Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa
File: 3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: hRUSO4oW0kNm5x+Pts01c9g1wvohEO+QEjmItqGUOO8=
Subject key identifier: D1:B8:24:FA:9C:A9:2D:D9:4E:86:5E:E1:53:15:1A:D5:75:CB:B2:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D6E9E975BF33A3D83890182726CC8454D54E469
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 14 Oct 2026 16:29:44 +0000
ROA not before: Wed 14 Oct 2026 16:24:44 +0000
ROA not after: Wed 13 Oct 2027 16:29:44 +0000
asID: 214155
IP address blocks: 217.216.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6e:9e:97:5b:f3:3a:3d:83:89:01:82:72:6c:c8:45:4d:54:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 16:24:44 2026 GMT
Not After : Oct 13 16:29:44 2027 GMT
Subject: CN=D1B824FA9CA92DD94E865EE153151AD575CBB29C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:62:d6:68:4f:27:13:2d:56:9b:33:32:a5:
ce:87:22:09:d8:df:96:50:a6:b6:d5:d4:bc:03:45:
26:2a:01:77:52:5b:c7:60:d7:3f:54:73:d8:1d:e0:
37:71:5a:ee:b5:47:e5:60:b6:ec:a5:e4:f1:fe:fb:
86:e1:4c:e3:e5:67:4a:2b:fe:13:e3:6e:a3:0e:16:
6d:25:e9:a7:27:53:78:9b:6e:66:67:be:11:db:6b:
7e:1d:7c:a3:74:0f:5b:18:51:a2:2d:79:71:97:e9:
ff:53:98:8d:c2:64:10:85:4a:7c:28:b2:91:27:92:
d2:91:76:a7:1f:71:c8:53:2f:19:76:4f:8d:dc:59:
17:0f:05:b7:67:53:f1:7e:47:ef:48:ef:d6:b2:51:
32:15:88:d2:ef:eb:a4:c1:8e:38:62:b1:d0:48:06:
83:fe:46:35:81:0b:40:55:dc:3d:ef:15:8e:ed:d7:
8c:83:da:c0:a6:c2:b4:2d:f1:85:ab:bb:d3:d7:4b:
55:8e:20:d6:ba:d6:ef:5b:74:8c:5f:ce:4c:a7:69:
df:18:0f:49:10:de:3a:32:26:38:1f:a8:8e:de:ba:
d0:09:b1:c4:78:d0:df:13:a8:59:cd:08:17:f6:5a:
83:53:92:11:f6:5b:ae:38:31:ac:90:ce:c1:17:9d:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:24:FA:9C:A9:2D:D9:4E:86:5E:E1:53:15:1A:D5:75:CB:B2:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37302e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8a:88:64:1c:c9:ab:32:cd:11:8c:9c:7c:91:09:b6:e0:34:
58:80:c1:8b:3f:69:a2:74:79:83:32:db:ae:42:13:80:e6:ee:
71:50:1d:76:8b:d7:e0:27:b0:ab:75:c0:8e:8a:e3:2c:ee:68:
cd:38:a9:9c:8c:df:f8:ff:c9:ae:c1:a1:a7:15:81:0e:ac:1b:
68:04:1f:5f:35:46:d4:a6:82:34:7c:88:6b:b7:6e:7f:6f:e7:
b1:72:cf:21:32:f2:68:31:98:43:45:cb:dc:46:37:81:3e:79:
95:0c:1a:6b:61:b7:33:e1:e4:64:22:54:e8:33:f0:68:c7:21:
f6:92:9d:53:0a:24:e7:59:18:7c:94:a8:0f:67:be:03:f0:ed:
d6:7b:8f:84:c5:9b:85:a7:f0:88:8a:b8:bf:aa:c5:05:7a:b4:
19:f7:0f:75:d4:34:88:f1:4c:cb:e2:fc:55:a6:55:44:2b:c4:
e7:c5:a1:0c:9e:a5:70:9c:68:81:0a:63:06:c3:6f:30:0c:1a:
b7:29:89:fa:be:68:c5:55:1a:bd:cd:36:97:67:0d:13:c0:ee:
44:96:4b:c0:2e:ad:03:fb:47:12:f9:13:fa:fd:0f:08:73:11:
e4:a2:d8:e2:dd:2f:31:80:93:7e:df:2d:51:db:fd:6c:89:38:
b2:9f:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:37 2026 by rpki-client