Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234352e302f32342d3234203d3e20323030303139.roa
File: 3231372e3231362e3234352e302f32342d3234203d3e20323030303139.roa (raw, json)
Hash identifier: pOAl+y2/TcN0AX/k1ThOsQfEkB1gvVL2UiL9UwM41s4=
Subject key identifier: C6:52:12:44:07:37:AF:5C:AD:F7:F7:A3:23:8D:74:D4:61:D3:C2:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E7E3719C3E0EA9D9F610C133F516A2ED6830157
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234352e302f32342d3234203d3e20323030303139.roa
Signing time: Thu 15 Oct 2026 12:34:31 +0000
ROA not before: Thu 15 Oct 2026 12:29:31 +0000
ROA not after: Thu 14 Oct 2027 12:34:31 +0000
asID: 200019
IP address blocks: 217.216.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7e:37:19:c3:e0:ea:9d:9f:61:0c:13:3f:51:6a:2e:d6:83:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 12:29:31 2026 GMT
Not After : Oct 14 12:34:31 2027 GMT
Subject: CN=C65212440737AF5CADF7F7A3238D74D461D3C245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:f0:ec:f3:0d:dd:cf:86:c9:fb:4c:9b:14:
44:c9:a2:8e:4e:a7:8b:30:89:86:f6:27:6a:44:b8:
28:13:6e:e7:a3:22:a3:22:3b:1c:76:f2:8b:d6:5e:
bd:e3:95:a3:70:ae:19:9d:cf:70:ab:7f:4d:af:f7:
bd:c4:a7:30:dd:c6:14:21:43:50:f1:7e:3e:21:98:
d3:c3:a6:89:35:42:f0:e1:b2:bb:27:c5:23:6b:e0:
5a:9c:f0:cc:a6:7e:77:b6:ab:0d:86:97:69:79:1e:
85:58:31:c2:c8:1c:9f:e2:4e:8a:d8:62:0f:9f:48:
28:b1:26:3f:8d:43:a6:ca:61:ef:f5:53:5d:e8:26:
0c:5d:c5:7a:1f:5c:f0:8a:85:18:34:73:59:a9:a9:
3c:f8:0d:84:de:90:3a:6a:7a:ed:3b:e7:cc:c1:73:
c9:e8:ff:16:de:09:5c:8a:b0:09:8f:0e:0c:ee:9c:
79:fb:8f:f2:81:38:03:d6:23:db:75:72:73:b1:e8:
96:a3:3b:60:cd:5a:a5:d6:ef:e2:3a:13:79:62:10:
04:07:01:b1:5d:3f:73:39:76:ac:cb:74:7e:44:f5:
cb:9c:89:6c:0f:c0:91:d6:88:d7:45:f1:a0:58:fb:
3a:cc:21:a9:3c:9a:aa:e4:27:0b:5c:f9:d5:20:87:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:12:44:07:37:AF:5C:AD:F7:F7:A3:23:8D:74:D4:61:D3:C2:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234352e302f32342d3234203d3e20323030303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:9e:ba:27:43:a0:7f:78:97:d0:15:2d:cb:55:3b:80:0e:e2:
cf:48:44:dd:f7:fd:1b:ab:98:2d:2e:78:d2:3e:5a:fb:76:b5:
1e:3a:49:2b:0d:c1:2f:5f:3c:40:2e:b4:d2:82:a0:ab:b5:f1:
04:2d:57:d2:ea:da:37:43:ec:17:76:43:7e:f7:31:a8:1e:08:
f6:14:76:05:cc:83:ab:fa:1b:e2:ff:14:32:08:fa:eb:94:4e:
0d:f8:dd:16:a3:30:f2:ca:0f:72:b7:42:f7:62:45:29:f0:7b:
1c:bc:94:db:f5:52:08:29:71:fd:03:cd:d8:49:2e:53:0f:28:
7d:67:c4:7e:a1:16:76:ef:4d:a0:2b:c5:0c:fe:83:96:fb:2d:
5b:16:e4:3f:63:81:6c:43:17:d0:39:69:53:68:f9:27:b6:35:
bc:24:46:35:1c:8a:53:b8:e8:72:1c:e0:25:7a:e9:73:ff:ac:
46:8d:b7:8b:a8:65:a7:c2:77:38:ef:3f:01:b7:52:62:83:32:
65:52:c2:c3:95:5e:ad:e9:04:80:30:11:c9:16:11:da:c8:24:
c3:15:70:6d:85:6e:a6:3a:ee:ea:a3:0d:c2:71:92:c3:cd:2d:
9f:f5:89:95:da:13:d3:70:8f:42:75:8c:de:5a:99:ab:71:ba:
28:e9:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:48:38 2026 by rpki-client