Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e2035363530.roa
File: 3231372e3231362e3138342e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: +srfWfDW2VDq1kqHxBDXYK3uvce7XLDk0x7bSlYP4Po=
Subject key identifier: 9E:29:E2:E7:96:98:5B:D5:93:36:E9:30:F2:AD:A6:30:E7:F8:92:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55F7CAC8CC472015553EA521A135A5027DD651E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e2035363530.roa
Signing time: Sat 11 Jul 2026 09:10:18 +0000
ROA not before: Sat 11 Jul 2026 09:05:18 +0000
ROA not after: Sat 10 Jul 2027 09:10:18 +0000
asID: 5650
IP address blocks: 217.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f7:ca:c8:cc:47:20:15:55:3e:a5:21:a1:35:a5:02:7d:d6:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:05:18 2026 GMT
Not After : Jul 10 09:10:18 2027 GMT
Subject: CN=9E29E2E796985BD59336E930F2ADA630E7F8927E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:04:f2:94:b9:40:66:0d:27:87:f3:ad:5b:
e1:a8:0d:35:88:9f:38:ed:2e:94:63:b5:bd:08:91:
5c:68:94:05:3a:4d:80:a8:14:29:bf:da:ef:32:6d:
b3:d3:c6:05:41:cd:84:d1:e6:31:fc:7f:58:2f:6a:
72:75:2f:80:e1:27:bb:94:8a:81:d0:36:ef:70:b6:
76:f3:e2:72:e2:a8:a3:77:90:91:10:0a:ba:7a:40:
57:dd:64:2f:83:c6:9b:c6:b9:29:b3:3b:16:ec:cb:
ba:97:db:14:ca:96:2d:bf:b0:13:da:fb:bf:17:0d:
2c:a7:14:b4:6a:2c:b0:c3:13:8c:1f:68:c8:e7:38:
1b:1e:ba:29:d7:40:fe:3e:fe:a2:16:e4:c5:d0:f7:
58:c7:0f:14:e4:a8:90:a1:d3:10:0b:bc:f3:21:21:
23:ba:cd:b1:27:2a:e1:4e:04:ef:b1:95:0b:df:79:
b4:13:b4:bd:3a:59:84:2d:5e:db:9a:51:f9:a5:77:
51:00:ee:09:cf:40:e5:db:98:c5:9d:df:3c:49:29:
0c:a8:dc:7b:de:31:94:5b:67:dc:22:53:e1:d2:46:
22:15:80:ca:83:86:24:f0:8f:30:6d:0e:8a:e2:07:
dc:16:a8:cb:9a:85:97:50:81:a9:3e:16:94:37:8d:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:29:E2:E7:96:98:5B:D5:93:36:E9:30:F2:AD:A6:30:E7:F8:92:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:c9:9a:e1:89:a9:b0:79:f9:2a:f3:7d:f4:8f:5a:28:8b:d7:
56:92:a1:14:e5:10:2e:f0:95:ef:15:1f:49:b3:b1:b7:b5:f3:
40:a2:0b:6c:f0:af:45:7b:d2:cd:f0:eb:19:47:a6:e6:e6:7e:
b8:25:09:16:de:3a:49:fa:95:a4:50:c3:c5:71:7c:63:83:3e:
b3:3e:1e:1e:1d:8f:79:58:0b:f0:d0:4a:ae:65:a9:07:25:7d:
9f:60:7e:ea:6d:d8:48:f5:e8:fa:6d:0e:54:7d:44:c9:cc:9b:
70:28:7e:4b:ed:be:85:d2:32:d0:75:ca:fd:54:03:a2:2e:bf:
2d:b3:5f:f6:8e:0c:50:aa:e2:62:60:9e:9f:4c:ee:69:46:1f:
b6:16:b2:74:11:bb:31:f0:66:37:a5:18:14:27:de:53:10:59:
14:d6:d7:a1:5e:68:c4:06:f7:9a:29:f6:be:57:3d:09:4d:a7:
da:61:03:0f:83:6f:d3:90:b7:d3:6d:fa:8a:4b:03:82:af:96:
ec:49:83:fe:a5:cf:a1:df:d1:d4:0d:02:6a:f5:23:58:df:e9:
58:aa:be:9b:3d:20:ea:27:46:96:94:1c:3b:04:63:d7:2d:f0:
3b:51:da:d2:90:6d:78:ec:8b:d8:dd:c1:eb:32:57:42:8e:11:
d4:35:8c:82
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVffKyMxHIBVVPqUhoTWlAn3WUeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MTEwOTA1MThaFw0yNzA3MTAwOTEwMThaMDMxMTAvBgNV
BAMTKDlFMjlFMkU3OTY5ODVCRDU5MzM2RTkzMEYyQURBNjMwRTdGODkyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPwTylLlAZg0nh/OtW+GoDTWI
nzjtLpRjtb0IkVxolAU6TYCoFCm/2u8ybbPTxgVBzYTR5jH8f1gvanJ1L4DhJ7uU
ioHQNu9wtnbz4nLiqKN3kJEQCrp6QFfdZC+DxpvGuSmzOxbsy7qX2xTKli2/sBPa
+78XDSynFLRqLLDDE4wfaMjnOBseuinXQP4+/qIW5MXQ91jHDxTkqJCh0xALvPMh
ISO6zbEnKuFOBO+xlQvfebQTtL06WYQtXtuaUfmld1EA7gnPQOXbmMWd3zxJKQyo
3HveMZRbZ9wiU+HSRiIVgMqDhiTwjzBtDoriB9wWqMuahZdQgak+FpQ3jZq/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUnini55aYW9WTNukw8q2mMOf4kn4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzgzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzYzNTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
2di4MA0GCSqGSIb3DQEBCwUAA4IBAQAcyZrhiamwefkq8330j1ooi9dWkqEU5RAu
8JXvFR9Js7G3tfNAogts8K9Fe9LN8OsZR6bm5n64JQkW3jpJ+pWkUMPFcXxjgz6z
Ph4eHY95WAvw0EquZakHJX2fYH7qbdhI9ej6bQ5UfUTJzJtwKH5L7b6F0jLQdcr9
VAOiLr8ts1/2jgxQquJiYJ6fTO5pRh+2FrJ0Ebsx8GY3pRgUJ95TEFkU1tehXmjE
BveaKfa+Vz0JTafaYQMPg2/TkLfTbfqKSwOCr5bsSYP+pc+h39HUDQJq9SNY3+lY
qr6bPSDqJ0aWlBw7BGPXLfA7UdrSkG147IvY3cHrMldCjhHUNYyC
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client