Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137302e302f32342d3234203d3e203330303432.roa
File: 3231372e3231362e3137302e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: et40tkwA6AlwHOBt8q7tutNUXGfHEj+WkLiy3BkpEFI=
Subject key identifier: 69:D5:64:51:15:66:FD:80:10:7D:23:7E:D3:73:F2:BC:19:B1:DC:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E09A14E81C947B66AEC6A10F2E37EDC0DAF3A46
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137302e302f32342d3234203d3e203330303432.roa
Signing time: Tue 29 Sep 2026 07:29:09 +0000
ROA not before: Tue 29 Sep 2026 07:24:09 +0000
ROA not after: Tue 28 Sep 2027 07:29:09 +0000
asID: 30042
IP address blocks: 217.216.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:09:a1:4e:81:c9:47:b6:6a:ec:6a:10:f2:e3:7e:dc:0d:af:3a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:09 2026 GMT
Not After : Sep 28 07:29:09 2027 GMT
Subject: CN=69D564511566FD80107D237ED373F2BC19B1DCB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:fe:ca:1f:c6:48:20:a8:e7:2e:b0:db:16:
a5:7a:2f:5d:e5:c0:5b:bd:02:bd:9d:65:e6:45:e9:
5a:11:f5:3a:b5:d4:ae:b2:00:b8:0f:37:51:d4:f8:
0e:41:06:05:a4:24:16:db:17:7d:3e:dd:44:5a:74:
d8:a7:fb:a3:43:a4:d5:65:2f:f3:db:cb:c9:05:c8:
8b:85:71:9f:c8:d2:b6:03:16:9a:1a:ba:70:7c:bb:
5f:7d:c6:54:4b:c2:ca:8d:af:48:ae:d2:f0:08:28:
f8:1b:47:d2:99:ec:ad:ea:39:4e:56:94:9b:bf:f0:
e0:3b:20:29:ba:2b:5d:4c:93:56:5b:14:a2:a5:da:
f0:4d:15:f7:3f:cb:e8:d5:8e:f4:57:1f:7d:73:4b:
ea:f8:46:d5:1a:65:dc:ab:b0:60:57:68:af:ca:87:
a8:dd:ff:78:17:f7:d4:51:a2:38:ac:de:76:fe:8e:
2a:3d:7e:ce:50:c2:19:72:7f:d3:e3:65:03:8a:41:
61:a5:be:72:a6:f6:c3:f3:23:52:3d:8a:b7:90:e4:
c3:88:f5:d4:26:f8:8c:89:70:b4:c7:e6:b9:0d:be:
ee:8e:28:db:47:c3:60:88:89:52:8a:fb:b5:d9:e0:
19:91:b4:5a:c0:08:0c:66:56:7d:df:f1:7e:cf:85:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:64:51:15:66:FD:80:10:7D:23:7E:D3:73:F2:BC:19:B1:DC:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137302e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e6:8a:85:50:3f:f2:13:c6:22:e9:b7:38:75:4d:e2:c0:9a:
c2:9f:76:92:59:20:be:0a:99:98:f5:61:a4:e8:69:2f:4b:43:
fa:99:63:83:93:d7:a3:f5:f3:5c:4d:7b:8a:5a:bf:c7:d3:d6:
4e:aa:1f:09:61:ae:1d:67:e3:a1:0f:7e:ec:fd:43:ad:43:aa:
8d:96:4e:a5:81:e5:66:8a:79:c2:5c:d5:9d:92:eb:d8:6e:17:
1b:c5:d9:fc:f6:f3:07:c3:a8:e7:94:49:09:a6:99:fc:37:49:
66:9b:5d:8e:23:54:e9:fc:da:f8:ef:0d:d0:0d:ed:64:bb:38:
fc:36:8d:5d:7e:ed:5c:da:18:37:7b:b9:90:32:1c:cc:9e:d2:
19:69:3d:38:74:1e:55:76:75:ca:75:79:8b:eb:29:a8:f1:e2:
4c:b2:fe:f2:35:63:32:6a:f5:81:53:b2:67:88:c7:95:b7:d8:
c3:d5:53:ee:dd:aa:2a:96:f0:5b:22:02:8f:08:08:ca:c9:49:
fa:05:de:1f:90:22:15:3d:ef:af:ed:45:d0:b4:eb:72:fb:5d:
83:1a:28:c5:82:c7:10:bd:63:45:7f:95:be:12:86:73:33:ff:
04:d0:2d:95:37:61:21:07:25:2b:0b:57:b7:c0:40:ad:03:d8:
6b:53:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:15 2026 by rpki-client