Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3133382e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: X9PwHiabi1f/Yb7xzJFJn6TT7oJnP4agih5CHB1DcLg=
Subject key identifier: 18:4A:AF:A1:4B:44:C7:B5:59:9C:9E:4E:59:12:04:82:AF:69:09:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B7431E26FD446DB4FA2E9DFBFE1BC7198A48BB4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323138393130.roa
Signing time: Tue 29 Sep 2026 20:30:40 +0000
ROA not before: Tue 29 Sep 2026 20:25:40 +0000
ROA not after: Tue 28 Sep 2027 20:30:40 +0000
asID: 218910
IP address blocks: 217.216.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:74:31:e2:6f:d4:46:db:4f:a2:e9:df:bf:e1:bc:71:98:a4:8b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:40 2026 GMT
Not After : Sep 28 20:30:40 2027 GMT
Subject: CN=184AAFA14B44C7B5599C9E4E59120482AF69096B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:44:28:9e:60:9f:e8:a9:10:36:36:ad:31:
0b:2a:3a:9f:34:e0:3d:73:68:cb:a4:24:3d:df:e9:
29:c9:f9:df:79:ae:ca:33:78:91:08:4a:52:60:99:
a7:77:18:7d:68:83:49:49:83:a3:af:32:a9:cc:fb:
c4:65:30:f5:6d:1b:ac:00:0a:20:5c:d2:d7:ff:3f:
57:19:c7:b7:07:5b:5c:cd:92:50:b1:f7:4a:eb:6e:
f4:5a:ba:8e:0f:fa:31:04:c9:6c:27:4a:51:cd:15:
81:e9:71:bd:5d:d6:c9:27:d4:0f:f4:42:23:86:96:
3b:bf:79:f0:33:be:5f:74:70:32:da:3b:d1:30:57:
8d:28:d0:2c:77:02:c0:36:f3:8a:c0:1c:d2:64:81:
a6:11:f2:15:8b:80:81:e9:15:f7:39:94:95:f2:88:
99:fe:fb:01:ea:79:ef:c8:d6:a8:f4:0f:99:b6:55:
82:64:77:b3:fe:c7:62:00:52:e7:1f:7e:d7:8d:08:
61:8e:0c:d1:c8:0a:aa:33:ee:e2:9f:e9:46:40:8f:
1a:c4:88:c4:ae:41:e8:1a:7c:8e:af:62:b0:1b:7c:
4b:0a:51:04:a4:04:6f:29:92:9f:cf:2b:79:42:16:
84:14:ec:08:e0:bc:8a:cf:48:b9:d0:13:aa:1d:a8:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:AF:A1:4B:44:C7:B5:59:9C:9E:4E:59:12:04:82:AF:69:09:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133382e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ad:9e:06:02:93:a9:a1:f2:03:dc:6e:d4:ad:45:5a:cc:58:
c4:10:54:84:b0:6a:8c:c1:5b:bd:54:2e:46:d1:25:29:e0:55:
dd:08:51:6c:49:c4:d3:a8:62:5e:28:06:17:c8:35:2e:1f:cc:
24:24:ff:1a:31:b8:eb:ae:c7:84:ba:78:25:50:d2:11:c2:d7:
1e:3b:75:a3:09:3d:17:fe:27:4a:9e:b4:01:72:cb:dd:34:cc:
79:4b:cd:80:7d:e7:ae:bd:f0:25:4b:d2:1b:05:e4:02:69:bd:
dc:fb:6b:ec:8e:80:1c:0a:7b:0f:3a:c7:10:e9:2d:51:e6:8d:
37:4f:34:58:af:80:53:0e:f1:7a:40:91:7f:d5:be:82:a4:5f:
3b:9f:ba:2c:68:14:e4:3e:ac:16:33:06:b2:50:2a:d4:e3:63:
5d:72:7b:11:52:b6:93:d6:82:d5:f2:3d:32:f4:29:2c:14:0d:
49:82:9b:0d:36:8a:56:dc:7d:f2:03:71:7f:f6:c9:73:52:29:
52:50:60:a5:5f:83:77:57:fe:a0:88:0d:fb:99:98:fe:0b:5c:
c2:32:bd:d5:fd:a3:89:dd:3b:c8:8e:7f:12:10:79:b1:4f:f2:
74:4d:e8:6f:25:37:b8:12:e5:a3:bc:3b:74:c0:14:05:79:f8:
82:42:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:27:45 2026 by rpki-client