Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3235352e302f32342d3234203d3e2033323537.roa
File: 3231372e3231362e3235352e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: EMTefGi/rkQTP7NCxSOD6tEiYLLjKsnVMWjJImhfbpM=
Subject key identifier: D9:20:39:69:DF:DD:9D:1A:2D:99:F8:DF:B2:08:93:18:E4:07:70:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25BA88C758C88851CBE22E0937ECC8D3BAB3C796
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3235352e302f32342d3234203d3e2033323537.roa
Signing time: Wed 14 Oct 2026 07:51:10 +0000
ROA not before: Wed 14 Oct 2026 07:46:10 +0000
ROA not after: Wed 13 Oct 2027 07:51:10 +0000
asID: 3257
IP address blocks: 217.216.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 20:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ba:88:c7:58:c8:88:51:cb:e2:2e:09:37:ec:c8:d3:ba:b3:c7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 07:46:10 2026 GMT
Not After : Oct 13 07:51:10 2027 GMT
Subject: CN=D9203969DFDD9D1A2D99F8DFB2089318E4077069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:9f:9f:e5:03:04:15:df:5c:1b:1d:d5:20:
17:7d:b7:03:0c:76:59:55:be:40:e3:f3:cb:ac:81:
d4:3e:7d:58:b6:8f:5e:ce:cf:74:9c:fd:07:70:5e:
fe:71:2f:bf:ab:4f:5f:1e:90:d3:84:ca:8a:6e:d8:
b1:b3:7f:6b:35:c1:73:18:98:ae:17:5b:51:b4:c8:
95:d4:09:8e:2d:0f:fc:a0:4a:16:2b:ee:9b:ef:5e:
be:80:23:a6:0b:37:40:a1:e2:f7:c8:da:9b:fa:d8:
56:e8:29:1b:0c:c3:68:e5:da:34:d0:ba:65:dd:17:
0d:1e:16:a6:2a:da:f7:9c:6e:78:fa:53:45:40:ee:
98:40:bb:ff:e7:12:5b:b6:94:29:b1:56:6b:fb:b4:
e0:8b:b9:1f:71:b6:c1:51:89:65:ab:20:fa:e4:09:
22:76:74:c2:e9:3e:ae:33:41:10:e4:bc:d2:45:96:
91:6d:ea:38:6d:c1:75:1f:2a:3b:66:03:d1:59:3f:
8a:07:c4:e2:31:46:c2:ab:48:aa:3d:0c:7c:3f:af:
ae:43:ed:36:5c:c8:94:3b:cc:4c:7a:29:3b:67:9d:
41:a1:f8:0c:b7:ce:fc:88:df:30:c2:dc:45:fa:82:
6d:a2:66:e0:65:d7:5a:fd:b3:0d:dc:e3:14:9a:02:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:39:69:DF:DD:9D:1A:2D:99:F8:DF:B2:08:93:18:E4:07:70:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3235352e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.255.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2a:a7:8e:85:2d:27:ca:3f:69:02:41:eb:49:ac:97:b5:e8:
93:b0:93:d2:94:94:55:be:66:d8:d1:73:ff:27:86:55:51:fb:
f9:32:e1:4b:16:a8:f4:2b:5c:ee:29:ad:15:bd:d0:36:29:77:
44:ff:df:55:45:e6:4e:59:07:43:c2:04:5f:bd:b2:6a:2d:23:
6f:40:ec:38:fc:0b:59:fb:3f:f8:e6:23:92:c3:f5:31:33:e8:
f6:70:cb:22:32:9a:1c:f5:64:d5:c8:af:35:71:fc:43:46:b4:
d0:9d:ed:9a:99:cb:e6:30:4e:fc:0e:ea:7a:57:3e:57:73:18:
16:f0:4d:e0:01:05:ca:4f:d2:54:c6:29:ce:ec:33:d9:3f:c8:
44:df:51:75:89:f6:fb:13:11:52:d8:fe:8c:50:9c:4d:dc:74:
24:98:4e:1b:6b:c0:74:ee:a8:51:2f:c6:39:05:bd:0f:4a:7b:
95:b8:69:79:43:7e:b7:c1:50:ce:8b:3e:d4:94:df:9f:29:98:
f1:b6:44:de:6e:b2:fc:34:e7:a6:d9:a4:83:ac:ac:06:7f:2d:
2e:80:d4:4c:f7:07:11:ca:95:f7:4e:d6:36:0b:07:7c:83:5b:
8f:15:ff:26:ee:ed:f5:b7:ac:54:59:f1:dd:93:6d:e9:6b:05:
e6:3b:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:24:56 2026 by rpki-client