Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32302d3234203d3e20383334.roa
File: 3231372e3231362e3232342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: kZ1JkNjcqB+doZAPKKgLrXOtefV9lhopMKZBTbiTFXE=
Subject key identifier: C0:3E:E8:85:6F:B2:E4:9B:46:DC:3C:E1:E7:31:6E:40:45:D9:92:9F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4121AA714A0F9EC73D87432E8620E7D67F1CA1D1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32302d3234203d3e20383334.roa
Signing time: Sat 13 Jun 2026 12:25:56 +0000
ROA not before: Sat 13 Jun 2026 12:20:56 +0000
ROA not after: Sat 12 Jun 2027 12:25:56 +0000
asID: 834
IP address blocks: 217.216.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:21:aa:71:4a:0f:9e:c7:3d:87:43:2e:86:20:e7:d6:7f:1c:a1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 12:20:56 2026 GMT
Not After : Jun 12 12:25:56 2027 GMT
Subject: CN=C03EE8856FB2E49B46DC3CE1E7316E4045D9929F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:3e:ad:b6:6a:50:ce:1d:64:0b:e0:97:65:
9b:6b:16:77:7d:4c:8a:99:d2:0f:fc:9c:08:ba:8d:
38:d3:f9:90:86:97:69:b4:2c:9b:78:5f:2b:fe:ca:
49:ce:64:f6:41:04:78:94:60:04:50:da:18:35:ae:
2f:f7:42:fb:b1:87:cd:9c:a6:41:65:2d:6e:59:66:
91:65:56:79:72:12:3d:f4:7f:66:3f:78:9c:6d:43:
e3:c1:c1:ff:3d:1e:ab:b8:eb:e6:8e:63:b0:f5:f6:
f6:48:19:bb:b7:ba:e4:49:0c:5e:eb:25:37:80:ff:
ad:eb:fd:ae:64:ba:d7:60:f8:f5:f7:0a:81:e1:e2:
ec:e4:7a:2b:f0:f2:ae:11:66:81:06:d5:2e:97:00:
db:7d:32:f8:65:83:b6:a5:1a:bc:b3:83:76:d5:89:
f5:f0:bd:33:d1:e5:03:a1:26:5d:31:1d:99:09:56:
89:8d:e6:19:54:a6:be:07:6d:1c:cc:02:4a:a3:63:
c8:5b:2d:8d:f1:dc:2f:b5:de:7f:49:48:68:ba:29:
d1:0c:fb:70:24:18:8e:bc:c0:59:97:42:80:63:5c:
6b:2e:8f:e6:12:5e:c2:56:06:eb:08:5a:11:b0:b7:
5e:8e:a1:fb:d1:d7:f1:ff:bf:c5:b3:36:ab:5c:ce:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3E:E8:85:6F:B2:E4:9B:46:DC:3C:E1:E7:31:6E:40:45:D9:92:9F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3232342e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.224.0/20
Signature Algorithm: sha256WithRSAEncryption
46:d1:b7:29:23:a4:56:08:b5:4f:e5:dd:78:c1:81:2d:e7:71:
d7:c5:0b:58:99:28:48:fc:4e:94:64:26:dc:00:c7:74:19:5d:
bb:f0:41:92:43:38:fd:0b:c5:23:4b:76:bc:e4:02:45:61:72:
8e:89:2f:9c:22:94:2e:d8:c5:8d:1e:2a:12:33:77:4a:3b:de:
6e:fa:22:49:c9:53:08:d5:fb:da:24:be:aa:5f:4e:de:71:2d:
c4:f1:01:ef:7c:5e:17:42:ab:10:e9:d9:fe:d6:c0:a3:b8:28:
6a:46:d3:b2:9e:ec:05:a4:b6:82:19:f3:00:01:4c:ad:d1:1d:
ca:9a:07:f4:c9:ff:29:e2:a8:05:cc:85:29:17:66:8f:db:d9:
ce:c7:18:30:b5:39:eb:71:d4:5b:1b:f0:5a:20:d5:60:05:cd:
51:92:47:da:7d:e4:fc:2e:a4:f6:93:1b:ec:64:82:e3:8d:f3:
3e:8a:44:ec:38:ed:35:df:f7:31:34:4f:22:b1:51:e2:1e:be:
9b:c6:06:d3:b4:a9:e9:4f:c9:e7:26:83:e7:72:8a:66:41:29:
9a:b9:57:ff:34:af:dd:1f:9b:f9:7b:73:ed:2f:43:0c:bc:ac:
ff:5e:68:51:df:92:2c:34:82:d8:bd:db:19:25:6c:cf:33:73:
4c:3e:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:52 2026 by rpki-client