Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e203133333437.roa
File: 3231372e3231372e3134342e302f32302d3234203d3e203133333437.roa (raw, json)
Hash identifier: QZcadN5NZVvbQJ8IPg6HH8NjImeGgebeeEaXIFR59Ks=
Subject key identifier: FA:1A:85:E8:BC:E6:E7:44:F9:14:0C:19:64:5E:83:3A:2E:81:7E:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 115DFCA0D021D5489AE222F3D0C1B7E42905216E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e203133333437.roa
Signing time: Sat 11 Jul 2026 09:14:41 +0000
ROA not before: Sat 11 Jul 2026 09:09:41 +0000
ROA not after: Sat 10 Jul 2027 09:14:41 +0000
asID: 13347
IP address blocks: 217.217.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5d:fc:a0:d0:21:d5:48:9a:e2:22:f3:d0:c1:b7:e4:29:05:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:09:41 2026 GMT
Not After : Jul 10 09:14:41 2027 GMT
Subject: CN=FA1A85E8BCE6E744F9140C19645E833A2E817EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:7c:c9:05:0d:70:a9:a9:82:89:6c:30:67:
18:13:b6:1e:1e:f9:29:cd:9d:60:71:3a:da:12:9d:
80:1a:e0:89:57:7b:f9:29:ea:e1:9e:48:d3:fd:4a:
cd:5f:c6:83:90:dd:ea:e9:70:f4:08:f8:69:b7:3c:
fd:fa:ea:7d:8d:bd:85:b0:67:d4:61:8e:54:ba:1a:
88:4b:bb:94:9b:57:8c:57:e0:18:f5:32:8f:c7:c7:
92:f5:c7:5c:47:d1:5b:a5:42:65:2a:64:29:ca:f6:
fa:83:88:ae:4a:95:42:b5:2f:ff:9c:1f:97:94:c5:
e8:89:23:56:b0:79:4f:14:ca:8c:fb:a6:70:7c:5e:
22:98:f9:cc:0f:dd:b9:8b:06:2a:ff:4d:9d:86:4d:
6c:c8:34:48:6f:ca:7d:b7:04:41:25:bd:7b:91:e2:
2c:8c:19:92:af:65:02:2b:20:3f:e9:67:a5:a8:a6:
fd:b1:9a:cf:74:42:30:d1:6d:49:4c:07:e1:be:d7:
d2:75:d0:1a:b5:2d:eb:08:38:04:48:0b:f7:62:58:
5c:8b:e3:72:46:06:ce:4b:4d:9a:e3:24:57:94:2e:
19:70:07:1d:3f:5c:12:03:36:03:80:7c:0f:86:9a:
6e:3f:83:1a:88:12:7c:18:d2:ea:60:b8:ca:0f:9a:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:85:E8:BC:E6:E7:44:F9:14:0C:19:64:5E:83:3A:2E:81:7E:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.144.0/20
Signature Algorithm: sha256WithRSAEncryption
50:6f:4d:b7:3e:7e:2c:d5:b8:5b:3c:1c:58:04:d4:f0:b0:40:
01:ce:a9:08:34:66:c1:00:41:7e:6c:c8:0c:80:07:4d:e2:ff:
f7:e0:18:81:12:de:fa:b0:af:e3:db:db:21:20:19:f3:4d:4b:
30:74:8b:98:3b:b9:90:d5:25:63:5f:68:78:4a:92:02:ca:ba:
56:9a:86:19:33:37:25:8c:be:25:4b:bc:2b:dc:ae:a5:1e:3e:
bb:b4:b4:38:5e:61:42:bf:18:ba:a3:f9:db:f6:03:99:cf:4a:
eb:c0:d9:d9:47:1d:c2:e1:d1:27:f7:fe:3c:c4:86:f6:da:2e:
c1:cf:f2:cf:5d:e2:22:a7:2b:14:b3:b0:3f:41:53:80:b2:9d:
5c:bb:7d:9c:00:76:06:aa:a6:2a:2e:97:ee:64:70:ca:36:12:
cd:50:97:18:02:44:56:e8:f4:63:5f:a4:7a:b2:6a:10:71:49:
ef:ca:2a:62:e1:43:21:37:16:9c:71:1b:9a:88:dd:9f:44:6d:
01:d6:d5:21:68:a1:71:77:0c:e3:06:97:e9:f4:c3:e0:bb:b9:
d8:3b:28:34:9a:ed:0c:50:4d:ee:4b:62:47:b5:6c:9a:4c:1d:
e0:3e:3a:9e:43:3f:8d:28:75:8f:55:61:03:5d:d7:09:fd:f3:
2d:f7:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client