Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e203630353432.roa
File: 3231372e3231372e3139322e302f32342d3234203d3e203630353432.roa (raw, json)
Hash identifier: g3wYHyW1jGSLLVLVngqEAe5UpXREK55wlb8An27Suyg=
Subject key identifier: 49:29:6E:28:82:55:B4:C5:0C:0B:48:98:FE:EA:31:9D:55:6B:D4:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D45315A433BB3B626BFFFFDE74060FB1AF259AE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e203630353432.roa
Signing time: Mon 07 Sep 2026 06:55:26 +0000
ROA not before: Mon 07 Sep 2026 06:50:26 +0000
ROA not after: Mon 06 Sep 2027 06:55:26 +0000
asID: 60542
IP address blocks: 217.217.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:45:31:5a:43:3b:b3:b6:26:bf:ff:fd:e7:40:60:fb:1a:f2:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 06:50:26 2026 GMT
Not After : Sep 6 06:55:26 2027 GMT
Subject: CN=49296E288255B4C50C0B4898FEEA319D556BD494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:17:d5:40:6e:83:f9:82:f3:e6:4f:29:39:
14:36:d3:b3:e8:52:c7:2f:16:d1:02:ee:8c:e1:64:
e4:2c:4f:7b:a2:a6:32:25:57:0d:a3:36:45:8f:57:
09:a4:dd:6f:ee:2e:36:79:2e:e4:d1:8e:32:77:1b:
fb:bb:a6:de:e3:2a:73:3f:d1:5b:59:53:1a:35:be:
c0:d9:d1:bd:f5:4e:09:65:3b:35:9f:d7:a6:72:50:
b0:5c:9b:35:56:a7:a4:e2:c3:e1:ed:f7:78:38:9b:
92:c2:8f:b0:5b:ef:fc:ef:0f:30:a1:35:0e:8c:cc:
8f:9d:59:55:15:8b:c8:a1:01:98:2d:4d:e1:cc:1d:
0d:d8:23:10:c0:e5:a0:5b:c4:e0:b7:2b:d5:5d:5c:
22:bc:94:58:50:62:41:75:df:19:e0:56:1b:51:0a:
ca:09:c5:23:e3:66:72:82:43:6d:cb:2e:d4:7c:9e:
2c:12:12:91:3c:3f:78:8e:9e:fb:8a:96:96:86:d6:
ac:62:bc:92:54:ab:06:16:72:97:9d:8a:1d:fb:bf:
1d:3b:01:29:f6:78:a5:aa:5e:24:e7:a3:3c:44:1e:
98:74:b7:16:8d:e2:38:1d:58:68:62:01:eb:f4:bf:
03:ff:66:d5:99:bb:d6:1a:35:d2:e4:57:91:fc:0b:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:6E:28:82:55:B4:C5:0C:0B:48:98:FE:EA:31:9D:55:6B:D4:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139322e302f32342d3234203d3e203630353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:df:42:dc:c5:9b:20:1a:57:c4:f3:19:06:06:78:c4:7a:d7:
d5:1c:8a:9a:c9:77:b5:99:ce:be:c4:4a:11:aa:2b:78:3f:c9:
01:8d:ea:9c:a4:bf:2d:f3:12:70:a5:47:f1:a9:d0:da:07:eb:
fc:c1:6c:08:00:8f:47:d4:fb:12:c3:66:73:8e:eb:3f:9e:fa:
f4:fc:bf:ba:6a:34:82:05:7d:f3:c8:24:a3:0b:7a:dd:bb:e6:
b5:a5:f9:39:1d:e0:0f:6e:6b:0f:68:72:4d:23:5f:55:e1:44:
38:0c:f5:a3:aa:c9:a2:a2:50:56:1a:71:1a:13:25:16:13:76:
9e:2f:a8:89:42:ce:31:f7:8e:a1:a6:66:e0:38:db:e6:75:25:
09:07:89:21:b2:f8:c0:3a:52:97:53:8a:97:f8:7f:5a:3e:9d:
22:52:6b:08:2a:79:77:42:b1:e4:1c:ea:80:e0:2a:b9:98:6f:
86:a3:b6:7a:60:35:b4:56:d6:ba:e1:d6:07:f7:ee:63:09:bd:
b7:7a:d0:fb:fc:a3:b0:87:e6:38:08:c8:72:11:41:ad:c2:89:
12:a3:50:df:82:36:8c:60:fa:03:06:a4:30:71:a5:e6:70:6c:
fb:8b:70:c1:aa:62:6f:eb:5d:40:c5:58:96:bc:d8:3f:84:f4:
c5:d5:55:a5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXUUxWkM7s7Ymv//950Bg+xryWa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDcwNjUwMjZaFw0yNzA5MDYwNjU1MjZaMDMxMTAvBgNV
BAMTKDQ5Mjk2RTI4ODI1NUI0QzUwQzBCNDg5OEZFRUEzMTlENTU2QkQ0OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbwxfVQG6D+YLz5k8pORQ207Po
UscvFtEC7ozhZOQsT3uipjIlVw2jNkWPVwmk3W/uLjZ5LuTRjjJ3G/u7pt7jKnM/
0VtZUxo1vsDZ0b31TgllOzWf16ZyULBcmzVWp6Tiw+Ht93g4m5LCj7Bb7/zvDzCh
NQ6MzI+dWVUVi8ihAZgtTeHMHQ3YIxDA5aBbxOC3K9VdXCK8lFhQYkF13xngVhtR
CsoJxSPjZnKCQ23LLtR8niwSEpE8P3iOnvuKlpaG1qxivJJUqwYWcpedih37vx07
ASn2eKWqXiTnozxEHph0txaN4jgdWGhiAev0vwP/ZtWZu9YaNdLkV5H8C7rzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSSluKIJVtMUMC0iY/uoxnVVr1JQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNTM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2cAwDQYJKoZIhvcNAQELBQADggEBAE3fQtzFmyAaV8TzGQYGeMR619UciprJ
d7WZzr7EShGqK3g/yQGN6pykvy3zEnClR/Gp0NoH6/zBbAgAj0fU+xLDZnOO6z+e
+vT8v7pqNIIFffPIJKMLet275rWl+Tkd4A9uaw9ock0jX1XhRDgM9aOqyaKiUFYa
cRoTJRYTdp4vqIlCzjH3jqGmZuA42+Z1JQkHiSGy+MA6UpdTipf4f1o+nSJSawgq
eXdCseQc6oDgKrmYb4ajtnpgNbRW1rrh1gf37mMJvbd60Pv8o7CH5jgIyHIRQa3C
iRKjUN+CNoxg+gMGpDBxpeZwbPuLcMGqYm/rXUDFWJa82D+E9MXVVaU=
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:38 2026 by rpki-client