Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3136302e302f32312d3234203d3e20383334.roa
File: 3231372e3231372e3136302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: tK1oGQzgPF0FgiCmRAu1/5m8269q+MOVK8c1CMth5WY=
Subject key identifier: A3:18:14:CD:0D:47:98:56:9A:2B:C8:AD:E4:3E:E5:DC:60:18:F6:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5544027707B70E3FD5FDD54C1BAB92BAAC108FC5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3136302e302f32312d3234203d3e20383334.roa
Signing time: Sat 24 Oct 2026 07:03:42 +0000
ROA not before: Sat 24 Oct 2026 06:58:42 +0000
ROA not after: Sat 23 Oct 2027 07:03:42 +0000
asID: 834
IP address blocks: 217.217.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:44:02:77:07:b7:0e:3f:d5:fd:d5:4c:1b:ab:92:ba:ac:10:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 06:58:42 2026 GMT
Not After : Oct 23 07:03:42 2027 GMT
Subject: CN=A31814CD0D4798569A2BC8ADE43EE5DC6018F638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:61:46:cc:da:d4:1f:52:ff:5e:42:5d:cb:30:
8f:c4:11:87:e8:f2:f7:f9:58:2a:3a:a0:69:7b:c1:
38:e2:28:74:21:dd:06:ab:1c:fc:0f:4b:d7:8a:4e:
4c:64:84:8c:ec:84:43:5d:b4:c5:c7:0c:84:fd:77:
b1:45:a6:7f:6b:22:73:83:00:03:28:60:2e:de:4e:
b7:1c:a6:d6:b1:77:fe:52:c7:2b:93:07:15:38:8d:
ce:3d:eb:77:10:f2:af:0e:88:b8:cf:96:cc:b7:60:
da:16:da:19:5b:ec:37:31:78:d0:73:8d:d3:3e:3a:
be:c0:bd:25:b9:70:fd:5c:f7:68:18:36:e9:ec:01:
93:ec:bf:c9:08:79:a8:c4:4e:5b:98:1d:4c:2a:44:
a4:0d:3d:a3:08:a8:b5:41:33:53:61:d6:4f:2d:5e:
80:8b:37:e2:93:af:21:7b:8a:c0:ff:6a:a7:39:93:
9d:9e:23:69:cb:65:ca:2a:4a:c1:ba:c8:63:f3:1b:
ad:0f:63:28:f0:f7:59:6c:ec:16:99:33:9c:35:e2:
23:10:73:7e:77:20:be:12:39:85:e9:8e:d9:2f:34:
36:a2:c1:6e:ed:96:6b:a9:5a:64:4b:f2:59:29:a1:
22:b6:73:98:25:26:c9:4d:48:f0:52:43:14:50:72:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:14:CD:0D:47:98:56:9A:2B:C8:AD:E4:3E:E5:DC:60:18:F6:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3136302e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:87:15:d3:0d:de:01:92:83:5d:dc:35:18:d3:4c:7b:23:e9:
19:2e:05:f1:c7:70:1c:6a:74:ef:79:ed:70:e5:8e:5c:07:41:
62:3c:db:e6:99:bb:fd:6f:17:a6:f9:cd:95:5d:48:19:f1:27:
c0:87:c4:c1:d2:9c:d1:4c:e3:94:da:cb:34:45:f6:08:fc:76:
18:62:d9:95:f3:08:27:3e:68:fb:66:3d:a0:02:c4:c5:c8:c6:
6c:8a:f4:d5:4f:dc:0b:fc:3a:85:3e:16:ee:88:c7:f5:e3:22:
70:d6:5f:67:ad:95:f0:2a:b9:8f:1c:ff:6e:54:28:ab:b5:e7:
01:c4:64:0b:bd:c2:57:b3:41:ad:33:af:65:b1:f6:43:08:5a:
f4:aa:f1:6d:a2:94:49:c4:8d:ac:cc:25:83:65:03:c9:1b:0f:
73:9f:e3:ec:a8:03:f5:0b:7f:5d:6c:a2:f9:15:c4:32:32:a4:
41:80:e1:a3:6b:3b:ba:e8:e5:92:57:01:8f:42:c7:b8:07:ac:
5c:fa:98:13:27:e1:d5:08:0f:b9:f9:7c:60:09:62:ad:09:2a:
fa:8e:ea:9b:ea:10:2b:af:0d:60:4e:60:93:12:8f:21:38:29:
02:4d:5c:34:7d:b2:46:bf:83:bb:10:7f:a3:b9:48:92:bd:9b:
63:60:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:01:12 2026 by rpki-client