Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134302e302f32342d3234203d3e203330303432.roa
File: 3231372e3231362e3134302e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: fQ/fw+VhXsUKQ0kSxKyBA/zm9wJe8qBZTozob2P7QPs=
Subject key identifier: B2:A9:40:65:40:A3:C3:D8:E3:98:07:D5:19:48:ED:91:1D:F5:35:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AC573E09072BC8D9450264B978C503923ADA9E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134302e302f32342d3234203d3e203330303432.roa
Signing time: Tue 29 Sep 2026 07:29:11 +0000
ROA not before: Tue 29 Sep 2026 07:24:11 +0000
ROA not after: Tue 28 Sep 2027 07:29:11 +0000
asID: 30042
IP address blocks: 217.216.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c5:73:e0:90:72:bc:8d:94:50:26:4b:97:8c:50:39:23:ad:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:11 2026 GMT
Not After : Sep 28 07:29:11 2027 GMT
Subject: CN=B2A9406540A3C3D8E39807D51948ED911DF53553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:dd:71:1c:12:9e:6a:e7:62:bf:f6:d8:c8:
23:6d:a9:f6:f2:53:11:6c:35:c5:78:e7:b4:32:da:
40:03:85:fd:7a:71:2d:22:4e:ab:d2:2c:f1:b2:8c:
3a:af:ce:73:cc:c7:3b:23:af:f8:88:9b:f0:4d:ab:
87:79:7a:9e:2c:f5:ca:d8:66:99:79:ff:b9:44:27:
5b:6d:fb:0c:51:37:ee:7a:2d:74:84:09:29:9f:b6:
08:bc:35:4c:57:20:90:87:e2:b3:4e:24:f7:22:03:
2a:e7:72:78:1a:a6:55:21:50:df:14:ea:9f:f3:ad:
42:a5:e3:59:a9:b8:b2:7a:e2:bf:1f:d6:04:d9:75:
7c:b5:bd:84:22:cb:ed:27:42:81:d4:8b:56:96:a5:
ec:f7:a7:e8:2a:fa:67:9a:43:09:6b:ae:f9:12:02:
63:a0:93:1f:8d:2e:a3:37:48:5f:97:56:8d:53:d0:
f0:79:ae:c3:b1:d6:08:4e:2a:e1:de:55:80:85:63:
44:b8:2e:02:44:13:40:09:a1:54:89:4b:14:b6:b1:
7b:65:c1:ed:47:e0:fa:23:45:ac:55:14:51:f1:12:
63:da:c5:68:2b:3a:fd:50:8e:78:bd:12:5a:08:c2:
37:0b:be:de:e9:b7:02:04:dd:b4:28:3b:e3:22:5a:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:40:65:40:A3:C3:D8:E3:98:07:D5:19:48:ED:91:1D:F5:35:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134302e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.140.0/24
Signature Algorithm: sha256WithRSAEncryption
14:13:15:4b:ce:f0:49:68:5f:8d:20:fe:f2:c6:36:fb:97:5a:
06:cd:7d:0f:26:59:0c:fe:59:39:31:e6:25:fe:cf:57:9d:d0:
b8:8b:fb:f3:db:11:d4:42:39:8c:a8:d3:66:e2:47:d5:3f:d0:
a4:dc:d0:a5:12:e5:92:2d:9d:ff:f6:b9:ca:45:a0:0b:c5:fd:
33:07:ac:5e:ab:06:a7:88:9e:0c:56:1a:66:af:6e:01:7f:50:
fa:ab:39:de:2d:d4:2e:96:11:ba:7b:d5:90:1d:27:84:b3:98:
b8:c9:9d:41:bc:83:f7:15:6a:27:68:d4:86:a7:de:c5:2d:c0:
41:b1:fd:81:f2:c0:08:93:09:c6:5a:b1:9c:9b:bc:ef:81:9b:
8d:70:c8:71:85:3d:d0:ca:b3:b5:2f:f8:03:ac:b9:64:a8:71:
98:68:30:55:f9:bd:ce:68:8f:e7:76:76:40:23:70:c3:60:4b:
6b:c7:b7:65:f5:b9:7d:86:12:eb:ee:25:46:81:bf:51:9f:92:
4f:4f:ca:79:bd:ac:cf:7e:ca:4a:05:84:f0:4a:20:cc:c1:12:
0e:4a:6d:fa:69:8a:71:f3:06:a7:7f:3b:6a:25:1f:63:e7:fd:
cf:cd:fb:5d:d9:bf:bb:42:06:d1:89:e5:7a:2b:9c:67:91:89:
dd:40:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:37 2026 by rpki-client