Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35372e302f32342d3234203d3e2037393739.roa
File: 3231372e3231362e35372e302f32342d3234203d3e2037393739.roa (raw, json)
Hash identifier: upOsntzjTo4DN2SSeF4UPvNuK04tNKVXyzbND94ft1E=
Subject key identifier: EB:AC:D4:5F:85:85:42:F7:A4:90:3D:EB:F6:CF:54:D1:0A:04:45:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2CD55AE31F182F38EBA0C2BB43629CB84B694B9B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35372e302f32342d3234203d3e2037393739.roa
Signing time: Wed 04 Mar 2026 21:33:09 +0000
ROA not before: Wed 04 Mar 2026 21:28:09 +0000
ROA not after: Wed 03 Mar 2027 21:33:09 +0000
asID: 7979
IP address blocks: 217.216.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d5:5a:e3:1f:18:2f:38:eb:a0:c2:bb:43:62:9c:b8:4b:69:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 21:28:09 2026 GMT
Not After : Mar 3 21:33:09 2027 GMT
Subject: CN=EBACD45F858542F7A4903DEBF6CF54D10A044547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:27:11:d7:9d:d3:f9:37:5c:a6:2d:aa:8a:
dc:29:63:90:fb:d5:ff:e5:06:27:e7:3c:93:1f:85:
cf:06:ef:8a:a5:94:9b:4b:25:ca:00:e7:9c:29:e7:
c3:0e:9b:39:ba:cc:43:8f:e3:88:4f:2e:27:c8:a0:
7d:e8:e1:1e:9c:fc:7c:73:0a:d0:c9:58:d9:41:5b:
7d:7b:33:a1:1c:ce:8c:54:5d:ba:42:3a:6e:7c:6c:
86:21:7e:2e:d9:ab:59:6d:2d:1b:15:14:5c:ba:44:
c3:60:a7:92:05:54:d4:95:9b:a0:ef:dd:96:5b:41:
8b:e0:a7:34:f8:31:89:3a:f7:cf:2b:38:80:c6:1f:
2b:f3:7c:b5:9f:cf:24:1d:68:4b:bb:39:6b:c7:f3:
a1:19:1e:18:e2:4f:0f:42:7b:5f:5b:3a:7a:0f:76:
a0:0c:80:b3:8a:c6:17:58:e5:14:da:d2:f9:42:9b:
7e:6e:1c:2f:88:36:0b:8b:1a:59:aa:d3:62:47:36:
fa:2e:d5:49:5c:a3:52:2c:6d:2d:6f:00:68:a8:ab:
73:93:bd:2a:32:45:a4:cb:f4:75:79:7d:a6:d0:df:
9a:af:7f:32:a5:02:dc:84:6b:a3:b0:2f:c9:d2:42:
65:e6:f7:6d:a9:91:11:39:0c:6e:2a:bd:cd:31:b8:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:D4:5F:85:85:42:F7:A4:90:3D:EB:F6:CF:54:D1:0A:04:45:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e35372e302f32342d3234203d3e2037393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.57.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2a:08:e2:e1:5f:4a:b3:21:99:c6:de:18:45:51:f2:12:1d:
59:eb:9c:40:63:51:a5:53:e1:68:d1:88:4c:73:57:bf:64:a1:
23:6d:d9:41:8f:07:fd:5b:9b:a0:c8:7b:07:4c:ef:6c:cc:ea:
a3:28:36:e7:c2:53:ca:1e:2d:17:ff:88:e0:48:25:93:32:96:
35:e4:39:1d:4f:e4:62:ba:a7:f9:3a:7c:1a:6b:fe:66:8b:43:
49:f5:cc:cc:ac:a2:4a:42:a5:27:94:05:c4:2f:bc:f1:0f:ad:
05:fe:c6:0e:d4:c0:21:8a:2e:ec:83:ad:2c:22:ae:62:48:f8:
60:1b:9d:2f:7f:fa:aa:d2:e5:b5:f9:a2:1d:e5:e3:0c:b5:6f:
8c:66:6e:94:84:a3:cd:a3:2e:6f:40:2d:b2:21:31:e2:4c:b9:
d2:a2:08:a7:b0:ed:06:14:5f:c7:c0:20:00:e6:42:e2:55:e7:
f2:ce:f7:ae:dc:ca:b3:50:3a:e9:e4:ae:6d:cd:c3:99:6f:d8:
0d:25:f6:c4:7e:31:95:1e:28:2a:eb:40:22:88:9d:ff:0a:d0:
a6:f3:75:e6:49:cb:cc:1f:ac:15:09:73:ab:f2:17:ae:a5:68:
38:8d:b0:11:d5:34:2d:fc:79:19:5a:9c:29:bd:91:7c:bb:96:
0a:3d:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:16 2026 by rpki-client