Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa
File: 3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: 9JIsjLa2Jsy/1BmlsxO73AubtGzlbFpG26r/hh+Vg3I=
Subject key identifier: 5C:A9:DF:41:96:C1:42:D6:8A:B4:84:82:0B:AC:5B:29:57:89:A0:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40B05E70B46A25F3C694B76B68363D508F56DCD5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 07 Sep 2026 13:28:36 +0000
ROA not before: Mon 07 Sep 2026 13:23:36 +0000
ROA not after: Mon 06 Sep 2027 13:28:36 +0000
asID: 207137
IP address blocks: 217.216.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b0:5e:70:b4:6a:25:f3:c6:94:b7:6b:68:36:3d:50:8f:56:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 13:23:36 2026 GMT
Not After : Sep 6 13:28:36 2027 GMT
Subject: CN=5CA9DF4196C142D68AB484820BAC5B295789A07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:e1:4e:22:73:7b:57:09:46:49:13:ff:01:
57:a8:70:1c:2c:3b:75:15:69:e6:b1:95:aa:7c:ad:
16:7e:e5:fa:d6:4b:ec:df:b1:a8:35:d0:29:10:8f:
98:7f:b0:92:1a:35:53:c0:f7:c0:53:68:33:87:42:
75:ad:2c:0e:05:c1:e6:17:3d:7f:a6:3c:5c:8f:bd:
16:ed:25:78:ae:c5:72:0b:1a:df:f7:97:cf:5e:f9:
25:c4:ed:0c:f2:12:31:17:99:2a:9f:57:25:f2:0e:
f1:af:cd:ad:d1:6d:ec:d2:b4:48:78:f9:88:fa:07:
46:c9:a5:a8:ef:68:89:75:66:d9:d2:79:6f:35:5d:
08:11:14:fc:e8:d4:97:04:a1:6d:65:ed:6d:94:9b:
5b:a0:db:32:56:6f:fd:43:dc:00:1a:ae:ea:04:2b:
19:58:00:b3:3d:d5:e0:e0:a9:fb:89:20:b9:e9:bf:
8c:90:91:6f:51:35:98:9f:b8:68:5a:b5:0e:ba:5a:
1e:f6:81:53:3b:b1:f5:46:07:ec:13:24:a3:3e:74:
21:15:aa:45:47:48:81:70:fe:37:9f:70:86:99:b3:
12:f2:11:a6:74:00:e7:81:e8:1e:2b:fe:88:3f:a6:
d3:90:f5:dc:e4:61:f8:40:37:45:6e:67:82:0b:66:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A9:DF:41:96:C1:42:D6:8A:B4:84:82:0B:AC:5B:29:57:89:A0:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3d:1a:b5:b5:99:72:38:03:94:44:6d:23:6f:0a:a2:aa:68:
ce:ab:ff:75:23:b4:92:6e:ed:e0:6c:73:b3:62:30:7c:3f:bd:
58:c3:2b:9b:65:4f:94:41:12:21:d0:e3:cd:53:62:f2:95:a4:
50:17:9c:27:3d:3b:6a:4a:c1:f2:6d:a7:d4:fa:84:9c:22:da:
0b:c7:48:60:76:3e:83:27:52:88:24:70:22:bf:4f:3e:04:82:
7e:b3:a0:07:a2:56:b3:57:a9:13:71:57:f2:dc:d5:a1:b5:0a:
08:75:db:1f:c1:fc:35:a9:ac:18:18:5a:27:09:3c:cd:85:4a:
c6:a7:d2:14:dc:07:fc:0a:11:5b:2b:f6:a6:5e:02:f0:91:48:
1c:89:9c:87:d1:6a:77:f7:53:2f:91:26:c3:91:95:94:a7:e1:
27:23:b6:e3:5e:95:d5:9e:04:90:78:5f:58:41:e2:a6:58:e4:
d6:45:53:5b:00:11:3d:16:5f:b3:d1:af:38:0a:b1:a2:eb:02:
b5:1a:f1:b7:5f:5a:47:ab:a3:76:6d:4c:3a:2a:e6:57:21:f7:
ee:68:94:f5:06:91:61:7f:5a:2d:db:7b:3b:32:0c:5a:25:d1:
36:64:50:a3:20:24:e0:9a:82:f8:79:21:c6:1c:0a:25:39:18:
a8:08:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:55 2026 by rpki-client