Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130352e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3130352e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: CYglhspxCwEiSRDawxM3jt3ZVEdyMgxOcsP7i9XwAMg=
Subject key identifier: DA:C2:EA:87:E4:EC:A4:DA:21:63:74:A9:8D:EC:2C:D7:9B:0D:4A:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36AB8AA65A9D8EE6D3924A2923B2E55472B7C6D5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130352e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:03 +0000
ROA not before: Fri 03 Jul 2026 21:39:03 +0000
ROA not after: Fri 02 Jul 2027 21:44:03 +0000
asID: 216253
IP address blocks: 217.217.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ab:8a:a6:5a:9d:8e:e6:d3:92:4a:29:23:b2:e5:54:72:b7:c6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:03 2026 GMT
Not After : Jul 2 21:44:03 2027 GMT
Subject: CN=DAC2EA87E4ECA4DA216374A98DEC2CD79B0D4A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:0c:f8:80:93:6d:77:01:7a:0d:ca:12:da:
a0:3e:08:22:a3:3e:1c:76:5b:e0:55:7d:db:bf:94:
af:8b:c9:f1:52:a4:bf:18:55:f6:45:3e:f6:fb:73:
57:64:97:b0:91:91:a2:e3:8d:fb:00:dd:58:ce:19:
09:1c:ed:02:1a:9a:2a:67:32:31:f8:16:eb:5e:e1:
f7:6f:14:3b:2c:e2:3d:a1:aa:ad:80:13:15:71:6e:
92:1e:7f:4b:a6:59:68:aa:dc:37:c1:64:4c:ce:02:
6e:97:a0:9d:0a:c6:1f:11:a5:56:ec:f8:bc:f7:83:
1d:2a:7b:cd:79:af:d5:8f:f6:01:f3:4d:2d:f4:93:
c4:80:50:fd:58:7a:72:4b:6d:ad:dc:cc:43:11:13:
9f:40:1d:d4:3a:89:35:e1:15:46:e3:c3:e3:fe:2a:
b0:19:87:16:0e:cf:b3:2c:68:2c:85:e0:7a:4a:be:
24:ff:91:86:60:e9:cf:0a:87:1f:71:9e:c7:e7:39:
04:45:6b:ca:21:b1:c9:f0:23:29:84:eb:c8:58:56:
87:f0:4d:ac:43:d6:12:55:3a:fd:5b:07:31:59:00:
89:a1:18:12:65:22:bf:b6:4f:55:74:33:6c:3f:28:
7f:16:53:7e:d4:0d:5e:c2:d1:8c:38:8f:f2:b1:c7:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:EA:87:E4:EC:A4:DA:21:63:74:A9:8D:EC:2C:D7:9B:0D:4A:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130352e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.105.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e1:14:a4:a7:e2:5d:b8:7d:ba:e1:21:0f:12:e3:e2:1a:43:
95:75:ab:33:8f:ed:7b:d1:88:5a:8f:a0:9b:3c:0d:fd:c6:8a:
30:9b:1a:c3:f0:32:c8:39:96:67:37:0f:3e:17:a3:82:64:2e:
f5:ce:31:d5:e7:8e:da:da:0f:7d:c4:e0:db:b4:20:df:5c:21:
2b:1d:b7:e0:eb:55:67:cf:e9:f1:df:25:ed:65:9e:ea:31:12:
8f:42:27:18:f0:08:47:50:85:0c:83:ca:a6:f0:a6:bc:00:86:
00:33:93:7f:a2:44:33:0e:9e:58:80:19:d5:67:25:27:e5:98:
ff:25:76:68:27:16:76:de:3d:c6:65:73:2c:f9:be:17:f9:17:
29:95:d5:ca:0d:c2:b6:75:52:31:e1:d2:93:46:d6:75:ef:30:
b7:fb:34:57:2a:57:04:a4:a9:ea:9a:f9:a9:a0:b5:57:3a:28:
03:7c:97:e4:bb:c9:68:d7:fc:38:df:13:04:66:8e:e8:ab:b0:
4a:2b:cd:07:1d:17:19:12:c4:29:a0:21:63:16:ee:d9:92:e8:
fe:fd:4e:ce:8f:a0:64:93:d8:bb:56:7e:85:e0:63:87:70:d9:
66:9e:2d:f8:2e:8d:a3:cc:ee:ee:6e:75:3b:c2:af:0d:d4:05:
c3:2a:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:46 2026 by rpki-client