+s1TDrrTgiPMu4wV0ZdU8IGC9u1wKwk7G+JNkkQ=
Subject key identifier: E9:E4:34:11:05:45:9B:F7:7D:41:66:F8:F5:17:2C:05:00:D7:75:66
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 60C092AC913229F2AB1C475AC8CA37E352080AFB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323138393131.roa
Signing time: Tue 29 Sep 2026 07:29:25 +0000
ROA not before: Tue 29 Sep 2026 07:24:25 +0000
ROA not after: Tue 28 Sep 2027 07:29:25 +0000
asID: 218911
IP address blocks: 217.216.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c0:92:ac:91:32:29:f2:ab:1c:47:5a:c8:ca:37:e3:52:08:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:25 2026 GMT
Not After : Sep 28 07:29:25 2027 GMT
Subject: CN=E9E4341105459BF77D4166F8F5172C0500D77566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:e9:2c:c8:d6:c8:4d:9b:41:34:57:11:12:
3c:9d:67:73:de:89:f0:11:e9:e9:36:7e:56:7f:8a:
22:5f:27:40:38:11:71:25:66:8c:4c:64:c2:d9:b8:
f6:1f:fe:85:9b:6d:28:18:dc:7b:15:c7:ed:2e:a1:
a9:79:11:07:54:a9:23:25:c3:ae:8c:19:99:5d:19:
ae:e6:e3:f5:2f:fb:5b:45:cb:a6:30:f6:1a:4c:37:
4b:9d:00:a5:19:29:34:3c:24:49:8d:de:77:dc:07:
96:0a:5e:80:cd:c3:1f:8e:3e:ee:12:51:59:ad:94:
df:57:b8:92:03:5a:74:f1:de:12:73:c2:1f:dc:5f:
13:b6:d9:e0:10:79:03:9c:18:4f:b9:4a:da:34:ad:
4c:3c:04:22:94:96:f8:48:8a:73:50:36:71:0d:da:
62:a2:f2:08:86:97:46:6b:2a:9d:c1:f0:2f:e0:c5:
e7:64:26:55:31:e6:1d:ad:be:c0:36:8f:91:1f:44:
3b:17:0b:94:3e:61:cf:2f:6a:cd:9a:27:15:8d:7b:
ca:b0:e6:dc:07:95:d9:fa:fd:87:08:a3:d6:83:aa:
2e:a9:15:9b:d4:32:4f:cc:65:5a:02:f5:ed:0b:ef:
41:58:af:b3:3f:87:bd:f8:b3:5a:32:d7:27:18:c0:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:34:11:05:45:9B:F7:7D:41:66:F8:F5:17:2C:05:00:D7:75:66
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133312e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:27:f7:e4:fa:af:a6:fa:8a:e0:e5:e2:dd:6f:f9:be:7c:7c:
b1:dd:27:9b:4a:20:98:4f:71:c4:cd:35:4b:a3:c4:ba:51:cc:
f8:a2:2e:ed:bc:96:e0:7a:90:b9:1b:cb:b5:66:8d:37:b7:8c:
c2:0c:32:e3:36:a9:2d:3e:c7:08:54:f9:2f:76:3f:9a:48:17:
5d:dc:b8:6a:9e:d4:fa:34:33:69:34:d6:1d:a7:64:5d:20:12:
fc:0e:c3:fd:a2:51:13:de:71:b1:d0:8f:2e:4e:41:b9:76:28:
c7:70:f4:29:45:69:77:70:6a:a5:f8:3a:40:3e:e1:3c:bb:eb:
83:f8:bc:85:36:60:e4:65:1f:90:3d:57:ad:4e:0f:56:28:98:
fd:59:ad:90:b7:d8:0b:02:b9:bf:c0:17:d2:ba:18:3d:b0:50:
5f:52:ea:83:61:ec:af:fb:ac:80:de:90:1b:da:59:e1:7e:91:
ee:ad:8a:a9:68:f4:80:d7:ff:a1:fd:ed:7f:bd:0f:d2:c4:f9:
69:47:1a:4e:1e:f9:e8:16:a6:db:ee:e0:5f:e1:24:9a:5f:c5:
04:6d:db:0f:c1:84:c6:52:b2:95:6d:17:d9:d3:be:1c:60:3f:
8b:76:e9:dd:f2:a7:c4:dd:df:7c:77:c8:68:1a:5f:7d:1e:14:
15:c5:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:10 2026 by rpki-client