Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130372e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3130372e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: P61+VANxwnsZjvmEbVea4800iA4yCAGHwczOrXee9Oc=
Subject key identifier: B8:2E:39:02:90:70:29:04:8F:05:A0:7F:A6:AB:C2:AC:7F:DE:4B:C1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0548C3633CCC81061E0EF59C6F2CEF84F31FBE2A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130372e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:07 +0000
ROA not before: Fri 03 Jul 2026 21:39:07 +0000
ROA not after: Fri 02 Jul 2027 21:44:07 +0000
asID: 216253
IP address blocks: 217.217.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:48:c3:63:3c:cc:81:06:1e:0e:f5:9c:6f:2c:ef:84:f3:1f:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:07 2026 GMT
Not After : Jul 2 21:44:07 2027 GMT
Subject: CN=B82E3902907029048F05A07FA6ABC2AC7FDE4BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:22:da:69:c0:43:ac:5b:50:11:01:fa:99:
d9:8c:18:8b:60:aa:76:0c:72:c0:d1:74:39:27:1a:
eb:da:c4:0f:1d:e3:6d:23:47:1c:ca:5d:1e:ed:d7:
a4:8b:a0:b8:1a:e5:0d:ab:c7:0b:c6:c3:07:43:7a:
25:0c:f0:3e:a2:bc:19:73:85:dc:d5:30:a1:35:8a:
1d:7d:71:0e:88:79:1d:ef:6d:3e:09:d0:f3:12:a8:
98:5b:02:94:0b:56:b0:72:8b:8d:f3:64:7d:7e:87:
92:75:ef:05:22:93:4a:62:19:94:4d:39:97:93:41:
c7:d7:1b:a8:d7:a0:a1:f5:b3:22:e4:2c:47:f7:f4:
17:b3:a9:05:6b:73:e0:f9:a8:8c:03:f4:b0:35:03:
29:03:60:5d:8c:1d:ce:5a:a6:42:34:99:57:e4:d8:
a7:ce:cb:c1:96:c6:e4:45:d2:76:82:8e:57:3d:98:
ad:f0:7d:49:d3:c4:f0:b4:08:92:f1:de:f3:50:2e:
b7:c2:91:02:1b:02:f1:dc:59:fa:7a:a7:75:3d:d6:
46:56:40:8e:a0:fa:7e:46:a5:83:9d:9d:0f:57:30:
7a:ad:05:e2:6d:7a:a7:b6:0d:fc:79:a4:12:b9:97:
c2:92:aa:62:75:7e:06:0c:d5:1b:e8:cc:07:00:78:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:39:02:90:70:29:04:8F:05:A0:7F:A6:AB:C2:AC:7F:DE:4B:C1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130372e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.107.0/24
Signature Algorithm: sha256WithRSAEncryption
77:26:ff:ed:a5:f9:a7:0a:44:ef:39:1d:8f:56:fe:95:f0:7e:
2a:d2:49:32:74:fd:4c:98:bc:5c:c0:fe:b5:b8:f3:42:0a:42:
a3:29:58:22:f5:dd:43:db:89:80:bc:45:7f:01:ba:c1:0c:09:
a7:3d:e5:e4:b9:de:80:94:5b:de:d0:95:b8:62:64:6d:8e:44:
c0:b3:25:ba:e1:46:b6:b1:f9:cc:dc:3d:42:5d:25:f9:47:cc:
9a:22:21:fe:4e:81:a1:e0:c5:ca:0f:46:76:df:a0:d2:66:0a:
fe:5e:10:ef:3b:89:83:c7:6b:80:0f:d0:ff:7a:6e:b3:44:cb:
e4:e9:e4:ed:09:7f:0d:7f:58:a1:3b:85:29:7a:11:a1:c3:65:
77:6a:02:89:41:c0:70:00:8b:f4:6f:40:b2:0a:1d:64:23:5e:
2f:56:68:aa:a8:1c:72:3f:92:c8:0d:29:ee:b5:47:04:03:98:
89:cb:bf:63:d6:1f:88:e8:52:ac:23:b7:3b:a9:62:8f:b9:61:
26:ae:b7:34:eb:0c:33:9c:09:22:8b:01:ba:e2:51:fb:27:71:
d1:34:80:0a:3a:6f:ac:8b:49:dd:fd:ab:92:6d:aa:c1:1d:a4:
e4:b8:00:c4:e8:cb:9b:b9:a9:67:2c:fa:cd:e1:60:76:86:b8:
27:11:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:46 2026 by rpki-client