Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e2037303239.roa
File: 3231372e3231372e3134342e302f32302d3234203d3e2037303239.roa (raw, json)
Hash identifier: wD/CEvcMCCtP/7in5a6F2pGr3SU7yQQ4sVZ35VFH9fY=
Subject key identifier: 26:4B:1A:3E:55:95:F3:BD:E9:B7:94:96:CE:D6:9D:D5:99:A7:7E:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17FCF0ACF50AF597A70216D315A745DBCBA8FCFF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e2037303239.roa
Signing time: Sat 11 Jul 2026 09:09:05 +0000
ROA not before: Sat 11 Jul 2026 09:04:05 +0000
ROA not after: Sat 10 Jul 2027 09:09:05 +0000
asID: 7029
IP address blocks: 217.217.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fc:f0:ac:f5:0a:f5:97:a7:02:16:d3:15:a7:45:db:cb:a8:fc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:04:05 2026 GMT
Not After : Jul 10 09:09:05 2027 GMT
Subject: CN=264B1A3E5595F3BDE9B79496CED69DD599A77E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:c2:a2:ba:87:a7:a7:03:12:71:3e:1d:67:
69:62:ed:84:b5:38:9c:71:0d:4b:ea:51:ec:21:57:
72:e1:d4:89:fb:43:68:50:85:dc:51:1c:25:b0:32:
ef:55:f0:83:85:10:eb:8c:25:a8:2e:44:15:49:f7:
80:10:f6:4d:54:9c:0b:3b:1d:4d:43:be:8e:af:fd:
a3:7d:47:71:7c:3d:7a:4b:b0:d9:d8:bf:90:2e:c4:
75:24:49:23:c8:a4:5a:9e:37:bd:8a:44:7f:90:93:
b4:9c:4a:46:30:25:a1:f6:b4:4c:9f:a7:b3:eb:98:
d6:2a:a8:e9:62:83:19:2b:5a:a9:93:8f:39:ec:1d:
11:3a:2e:ed:07:cf:c0:66:a7:6b:a7:6b:a8:e2:0d:
f8:5e:a8:51:a2:1d:4a:49:38:1a:31:70:eb:1c:b5:
10:74:15:3f:17:22:40:2c:73:a5:8a:5d:95:01:9c:
bf:49:81:c3:dd:91:7a:1c:5c:79:eb:d2:3a:0b:a0:
66:c0:dd:df:76:d1:a4:a3:1b:23:42:9f:d7:fa:b6:
24:d7:53:2f:9d:2d:90:a7:cf:d3:db:38:bd:81:c4:
48:2a:da:e8:2c:9a:a9:62:67:f8:9d:d4:84:ad:48:
26:0a:0f:06:2a:23:f6:13:2e:e1:0b:59:ee:33:f1:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:1A:3E:55:95:F3:BD:E9:B7:94:96:CE:D6:9D:D5:99:A7:7E:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:4c:24:cc:11:9a:8b:e7:be:68:0d:43:0b:f0:bc:67:60:0d:
b8:ca:09:a2:ec:c3:03:b7:66:b3:a3:88:f1:04:ee:57:a8:c5:
63:b9:e9:bc:f4:15:28:89:30:47:ea:7b:39:70:41:c6:dc:b1:
cc:62:6a:ea:d1:82:6c:e5:76:6e:08:21:fa:25:1b:8f:90:78:
68:ac:c2:32:dc:1d:e2:b9:a8:44:30:1f:c5:78:35:17:61:36:
ee:e0:4e:e5:5d:b1:17:2c:5b:b3:31:43:03:ea:90:d2:4b:a4:
91:7d:ae:9f:b8:98:f0:66:3a:aa:e3:24:bf:61:88:fd:d5:cd:
b2:e1:40:9f:5c:ab:6e:25:f2:93:db:5e:c3:00:99:44:18:5b:
96:3a:b8:7c:41:ac:aa:59:4b:29:bd:94:d4:00:81:75:9f:54:
4f:96:14:e4:3a:1f:ae:09:e0:33:a1:be:75:ee:26:c3:36:cd:
bc:b3:3d:d8:78:f0:37:e0:76:40:6e:d4:92:99:89:54:4e:be:
16:04:67:58:38:d7:84:65:c2:2a:9c:05:25:cf:c0:e3:ec:b5:
e4:56:a7:dd:c4:35:67:15:b5:0b:a3:8b:bb:da:6a:e0:eb:26:
cd:9a:8d:0f:72:bf:02:63:27:ca:ea:b5:d4:f3:12:39:56:37:
22:67:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:32 2026 by rpki-client