Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20313532313739.roa
File: 3231372e3231362e3231382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: BxU7vM7NcWlbf5RzT20LKc1qPNEdosc3dhPMq31vtYk=
Subject key identifier: F4:69:69:50:35:BA:DA:3B:C5:E2:D3:39:F2:76:48:38:F9:2E:36:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 542AA337AAF95CFF008FA2E32D2AB5A300A86B8B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20313532313739.roa
Signing time: Mon 17 Aug 2026 09:51:19 +0000
ROA not before: Mon 17 Aug 2026 09:46:19 +0000
ROA not after: Mon 16 Aug 2027 09:51:19 +0000
asID: 152179
IP address blocks: 217.216.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2a:a3:37:aa:f9:5c:ff:00:8f:a2:e3:2d:2a:b5:a3:00:a8:6b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 17 09:46:19 2026 GMT
Not After : Aug 16 09:51:19 2027 GMT
Subject: CN=F469695035BADA3BC5E2D339F2764838F92E366C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:4b:94:a9:c6:09:c1:95:54:37:ba:e8:96:
7b:3d:76:cf:32:f2:59:1b:fa:4d:ae:fe:65:db:20:
d8:73:9d:49:0c:2b:b3:5c:71:d6:c9:33:60:2e:90:
ee:dc:a2:22:a9:d7:a7:e2:43:b5:1b:66:3a:4e:04:
af:83:54:48:6a:42:9e:31:33:05:5c:5c:02:dc:bc:
3c:b7:91:2d:26:78:69:4b:b8:bb:53:a9:a2:1c:fc:
7c:9a:53:33:54:fa:9a:76:9e:e2:0b:8c:29:c9:07:
c6:1f:4a:82:01:7b:95:64:09:62:78:ba:19:e3:c5:
83:ae:b5:ee:cd:a2:76:61:c4:c4:1c:aa:81:29:9b:
6f:40:69:92:38:c1:0f:d0:21:74:34:53:6c:7b:d6:
25:63:95:f3:88:0a:e0:f9:e2:13:4a:2c:3a:b7:1c:
ab:f3:b6:db:89:f6:ef:52:d8:96:0d:d3:2d:72:3f:
63:dd:56:ed:79:db:a4:17:6e:35:2e:ca:96:ca:4b:
c6:0f:73:d1:c9:ba:af:fd:68:a0:4e:1d:37:7e:07:
ec:a8:bc:33:b8:30:96:7a:ff:1d:b5:12:3b:35:68:
b9:b1:5c:a1:30:6d:c9:78:8b:7a:ac:ed:c2:a6:06:
9a:f4:e0:e0:a2:43:ad:d7:78:61:68:ba:c9:de:00:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:69:50:35:BA:DA:3B:C5:E2:D3:39:F2:76:48:38:F9:2E:36:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.218.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9c:7d:37:7e:be:b9:19:e7:f3:34:3c:25:df:c4:ba:6d:9f:
27:8f:96:54:16:ca:d4:d1:33:2e:57:74:91:5f:2f:4c:76:21:
3f:2a:7b:e2:12:28:01:aa:f7:64:27:b0:00:02:ca:0f:25:6b:
66:94:bc:f1:87:e7:fb:b8:a2:1d:fc:38:0f:ed:2d:16:4c:cb:
db:cc:da:d6:8a:a6:6c:7a:17:db:dc:7d:a3:ce:c2:ae:4f:85:
24:02:5d:84:68:59:2e:05:4c:d0:f0:69:c5:96:b3:4f:55:7c:
cd:e4:60:3d:ac:b2:b2:3a:45:32:5e:b0:43:11:0a:f6:0e:31:
ed:6c:10:b0:28:db:69:0a:8d:a2:4c:f5:7a:85:dd:c1:27:72:
57:98:e6:98:d8:78:8c:4b:a5:23:3b:cd:08:62:4e:97:d0:ab:
55:3f:4a:70:b6:f9:4a:80:a0:42:24:81:54:4c:8a:4b:b1:14:
e4:8d:75:f5:a6:56:c1:2f:28:b3:7a:f3:78:de:94:4d:e8:34:
e8:60:43:d5:e3:76:59:50:74:1d:1b:ee:34:a1:a7:4c:74:81:
49:9b:8d:09:0c:50:9c:57:5a:32:26:13:0d:5c:b9:bc:9e:cd:
a2:5a:21:7d:01:cd:3a:26:ed:2b:75:fb:34:fe:7d:64:89:dc:
ab:63:40:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:27 2026 by rpki-client