Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134332e302f32342d3234203d3e20323138393130.roa
File: 3231372e3231362e3134332e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: h6uWoXd8JbKMAP2+OrSOX4ngnakWjmSR3Jn1oSJPcss=
Subject key identifier: 5C:AF:89:BF:C8:EE:55:AF:71:2C:A4:78:38:67:18:E1:17:4D:DA:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F84EF91680DB444F5621883733D613CCDB901DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134332e302f32342d3234203d3e20323138393130.roa
Signing time: Mon 28 Sep 2026 10:37:36 +0000
ROA not before: Mon 28 Sep 2026 10:32:36 +0000
ROA not after: Mon 27 Sep 2027 10:37:36 +0000
asID: 218910
IP address blocks: 217.216.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:84:ef:91:68:0d:b4:44:f5:62:18:83:73:3d:61:3c:cd:b9:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 10:32:36 2026 GMT
Not After : Sep 27 10:37:36 2027 GMT
Subject: CN=5CAF89BFC8EE55AF712CA478386718E1174DDACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:d5:36:9f:8e:06:9a:1d:52:06:66:7f:c9:
7a:25:c9:86:7f:a8:e0:d9:d5:98:a9:99:d5:28:a9:
8e:08:97:a0:75:9c:d9:d3:c7:f8:22:d5:8d:11:5b:
47:06:93:8b:dd:b5:46:70:b3:e4:40:9a:8e:9c:a0:
5a:af:84:d0:46:8f:55:e6:1a:15:b4:eb:c0:b4:92:
85:ee:7c:b1:72:f8:cd:5b:52:4c:d6:e7:13:5c:05:
b0:e1:85:88:b4:6a:bb:58:4c:11:c4:e7:df:0d:30:
42:a0:34:6e:6c:39:d7:c1:b9:01:4f:d7:85:a1:f9:
17:ea:f2:07:e2:26:d8:53:46:e0:62:cc:88:cd:1b:
54:fa:fa:16:d3:41:b9:af:db:11:46:09:ae:13:c6:
08:bf:e9:1c:96:a0:8e:8c:89:dc:db:da:af:cd:fd:
5d:64:bf:4a:a9:ef:21:76:61:12:c3:4e:e2:fe:e0:
d5:41:4e:5d:6a:9d:fb:fa:12:a7:5e:fc:ad:78:4e:
dc:02:54:e0:0d:c6:a4:a4:d1:84:d9:df:b0:da:dd:
f3:c2:88:5d:18:f5:17:5c:5f:bf:07:ef:ab:35:de:
3c:15:37:b7:a1:1a:60:18:24:18:f7:d0:59:8f:db:
80:5b:a6:4c:22:29:79:e4:61:60:e8:ca:80:a8:5e:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:89:BF:C8:EE:55:AF:71:2C:A4:78:38:67:18:E1:17:4D:DA:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134332e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.143.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ea:15:b3:d2:45:27:4d:98:e5:f3:f4:fb:12:2a:8a:15:c0:
07:95:e9:2e:f0:3b:ac:38:e7:08:07:c9:7d:cf:34:db:6b:e8:
eb:76:5b:d8:10:5f:96:5e:62:6f:03:68:f4:a3:21:cf:36:d1:
28:ad:05:0f:32:f8:a6:21:e5:f9:29:f8:7d:42:21:52:d4:1d:
6d:43:ca:6a:97:5c:29:61:2f:19:25:6c:c5:39:31:d4:08:ca:
0f:7e:ab:46:a7:f3:14:a9:02:33:ad:0c:aa:83:8e:21:8c:c3:
4c:69:2d:1a:ba:5a:a8:c2:12:b6:06:0d:81:5d:a5:01:29:9e:
c8:57:16:36:df:90:08:ab:41:17:4f:6d:79:d7:df:e2:76:b1:
1b:f5:72:15:17:f1:4d:b9:ac:3a:26:f4:c9:43:0c:ce:4a:a1:
2a:f9:bc:aa:f0:10:7c:98:7a:ed:84:e8:9e:1f:d2:d6:b5:36:
a7:93:93:93:56:c8:5e:4c:38:87:de:09:57:25:56:e2:99:20:
75:86:44:2a:3d:f6:69:d8:30:d6:7d:db:39:a3:28:71:82:3d:
84:7b:eb:70:f6:d3:98:87:4a:a3:4d:35:36:44:68:c9:bf:4b:
23:8b:35:d8:ad:d4:d4:14:f0:b9:b1:8b:63:4c:21:76:a3:87:
7a:14:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:23 2026 by rpki-client