Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ZIAf1k8Tz0p3o/Z2fveSvh+/12ZYtrrIqkhaeI+1cuw=
Subject key identifier: AF:60:37:C3:76:CE:F3:A4:2F:1F:9E:08:24:78:E2:01:2C:51:AD:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 624AC41926B9AA789FDB8232FDA1FBA6E97B32D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20383334.roa
Signing time: Wed 08 Jul 2026 06:44:23 +0000
ROA not before: Wed 08 Jul 2026 06:39:23 +0000
ROA not after: Wed 07 Jul 2027 06:44:23 +0000
asID: 834
IP address blocks: 217.216.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4a:c4:19:26:b9:aa:78:9f:db:82:32:fd:a1:fb:a6:e9:7b:32:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 8 06:39:23 2026 GMT
Not After : Jul 7 06:44:23 2027 GMT
Subject: CN=AF6037C376CEF3A42F1F9E082478E2012C51AD83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:84:53:ee:b6:d0:70:8f:13:8d:7f:74:17:
f8:c3:ee:eb:e3:47:4e:1e:af:66:de:9c:8a:6c:a7:
76:92:51:87:0c:a2:e9:8d:e2:c5:12:f8:d3:b0:61:
74:a4:c2:0f:e1:c3:36:aa:32:c9:4b:ab:e1:ae:40:
9b:0c:fe:5e:f6:a3:43:ce:84:e6:7d:4b:d6:03:53:
87:09:9b:23:7e:cf:68:cc:44:fc:b8:38:4d:ea:b8:
66:cf:7c:c7:8d:fe:94:d5:36:ed:b5:9c:69:58:d5:
06:7a:a9:00:ad:5d:5c:dc:e6:78:46:81:9a:bd:da:
20:fb:17:b4:35:3c:f9:b1:60:9d:b2:16:ee:fc:0e:
23:a3:bf:8f:cb:f0:ec:27:36:e0:e3:72:b7:ab:30:
91:4e:bb:36:a6:1a:2f:88:2c:9d:5d:af:dc:72:f2:
6d:a9:e9:87:96:8c:6a:b3:d3:8e:70:c1:d2:89:6c:
c4:61:77:d3:83:01:fc:e8:79:3e:05:6c:68:0c:f6:
25:82:15:0b:2e:15:bd:0f:50:db:31:7e:aa:9d:7d:
7a:8a:62:a8:29:b0:77:90:ec:b8:5f:82:4a:63:17:
63:42:6c:d4:25:91:a7:ac:12:40:16:93:19:8c:6b:
97:6f:02:02:60:d9:be:7a:73:7b:86:2b:b5:aa:1c:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:37:C3:76:CE:F3:A4:2F:1F:9E:08:24:78:E2:01:2C:51:AD:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.216.0/24
Signature Algorithm: sha256WithRSAEncryption
51:01:cb:2f:5c:27:fe:f3:e8:64:91:69:e1:16:e1:e8:8b:ae:
aa:5a:ac:3e:d0:fc:e0:75:12:50:82:9f:c4:9b:52:44:64:00:
01:ad:8d:03:cd:20:73:e5:84:60:ec:03:bf:a5:49:67:05:53:
5e:16:e6:b6:8e:b3:e8:75:c1:75:56:95:44:53:a0:7e:1e:0b:
18:fb:0b:71:ff:b6:3a:e6:da:1a:f1:79:a2:0a:3b:4d:61:f5:
8a:e7:7b:d7:77:ab:a2:31:4f:6a:9b:e2:3e:c8:63:14:77:2e:
e9:9f:b5:97:2b:08:7f:e5:af:e0:09:67:f0:1c:2c:b1:4d:ee:
43:28:3c:30:dd:86:15:1c:84:ff:06:c0:22:be:3a:2b:36:5f:
bf:32:59:b7:1e:38:fe:4d:c1:1e:6a:d7:ba:dc:d2:d7:31:66:
81:54:f9:f9:d8:7f:a9:b2:46:13:e5:4c:6b:29:6c:5b:69:f6:
da:19:86:2f:8b:81:2e:4c:90:dd:3e:33:6f:9a:a7:85:51:e2:
b9:e1:ca:6e:e4:09:b9:1c:2e:00:4c:05:14:66:12:fc:68:9c:
c1:65:1a:c7:6b:51:13:70:8c:a3:ea:f9:b5:a3:07:75:56:bd:
b9:b6:8c:41:82:5b:d5:e7:ee:9a:eb:bf:aa:35:64:8e:33:33:
2a:e2:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client