Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: x/fZqMVVMZW4K9z7yycE67MYbcRJuzBBfYDpzeiukLQ=
Subject key identifier: 42:80:A0:76:C1:0E:CA:9D:22:44:E3:0F:C1:26:39:89:12:D7:8F:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 188E3F273ADA37748ECBFF7E2AD91D0378BAA2E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Aug 2026 07:59:49 +0000
ROA not before: Thu 27 Aug 2026 07:54:49 +0000
ROA not after: Thu 26 Aug 2027 07:59:49 +0000
asID: 834
IP address blocks: 217.217.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8e:3f:27:3a:da:37:74:8e:cb:ff:7e:2a:d9:1d:03:78:ba:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 07:54:49 2026 GMT
Not After : Aug 26 07:59:49 2027 GMT
Subject: CN=4280A076C10ECA9D2244E30FC126398912D78FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:07:38:4b:a9:4d:71:c1:d9:bd:c9:93:bc:
02:f1:a6:de:81:10:a2:78:e3:a2:ff:55:68:56:59:
0a:58:50:45:0c:f9:42:44:22:f5:ef:89:f8:2c:ab:
6e:94:66:20:20:ce:31:00:0a:83:8e:c3:a6:12:c9:
e9:e4:3e:8b:8e:fa:75:0d:9b:db:ae:8b:33:fe:67:
29:b2:fa:7d:73:ce:cc:ea:16:83:dd:8b:54:f8:0b:
7d:fb:25:95:0c:83:5f:c4:b7:df:95:c0:9d:42:25:
bb:99:49:4a:03:a7:cc:5e:4c:29:f8:c9:6a:44:d6:
54:01:eb:5d:2a:c0:a3:20:04:5e:29:91:07:d4:43:
bb:b7:52:5d:26:61:21:50:07:f7:56:25:c3:77:ee:
39:57:9c:0d:db:55:64:90:8e:2b:eb:c3:06:ae:4d:
ea:1d:8f:95:8a:87:4c:be:3d:22:d7:86:7f:38:26:
85:73:35:57:10:63:81:4f:df:5d:c3:76:05:14:25:
49:8d:de:f5:c9:af:a3:43:60:07:19:0a:9d:35:8e:
fb:43:a6:f2:ac:c5:46:17:31:7d:2c:8e:f6:ac:e9:
7f:e7:08:b7:5c:92:b7:b9:59:1d:6a:ef:08:15:78:
02:c8:4a:a4:03:8a:e2:f8:27:c2:06:ff:5c:61:c8:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:A0:76:C1:0E:CA:9D:22:44:E3:0F:C1:26:39:89:12:D7:8F:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:59:a3:0b:3a:1e:fe:28:b2:7f:55:6b:5a:a4:4d:e0:8b:e6:
13:10:8c:17:2b:9b:25:30:ad:ae:2d:f7:5c:74:a3:80:1e:9a:
48:5e:3e:41:8c:43:2d:2e:29:19:ac:c2:ba:eb:1a:9c:3a:ff:
3e:8f:44:e3:d1:0b:a3:1f:ff:38:2f:b8:20:b9:7b:47:57:7f:
82:47:7b:2c:d5:4e:88:cd:cd:73:99:d9:d6:3f:00:52:bc:88:
36:fd:00:e3:62:3e:74:33:31:c5:37:7f:4c:a8:d7:25:30:8a:
6e:d9:fc:cc:aa:b7:e9:68:c9:68:52:17:d4:80:ad:b9:32:f1:
9b:c9:69:b8:9d:c0:70:eb:0f:e9:13:9f:ab:81:6e:d4:e9:d2:
8b:60:c6:cf:78:56:0b:59:5b:6f:de:aa:2a:eb:59:02:0d:97:
83:ec:fc:6b:ac:77:e3:9d:7f:ce:f3:63:56:86:38:54:12:63:
b5:c6:98:12:e5:22:8f:3b:88:09:64:6e:f0:f4:6b:be:9f:38:
40:fc:a4:17:57:03:c5:1d:7e:f6:49:12:e7:ce:25:4e:77:cc:
0f:dd:48:3f:37:b8:2a:d1:b9:ce:e6:6f:e3:fe:b9:7a:61:27:
0e:b0:40:a8:fb:03:4b:70:57:21:c4:fb:9e:93:51:8e:0e:e7:
79:95:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:31 2026 by rpki-client