Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3133362e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: uCnW5F8h4s+O2dW43MyzNdhQWKIoalLftulAiq+iTso=
Subject key identifier: 32:80:77:23:FF:94:AA:9F:65:E0:10:B1:71:F3:04:72:CC:6D:6D:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E1A915CB689567916A498FB10E78367A4F217EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138373937.roa
Signing time: Wed 30 Sep 2026 10:21:00 +0000
ROA not before: Wed 30 Sep 2026 10:16:00 +0000
ROA not after: Wed 29 Sep 2027 10:21:00 +0000
asID: 218797
IP address blocks: 217.216.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1a:91:5c:b6:89:56:79:16:a4:98:fb:10:e7:83:67:a4:f2:17:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:16:00 2026 GMT
Not After : Sep 29 10:21:00 2027 GMT
Subject: CN=32807723FF94AA9F65E010B171F30472CC6D6D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:a8:ab:13:1b:03:60:a3:16:81:3f:cc:87:
20:25:a9:8e:3f:78:ba:28:47:e4:7f:b2:f4:ae:cd:
eb:09:57:14:ff:de:70:7c:dc:4e:d8:ac:0f:3a:d5:
7b:04:2a:54:72:6e:65:76:a2:34:db:26:5c:fe:4f:
2c:06:cc:fb:b6:6f:5b:78:aa:45:bd:90:f4:e7:6c:
4b:5c:a2:ba:f2:02:bf:cc:27:46:6c:9c:88:1c:0b:
60:32:22:64:02:a5:8e:af:30:dc:58:7d:4c:70:f6:
a6:84:cd:81:07:8e:be:f7:e3:c4:db:1a:7e:4a:6b:
b8:db:51:02:df:45:6e:6d:34:a5:72:2c:b4:81:f1:
88:cf:2e:e3:72:e0:9c:70:bc:6f:a5:55:15:55:36:
2f:0e:47:5d:fa:bd:31:4b:f5:4f:e9:d2:b0:4f:5b:
91:18:aa:8e:9b:df:74:39:93:cf:fe:85:51:fc:5c:
5f:a1:08:05:2d:9e:09:07:47:27:34:8b:69:86:fb:
7d:c8:a6:7f:b7:98:a8:e1:83:12:9c:54:61:d6:c8:
4e:f9:54:bc:16:a6:dc:8e:3c:43:9b:81:12:87:48:
01:e5:74:83:23:0e:00:2d:10:ed:ee:86:09:7d:4f:
80:33:0d:96:c4:b6:6a:b3:21:0d:6a:bb:ac:9f:b9:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:80:77:23:FF:94:AA:9F:65:E0:10:B1:71:F3:04:72:CC:6D:6D:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c5:fa:1c:9c:a0:50:6a:a8:c4:36:af:a4:17:87:5b:6c:86:
95:ef:f9:1c:eb:bc:d9:7b:3d:00:0a:96:58:25:f6:6b:69:c8:
63:aa:94:f8:34:2b:4d:a0:00:65:32:fa:bc:67:b6:a4:a8:3b:
dc:6e:d6:74:49:3f:44:99:bd:ce:9e:81:91:bd:a1:75:80:c9:
4f:b7:c1:10:1e:3c:46:f2:c6:11:09:9b:aa:7f:f2:c8:43:03:
db:c1:d7:95:3a:56:10:1a:c9:4b:3e:1c:d9:1a:01:2f:66:70:
55:2a:fb:15:88:7a:08:85:cb:f4:f2:ab:38:a4:ca:9b:b8:70:
1c:6f:e5:08:10:3b:91:7b:7f:66:d0:2a:82:fd:d6:fc:fa:85:
ce:ec:8c:7e:de:f5:2d:2f:dc:af:9b:4e:64:8a:7f:b8:68:06:
68:10:9f:9c:26:bc:61:7f:00:49:a7:c1:f2:17:f8:df:f7:b5:
7e:03:30:99:ba:54:84:cd:26:d8:95:62:f9:46:22:06:28:dc:
34:5b:89:51:18:ac:e7:14:0b:f6:40:aa:40:d8:07:61:73:14:
6f:7b:87:bc:5c:ac:54:89:ce:4c:58:e3:64:5a:f2:a4:8b:f0:
d7:e7:1e:af:1e:f4:23:ae:53:49:01:9c:2f:b0:9b:23:9c:7f:
63:8e:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:57 2026 by rpki-client