Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e3138302e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: 26lI+CEFf2rW7QCBH2eYKuFzNVn7QRifHnp6vwCfHbI=
Subject key identifier: 7C:28:A4:FB:80:D2:3F:18:E6:F3:84:3D:FD:A0:6B:48:A1:48:8B:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37A61CEE9BDA6B3C456BE9760F038442A7C81315
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e2037303239.roa
Signing time: Sat 11 Jul 2026 09:09:19 +0000
ROA not before: Sat 11 Jul 2026 09:04:19 +0000
ROA not after: Sat 10 Jul 2027 09:09:19 +0000
asID: 7029
IP address blocks: 217.217.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a6:1c:ee:9b:da:6b:3c:45:6b:e9:76:0f:03:84:42:a7:c8:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:04:19 2026 GMT
Not After : Jul 10 09:09:19 2027 GMT
Subject: CN=7C28A4FB80D23F18E6F3843DFDA06B48A1488B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:e0:f7:84:8e:f7:22:4f:6d:88:e5:86:53:
04:a4:85:76:40:cd:6c:bf:16:2b:9f:a3:23:24:ed:
39:c6:09:6b:e8:54:f0:ec:62:5a:2f:d4:a3:06:b4:
06:90:94:c4:41:ca:f4:80:20:18:e4:a7:f8:91:b8:
a0:a0:22:b3:29:3e:a3:5f:83:99:ea:ab:00:ea:87:
b3:02:b9:21:79:8f:9d:1a:e4:9e:31:af:f1:f9:f5:
37:5e:eb:e8:96:17:06:53:8e:af:f1:c4:83:8f:c8:
39:c4:a6:4d:31:4d:f2:a8:2c:34:12:9d:e6:66:98:
91:bc:68:7c:2e:53:4c:50:28:43:5c:55:05:46:d5:
9e:8a:eb:49:c0:0a:21:31:8a:c7:87:08:00:c6:4d:
f7:2a:1f:0a:c1:f2:bf:54:6d:a0:19:76:c0:ea:aa:
90:03:92:d8:cb:d4:70:f4:4e:96:a4:52:b0:23:f5:
47:a5:aa:fe:61:7b:d0:bd:b4:4d:5f:07:21:0f:33:
85:87:39:a1:e8:a0:84:f9:20:df:c1:5c:c1:71:35:
11:f8:8c:26:f1:69:2c:56:5b:a7:c6:62:e5:10:cf:
a2:cb:b0:37:7c:19:c4:c3:76:8d:6b:7e:5a:22:a1:
27:a0:ec:13:ea:d5:4f:48:9a:82:98:44:8e:c1:f4:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:A4:FB:80:D2:3F:18:E6:F3:84:3D:FD:A0:6B:48:A1:48:8B:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3138302e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:56:1c:9b:d8:df:0e:ca:e8:69:98:20:ff:69:8b:60:e1:2c:
d4:a9:b1:72:19:c0:7b:0c:d1:e6:f6:b2:c0:59:0d:1e:55:85:
83:db:80:37:a7:9d:3c:5b:4f:19:4c:e5:c0:4b:c6:1c:89:6a:
08:02:c0:34:87:46:7f:91:a0:57:0c:a0:66:29:02:e6:fe:c1:
2e:16:f6:c7:5b:01:8f:7b:f2:15:7e:30:d3:8d:b4:9f:f2:f5:
77:e4:e6:08:86:3a:96:b0:d0:e5:88:46:55:46:ca:fb:24:5f:
50:3c:c4:fc:86:c6:cc:1f:b3:4e:fb:5f:72:a5:94:70:1c:03:
52:12:24:b4:b5:a8:5e:2f:af:3f:e1:14:d3:bd:af:29:37:97:
48:1b:59:1e:d7:7f:19:60:4d:18:1f:df:67:d1:2d:6c:58:ef:
cb:35:1a:98:b3:7f:d5:95:76:44:15:43:d9:b0:ed:c4:8a:27:
c4:df:ef:0e:84:36:80:3a:a9:be:69:81:f6:50:e8:8f:eb:1c:
3b:40:b2:40:bd:f8:c2:a0:4b:6c:74:6c:b6:b9:c8:0b:9c:7f:
f5:5b:d9:ac:c5:4b:c3:27:81:29:74:23:15:70:3a:8c:d4:2c:
33:d1:39:65:1a:af:d2:aa:8c:8c:50:e0:93:58:3a:ce:20:10:
fb:1e:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client