Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130302e302f32342d3234203d3e20313938373533.roa
File: 3231372e3231372e3130302e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: /XlWJRtvGXBnhnode2smeSAqxmzKSVZL4duOd5Xc2zc=
Subject key identifier: 70:CB:81:D4:CB:8C:D2:24:AC:B2:C2:46:D9:6C:61:C6:63:AA:6B:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A62063FA7F421C133B4AA6CD97893812704E338
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130302e302f32342d3234203d3e20313938373533.roa
Signing time: Thu 27 Aug 2026 18:42:22 +0000
ROA not before: Thu 27 Aug 2026 18:37:22 +0000
ROA not after: Thu 26 Aug 2027 18:42:22 +0000
asID: 198753
IP address blocks: 217.217.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:62:06:3f:a7:f4:21:c1:33:b4:aa:6c:d9:78:93:81:27:04:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 18:37:22 2026 GMT
Not After : Aug 26 18:42:22 2027 GMT
Subject: CN=70CB81D4CB8CD224ACB2C246D96C61C663AA6BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:2c:ac:e9:53:8a:84:4c:9f:1f:54:4d:d6:
b4:f0:e2:eb:d4:b9:30:b1:dd:9b:25:c1:28:71:58:
65:da:99:45:7c:c0:d1:81:7c:76:b0:ec:48:a8:e1:
69:f8:98:05:e3:45:28:84:aa:a0:35:06:ee:3d:31:
fa:81:b5:1d:73:9e:b6:c9:1e:27:24:37:6f:0f:90:
1c:ac:a6:31:f6:29:52:d1:fa:a4:44:b4:f3:a1:57:
77:64:4c:8a:7a:fe:e5:8e:fe:71:47:db:66:82:c2:
04:10:33:59:2f:1a:27:41:55:c3:1e:c8:02:f0:9f:
1f:b3:85:73:c9:a1:fb:e6:67:f0:06:1b:e2:6c:db:
d7:7c:3f:9f:fb:e0:09:d9:7a:86:86:b3:6c:c6:a6:
75:79:fc:df:54:f3:4b:dc:96:70:7f:11:8b:a3:5e:
2b:dd:a0:b7:58:42:d4:01:3d:b4:2b:c1:d0:29:69:
5b:dd:5c:74:f6:1a:80:4f:db:13:d6:4b:8e:ed:80:
74:32:6a:97:95:5a:0a:ce:e8:be:8e:02:0b:76:88:
b1:9a:76:8d:8c:88:78:34:98:17:d1:90:74:7d:d6:
b6:be:83:73:6c:06:63:e3:b4:13:7d:e5:5d:62:8d:
7e:74:c7:87:7e:f1:79:42:8e:7f:02:d7:44:bc:b4:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:81:D4:CB:8C:D2:24:AC:B2:C2:46:D9:6C:61:C6:63:AA:6B:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130302e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.100.0/24
Signature Algorithm: sha256WithRSAEncryption
77:51:eb:ba:2a:1d:45:1f:21:86:d8:56:88:04:98:07:f8:a0:
36:3c:d7:cf:70:9e:df:38:80:12:61:a1:b3:52:23:11:2d:70:
1a:91:45:55:00:1f:e2:c1:00:5b:75:29:71:c1:f7:eb:18:31:
89:22:00:4d:a9:9d:70:82:50:20:c3:cc:76:fd:8a:cc:01:63:
85:54:82:2e:ba:58:8f:80:5b:c9:3a:7b:20:09:54:18:39:d9:
ba:87:94:44:6d:ce:0c:d4:5b:5a:20:21:83:3b:36:71:89:c5:
1a:a2:80:d9:6a:6d:85:7d:9e:2e:1a:82:57:78:29:22:c0:75:
74:34:07:9c:e2:8f:c2:2d:0a:5c:6c:0c:21:67:06:e6:c6:c3:
0f:e6:8f:c3:bb:4e:d4:da:c2:a6:92:0b:96:71:cc:03:4e:1a:
78:19:4b:c4:4d:36:09:49:27:e6:fc:55:65:b8:e9:a7:f0:71:
0b:eb:c5:f2:c9:bc:ee:36:46:70:e4:4a:45:6b:9c:89:28:08:
62:af:b1:22:3e:47:44:dd:d7:b1:9a:40:6a:f6:aa:d0:ea:c2:
19:8d:73:9e:84:a0:0a:33:4a:d6:1b:c9:85:b3:b0:54:c2:4f:
58:00:67:9f:6d:44:29:69:57:73:87:51:4a:53:8b:5a:4e:e7:
c1:a1:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:41 2026 by rpki-client