Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139302e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3139302e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: 87soz9oDa7YeMgCqKaJSZJJgYZaV9PiZo+xViBlYBuI=
Subject key identifier: 6C:6C:30:C9:9F:91:6F:9C:75:B2:7F:5C:74:B2:BF:4A:77:56:22:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 361734AE592394BF419D06441B736623E489FE0E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139302e302f32342d3234203d3e20323138373937.roa
Signing time: Mon 12 Oct 2026 09:45:54 +0000
ROA not before: Mon 12 Oct 2026 09:40:54 +0000
ROA not after: Mon 11 Oct 2027 09:45:54 +0000
asID: 218797
IP address blocks: 217.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:17:34:ae:59:23:94:bf:41:9d:06:44:1b:73:66:23:e4:89:fe:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 12 09:40:54 2026 GMT
Not After : Oct 11 09:45:54 2027 GMT
Subject: CN=6C6C30C99F916F9C75B27F5C74B2BF4A77562281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:d7:5e:9f:4c:3b:54:ac:f0:52:f0:dc:6e:
38:3c:f6:72:3b:d8:6c:f4:ef:ff:6f:ce:af:db:67:
0c:13:d4:e8:70:39:82:97:91:f8:75:83:59:d6:ce:
37:2c:bb:49:13:ab:67:44:83:d0:90:a3:ce:c9:c2:
a1:bb:ed:4e:91:3e:ba:f8:0f:c1:22:94:2e:91:90:
f4:a6:2a:5b:c8:1e:be:fa:8c:96:b3:59:91:0f:c3:
22:2c:89:33:8d:be:f0:bf:35:95:62:9f:c3:ff:bb:
b7:ff:ef:5d:d4:4e:75:f4:74:5e:f7:15:2a:15:93:
fe:67:64:8c:2b:d0:70:63:b1:7c:54:e3:07:37:99:
5b:fb:c9:94:09:7d:c0:66:69:9c:17:93:20:37:f9:
04:de:3c:60:4b:77:fd:6e:df:88:38:7b:92:e2:ea:
05:9d:7f:51:d1:55:1e:21:23:2b:94:12:0c:3d:f1:
5c:6e:d9:36:77:15:33:c1:ef:11:a7:a5:3b:85:4f:
74:b9:7e:01:21:b4:ef:b4:e6:74:9c:9e:11:1b:bd:
6a:3f:62:cc:cf:c3:8c:16:90:a1:ef:90:9f:ee:2a:
a2:5f:3c:31:90:d8:d4:50:75:c5:e3:30:aa:b8:6b:
22:1d:e3:35:56:14:a9:60:75:54:2f:be:26:a7:24:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6C:30:C9:9F:91:6F:9C:75:B2:7F:5C:74:B2:BF:4A:77:56:22:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139302e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
63:16:f6:fc:30:18:73:b7:da:74:49:65:65:4f:87:aa:ad:8a:
a9:53:76:99:e4:96:df:e0:80:ce:aa:96:de:a2:c1:f2:99:13:
41:fc:7b:5e:fa:a7:d3:7d:87:fa:d0:f3:14:f3:e6:83:ab:1a:
90:1e:ab:5b:1d:b3:c1:3d:80:d0:4a:09:f2:62:45:f5:b1:5b:
b3:a3:4b:56:9e:f0:0c:63:24:13:30:ae:2e:16:a6:57:20:04:
0d:8a:ae:cc:46:7b:9a:2c:7b:d2:c2:da:f6:c7:61:a8:0b:3d:
1d:b6:f0:43:e2:54:56:f2:58:f2:f8:3d:ff:2b:d5:9e:10:e2:
43:72:7d:69:ff:f4:10:a7:66:f7:62:cb:1e:37:79:ff:3f:1e:
a0:7b:3d:77:9a:5b:32:9b:de:3b:5d:6c:65:80:13:37:e9:9b:
e4:56:df:43:2e:85:cd:a6:3e:5c:26:4d:93:f1:23:e5:24:e0:
78:db:3d:1e:72:bf:37:77:de:2a:42:96:4c:d6:92:5b:ca:c5:
8a:85:3f:bc:b7:c5:74:23:42:8c:83:09:d4:b9:c0:4f:f1:4e:
48:35:8d:16:70:75:2f:3a:06:f2:de:16:4a:96:75:ad:67:bd:
96:51:cd:44:38:0e:09:c8:c1:e0:6a:bf:6e:ec:82:50:0d:2f:
b1:a7:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:36 2026 by rpki-client