Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e203132303833.roa
File: 3231372e3231372e3138302e302f32322d3234203d3e203132303833.roa (raw, json)
Hash identifier: UPD5jGjLNpeFWC3qcRrydo4NYP9UH85jtPkiDtlMXJ0=
Subject key identifier: 89:C7:AB:13:82:DF:33:20:29:9D:1F:70:82:39:E3:32:48:D8:97:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2CA69CC725F5973329EA2C71A67D651FE37BC32E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:48:27 +0000
ROA not before: Fri 10 Jul 2026 22:43:27 +0000
ROA not after: Fri 09 Jul 2027 22:48:27 +0000
asID: 12083
IP address blocks: 217.217.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a6:9c:c7:25:f5:97:33:29:ea:2c:71:a6:7d:65:1f:e3:7b:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:43:27 2026 GMT
Not After : Jul 9 22:48:27 2027 GMT
Subject: CN=89C7AB1382DF3320299D1F708239E33248D897C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:8d:eb:43:4f:53:f4:dc:35:09:ff:0c:70:
5a:01:ae:73:8c:a4:e7:8d:a4:10:ac:86:c4:62:59:
97:ab:bc:ae:2f:45:97:a9:70:d0:a5:aa:e5:db:ca:
07:19:4a:c1:be:db:e1:fd:55:12:d2:af:76:ca:b0:
f6:29:80:d9:ea:09:05:a0:6b:22:49:cc:fd:35:b7:
92:3a:a6:cd:e4:94:cf:45:35:cf:a9:44:31:ef:9a:
d4:68:8a:27:8a:c0:bb:dc:3a:62:91:1d:eb:8a:7e:
ac:ec:8f:17:01:ca:d0:ea:13:af:73:7e:46:ec:b9:
e2:55:18:40:64:a9:a8:c5:b9:c8:44:1b:3b:6e:f1:
d2:46:28:92:7f:b6:63:0e:f2:c4:5d:e4:18:87:f8:
46:f2:c1:51:70:4f:28:ef:2b:e7:84:57:ad:42:47:
cf:d9:b7:49:79:d4:ff:83:65:58:7b:45:24:bf:88:
bd:7b:e8:c7:a4:63:60:b3:1b:43:a0:67:ff:2d:c9:
a1:0f:d1:ce:2b:b7:04:b0:24:ac:ee:5c:1b:0d:c0:
a5:62:19:c7:89:dd:ad:0b:94:66:2a:2b:d5:c2:f1:
55:5c:30:fa:a3:91:b2:d4:3c:23:03:3e:09:f4:c1:
b9:3e:7e:89:09:50:ac:83:37:36:cd:f7:0a:1b:75:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:AB:13:82:DF:33:20:29:9D:1F:70:82:39:E3:32:48:D8:97:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
62:d8:b6:c9:19:0a:5e:eb:d3:97:77:fd:cc:46:1a:ae:04:71:
5d:e5:37:30:66:1c:36:54:8a:b5:df:25:2f:04:de:56:47:6b:
c3:ef:ea:19:27:fc:78:51:96:ed:5a:1c:96:6f:bb:82:f2:b9:
e4:7b:11:34:de:1c:15:25:d9:d4:a5:0d:46:76:b0:39:64:66:
ff:b2:db:0e:1b:92:74:80:9e:5c:bb:2c:7c:e3:a3:46:2a:32:
2b:ea:4c:2b:2e:0d:72:36:ea:ea:40:99:6a:6f:7c:f9:6c:56:
e8:86:f5:5b:86:d5:2b:4a:22:39:b1:af:06:8d:66:e1:8b:f7:
2d:4c:2c:43:c5:39:93:41:d6:f1:a3:72:56:bf:05:45:8c:99:
6c:5f:54:d3:fa:31:19:95:38:bc:49:f2:2a:7f:55:ed:b5:b6:
bf:30:10:ff:80:a8:20:1c:5a:ff:87:66:3f:39:de:e8:6f:cd:
91:7f:19:10:a4:c7:12:2f:7a:62:f7:25:26:fc:e6:b6:4d:fd:
21:49:17:6d:74:3b:18:c8:ab:1e:94:1f:3c:8e:17:7c:a1:10:
34:c5:19:f2:e2:cf:b6:b3:2a:f1:14:90:e3:ce:8a:22:d3:1c:
e3:25:1a:11:8a:41:4b:23:6e:ef:46:2f:55:72:9d:a7:20:1d:
56:84:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:47 2026 by rpki-client