Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133342e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: bjUr5qv4u71ZacsT2NUv7sN9PqIMjhV8l5UVV6zNeuM=
Subject key identifier: A0:D5:0A:47:47:0B:D6:AA:44:DB:58:95:CF:D9:46:85:D1:C2:10:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F5C4438EEC8EF9C119432F321E81000B01ADDB5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323138373937.roa
Signing time: Wed 30 Sep 2026 10:20:55 +0000
ROA not before: Wed 30 Sep 2026 10:15:55 +0000
ROA not after: Wed 29 Sep 2027 10:20:55 +0000
asID: 218797
IP address blocks: 217.216.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5c:44:38:ee:c8:ef:9c:11:94:32:f3:21:e8:10:00:b0:1a:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:55 2026 GMT
Not After : Sep 29 10:20:55 2027 GMT
Subject: CN=A0D50A47470BD6AA44DB5895CFD94685D1C2102C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:db:8c:62:e3:5d:a9:1e:8c:df:da:92:c9:
51:9f:e2:06:d1:e0:3d:35:6b:fd:4b:29:af:35:73:
4c:9d:71:40:a3:1d:b3:f8:b5:eb:ae:d5:8a:d0:14:
6b:1e:9b:d7:cb:ac:e1:de:17:24:6f:3f:30:81:02:
31:c3:76:d4:1c:e9:bb:9b:26:ff:a1:ef:69:fd:13:
2b:e5:44:f4:8c:d8:15:8d:70:06:a7:2e:14:d7:94:
d3:c3:3e:42:fa:28:94:0c:d4:d5:1a:6f:85:ec:34:
83:b2:39:77:91:54:8b:b1:4e:74:33:ee:ec:c2:63:
7a:37:b2:6a:82:87:e1:81:88:b3:65:89:fb:28:33:
e7:bb:3c:c0:7b:9d:4f:b6:02:54:e0:3a:39:31:f5:
99:9c:e6:04:a0:bd:75:e9:37:45:34:84:42:d8:50:
88:72:5d:54:c6:81:9e:58:d9:39:da:0c:84:23:55:
a5:68:57:ad:fe:ed:a5:27:a6:8e:9c:cb:53:de:5a:
f7:d1:90:dd:4c:7c:a8:c5:1f:17:2b:46:40:a8:09:
5b:4a:6a:29:a0:90:3b:46:37:1a:d7:03:46:93:e4:
d5:75:0b:98:9d:80:7b:5a:32:c4:2a:80:53:91:0a:
c4:ed:9a:3d:d2:74:17:1f:f5:b3:73:77:88:27:aa:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D5:0A:47:47:0B:D6:AA:44:DB:58:95:CF:D9:46:85:D1:C2:10:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133342e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.134.0/24
Signature Algorithm: sha256WithRSAEncryption
62:08:e2:7d:7d:48:22:ee:26:b9:8a:98:14:2d:3b:a8:e4:96:
ef:80:e1:2a:0a:2d:c5:09:8e:b4:ab:e4:49:56:c7:15:bb:77:
6a:ec:88:b0:b3:76:58:e9:19:99:80:f2:2c:2a:4a:ad:e6:fc:
0e:6e:44:7f:d8:9d:f0:07:78:52:52:5a:54:b0:b7:fb:d1:93:
94:05:04:d2:2f:19:10:c3:79:b9:6d:ad:ed:77:af:e4:3b:04:
af:f0:a6:88:88:84:d5:a5:c0:ac:c5:2e:d3:a8:b0:6f:38:a1:
a5:86:0c:73:2b:84:c9:80:5b:bb:50:08:25:63:79:c3:88:ca:
b2:50:b1:53:32:96:61:53:b3:f8:da:e9:d3:5f:ef:3e:f5:30:
1d:eb:96:b7:97:b0:ea:32:8e:6d:2e:5e:5e:c0:0a:a8:26:99:
27:1c:85:7a:be:5a:6e:cd:71:05:f0:b0:6f:43:7f:68:66:ab:
be:48:f3:14:c5:0f:df:3e:d3:a3:5a:9d:51:6f:b8:70:ad:44:
39:41:c7:8c:87:29:c1:0d:83:69:c8:9b:6c:1d:6b:6b:25:3b:
ed:a5:0a:bf:13:25:71:5e:a2:8c:ff:2f:51:9b:07:d7:3d:e7:
fb:c5:7b:24:85:72:cc:de:1d:8b:08:54:ce:a6:ef:eb:ae:f7:
12:1d:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:55 2026 by rpki-client