Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134392e302f32342d3234203d3e20313437323831.roa
File: 3231372e3231362e3134392e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: miSLaOwqmVowXpgntaVCtctCZR+e4vrka3ZBDx80qE0=
Subject key identifier: B9:2E:41:AE:39:D4:83:1F:F2:55:B5:2D:A0:4B:0C:D1:49:DB:CA:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F2EA6FDAFEB8435ABEC69EEF93265E0903DF273
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134392e302f32342d3234203d3e20313437323831.roa
Signing time: Mon 05 Oct 2026 09:25:58 +0000
ROA not before: Mon 05 Oct 2026 09:20:58 +0000
ROA not after: Mon 04 Oct 2027 09:25:58 +0000
asID: 147281
IP address blocks: 217.216.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2e:a6:fd:af:eb:84:35:ab:ec:69:ee:f9:32:65:e0:90:3d:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:58 2026 GMT
Not After : Oct 4 09:25:58 2027 GMT
Subject: CN=B92E41AE39D4831FF255B52DA04B0CD149DBCAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:52:fa:e6:87:fb:eb:7b:f0:39:07:f9:e5:
e9:2c:ff:56:aa:68:a4:f4:19:36:3e:50:4e:00:1f:
a9:5a:43:85:4b:c4:b0:4f:f7:b4:9d:62:39:57:45:
9b:5f:eb:60:87:b6:49:44:34:14:7c:68:93:e2:44:
b9:1b:1e:05:b0:2a:0d:71:b2:c4:ec:df:36:fd:e7:
51:0d:71:7b:f3:f9:a2:ec:a2:3e:4a:ef:6f:1a:ba:
24:58:67:68:40:76:8f:ea:3e:da:98:c8:54:bb:0b:
4d:e9:78:0a:8d:1c:14:b6:68:f7:8f:3e:2b:21:d0:
db:97:4b:0a:16:07:42:e0:c7:6b:71:9b:24:77:d3:
f5:ef:94:72:d8:1e:e7:c3:81:68:a3:0f:5d:db:b0:
bc:95:d7:e3:1b:39:9d:c1:db:cd:a4:3b:ec:92:95:
39:08:49:02:fd:70:76:eb:b5:d7:e1:61:59:17:7d:
fe:d1:59:93:1e:32:7e:b3:ea:84:31:44:36:27:39:
10:06:cf:e8:7b:1f:7e:3e:30:9a:78:80:89:15:92:
8b:dd:77:22:a4:2f:d3:ac:d0:64:6e:98:14:fe:cf:
d5:59:30:2c:02:92:05:db:aa:24:8a:96:0a:dd:f9:
03:c7:38:78:1f:d6:a1:d0:b2:2c:bb:c7:f5:dd:3a:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:41:AE:39:D4:83:1F:F2:55:B5:2D:A0:4B:0C:D1:49:DB:CA:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134392e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d2:7a:b5:d1:13:30:48:58:c4:d0:74:95:12:7e:ff:2e:3c:
58:51:24:bd:43:7f:4b:ec:36:c6:d9:14:0b:de:7d:ca:79:72:
20:90:40:13:b4:7d:cf:be:a2:0b:bd:be:62:70:60:d1:31:01:
82:3d:08:b5:e6:96:e1:6a:d6:4e:69:e1:a0:d3:95:41:65:a9:
2e:7a:68:e2:d5:c3:93:ee:9f:97:5b:c0:7a:56:2c:9c:f2:a0:
c2:3e:fc:03:a9:7d:ae:77:2f:be:65:e2:1f:8a:d3:dd:da:da:
72:9d:ed:e6:e5:1d:5c:b0:22:10:ec:4b:d0:e3:cf:f0:e1:33:
e3:ce:c9:a4:95:39:8f:02:00:fc:a5:85:50:7c:73:c3:6c:0a:
48:b5:9c:7c:6d:df:bb:6a:a2:59:7d:ad:a3:6e:ee:b9:ce:03:
37:52:4a:68:74:f7:e0:32:7c:a1:be:f6:4a:38:ed:a8:13:84:
5c:a0:98:be:80:a5:e7:dd:d3:a6:6b:c1:2d:20:98:fd:0a:de:
07:b2:eb:63:87:61:0d:e7:a7:f1:c4:bb:d8:e0:86:42:1e:bc:
06:87:0c:f1:c9:0f:04:a5:03:8c:ea:f8:5c:e4:03:06:fe:7f:
34:5e:0b:75:89:67:e5:12:0f:fb:8a:37:c0:81:79:f5:04:72:
83:cc:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:48:34 2026 by rpki-client