Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32342d3234203d3e20323038393439.roa
File: 3231372e3231362e3134342e302f32342d3234203d3e20323038393439.roa (raw, json)
Hash identifier: dXSXCbcbDrwUTYamE1M/k9pml4hw7/OtawgsnVVckvc=
Subject key identifier: 0C:C7:8E:C3:54:65:41:ED:E8:A2:20:2E:51:BC:BB:D7:D1:2E:2C:F2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 531FB1D6AAAE94C04368CBCDB316759A6552FC74
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32342d3234203d3e20323038393439.roa
Signing time: Tue 29 Sep 2026 07:29:08 +0000
ROA not before: Tue 29 Sep 2026 07:24:08 +0000
ROA not after: Tue 28 Sep 2027 07:29:08 +0000
asID: 208949
IP address blocks: 217.216.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1f:b1:d6:aa:ae:94:c0:43:68:cb:cd:b3:16:75:9a:65:52:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:08 2026 GMT
Not After : Sep 28 07:29:08 2027 GMT
Subject: CN=0CC78EC3546541EDE8A2202E51BCBBD7D12E2CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:67:43:ef:b6:51:15:be:a9:99:90:ef:d1:
9d:b1:a3:60:dd:7e:d8:af:81:c7:73:8a:7b:ec:ac:
49:9c:1b:81:7c:76:95:58:4f:cb:a2:bd:a2:e2:8f:
6f:70:16:35:d8:b4:bc:82:7a:06:ac:86:b3:d6:2f:
41:94:ef:24:f6:89:d3:55:60:7b:92:3c:17:dd:16:
c9:7e:0c:b9:7e:69:d9:86:04:5c:99:a4:d0:9e:0d:
40:bd:e8:40:ca:ab:f8:1f:64:de:52:82:2a:25:80:
5e:24:59:3e:92:ef:60:a9:63:06:53:66:67:3d:98:
af:6c:ca:21:48:5a:cd:d4:f0:a8:6c:20:d4:6d:78:
5b:c0:f4:9c:61:7f:90:f4:f9:a6:8a:35:35:97:cd:
45:17:77:bf:83:99:8f:33:41:25:b4:5d:18:3a:0c:
f4:77:53:ac:6d:fd:a5:3c:91:b3:ae:0e:5c:20:2c:
a1:a5:70:e7:d3:8b:11:9f:90:87:4e:32:79:08:a3:
9d:8e:2b:80:6d:e7:25:ac:e7:1a:06:c9:04:85:85:
51:df:8e:84:4d:78:94:7e:43:c1:2f:bd:41:4f:0e:
02:d8:f0:43:fa:68:a7:d9:9b:2a:e8:e5:c3:58:5e:
6f:7e:25:fa:a0:40:90:18:13:81:71:33:15:38:8f:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C7:8E:C3:54:65:41:ED:E8:A2:20:2E:51:BC:BB:D7:D1:2E:2C:F2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32342d3234203d3e20323038393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:23:30:2a:74:73:73:74:69:c4:fb:8b:d4:b3:ba:f9:f8:ed:
67:19:91:fc:a0:23:40:4e:7a:67:41:23:18:85:81:2a:88:8c:
4b:e5:b2:2d:3a:cb:e7:16:09:f0:f7:a1:47:3b:8a:1e:fa:f4:
a1:89:15:83:64:c6:19:46:90:cb:20:5f:39:b7:20:e7:5d:53:
61:18:40:b1:2d:b4:98:99:31:92:3f:bb:61:86:b1:6c:d9:47:
fe:9d:61:1e:3c:fb:5c:4d:f2:52:3e:df:0c:1a:63:55:4d:07:
e3:5c:82:ff:7b:27:47:27:0d:b3:2d:51:1e:1f:7a:13:71:9b:
8b:7e:37:58:b7:f3:ba:ab:79:34:4c:80:38:c4:75:49:f8:72:
61:3f:e1:21:a3:d6:48:be:4b:c6:ab:f6:3c:16:59:8b:34:b0:
ba:4d:2a:ca:06:90:10:26:49:c5:a5:b0:05:d0:25:8f:a0:6b:
e2:66:8f:55:68:8c:a4:0a:c9:8b:ca:f5:44:d6:08:6b:56:60:
17:92:e5:9d:c6:e9:80:6f:21:40:6b:94:65:b3:0a:8e:66:5a:
d8:3c:7e:6d:5b:ac:c8:ec:65:d5:41:67:16:35:d2:2e:cc:0d:
bb:cc:7f:4f:f3:c9:9f:a1:3e:82:8d:d4:91:d6:9e:e7:8d:ef:
c4:7d:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:33:59 2026 by rpki-client