Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133362e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: KrSJf38O0nW9dDd1ac354asld0EEmk4m5bW3Y4wVGlc=
Subject key identifier: 46:E3:87:5F:98:7C:29:2A:4E:84:75:70:D0:95:12:1A:F3:70:EF:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2133463CAD7DA9F8850FC2217E7B1A80260F9BBC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138393131.roa
Signing time: Wed 30 Sep 2026 10:20:59 +0000
ROA not before: Wed 30 Sep 2026 10:15:59 +0000
ROA not after: Wed 29 Sep 2027 10:20:59 +0000
asID: 218911
IP address blocks: 217.216.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 21:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:33:46:3c:ad:7d:a9:f8:85:0f:c2:21:7e:7b:1a:80:26:0f:9b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 10:15:59 2026 GMT
Not After : Sep 29 10:20:59 2027 GMT
Subject: CN=46E3875F987C292A4E847570D095121AF370EF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:3a:9a:d9:50:74:6a:55:f1:30:a9:da:b7:
b6:28:9b:a8:1a:d2:f2:1a:d8:20:15:9d:3e:58:1e:
0b:bc:e0:0d:b2:45:1e:be:3e:35:3e:30:0a:74:82:
32:e4:82:a1:06:6a:56:8d:89:6e:80:53:66:42:9a:
5b:a0:93:a0:6f:1f:b4:83:d5:6d:f6:05:0b:14:99:
9c:64:56:7f:11:c1:17:23:28:5e:26:50:b5:d4:9b:
72:82:93:30:a9:e2:d6:37:9a:20:da:db:ca:66:ed:
5c:79:4a:34:81:da:b2:9a:cd:c2:8c:09:b6:d5:aa:
5b:f6:c1:9e:c4:19:af:75:41:6b:66:47:32:ae:c3:
b4:c0:0c:2a:3f:af:cf:56:85:59:0b:c0:ba:72:9e:
91:fc:38:92:a7:6b:c6:4b:93:9d:73:ea:7a:a4:4e:
fd:97:7f:f1:89:e2:f7:6b:57:0d:45:49:f9:5d:13:
5c:ab:1b:8c:a4:a2:21:98:22:81:d5:98:21:bc:0a:
0e:50:7e:a7:8f:a5:0d:5c:2e:ee:fa:19:6a:2d:00:
ec:56:fb:c8:44:3d:08:26:40:d3:2a:13:4b:57:72:
ff:05:c7:45:cc:4b:c2:8f:1d:e4:c7:bd:bb:4c:b4:
f7:51:f3:fb:da:91:85:84:0d:56:09:59:fe:73:01:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:87:5F:98:7C:29:2A:4E:84:75:70:D0:95:12:1A:F3:70:EF:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133362e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.136.0/24
Signature Algorithm: sha256WithRSAEncryption
42:aa:48:ab:58:39:8e:ca:40:84:03:2b:34:38:7f:91:a7:88:
02:96:bf:89:89:50:ec:77:17:a8:f0:3c:c1:df:cc:25:f7:ce:
a9:f6:e3:89:82:4a:df:2f:79:fc:da:88:9e:a1:2d:b0:c7:6f:
9e:51:0e:d9:f5:e3:73:3b:ac:e3:7f:c2:98:85:82:3d:a4:56:
2d:46:28:79:df:4c:96:19:d1:8c:b6:49:f5:97:33:8d:0b:a6:
8c:52:3f:55:e6:22:e0:1f:97:e5:1b:88:a3:2b:5b:90:e8:67:
67:92:82:f2:8b:d7:b8:46:65:77:5a:6a:cc:0d:c6:05:6a:aa:
ed:c6:93:7c:f1:06:af:c1:ac:ba:4d:79:b9:30:a6:0d:66:00:
14:8d:b2:10:f3:4f:4c:5b:bd:3b:c6:69:4b:86:16:f7:d6:4d:
fd:e6:9f:36:91:22:5d:a1:3c:bb:cc:0b:07:64:ee:f7:b3:3a:
22:de:b8:1f:f5:66:90:67:04:d9:07:a8:a7:96:bd:f6:c5:12:
9b:58:f6:6d:62:bf:94:93:23:89:3e:84:04:2c:d6:90:06:78:
c0:14:a4:d5:52:e0:3c:d2:4c:ee:4f:06:34:4d:65:4f:ba:1e:
02:e1:ed:44:77:b5:55:78:25:b1:84:3d:ee:73:2c:06:16:2d:
e2:12:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:46 2026 by rpki-client