Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9b8sZx8PzhrUq0ZbOYdgdj3gI/31NEMdIlOvhOfY+qA=
Subject key identifier: 43:45:88:C8:9A:61:FC:97:3A:78:18:E2:40:20:93:91:10:92:4D:B9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0383864DBA243746A65B60F3B4FE89BBBF86C35B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e20383334.roa
Signing time: Thu 27 Aug 2026 07:59:52 +0000
ROA not before: Thu 27 Aug 2026 07:54:52 +0000
ROA not after: Thu 26 Aug 2027 07:59:52 +0000
asID: 834
IP address blocks: 217.217.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:83:86:4d:ba:24:37:46:a6:5b:60:f3:b4:fe:89:bb:bf:86:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 07:54:52 2026 GMT
Not After : Aug 26 07:59:52 2027 GMT
Subject: CN=434588C89A61FC973A7818E24020939110924DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:54:fb:45:2b:81:99:86:f1:da:50:23:77:
4b:f8:13:c4:55:45:a7:67:f8:cc:b2:25:b5:91:74:
96:82:63:72:0f:cf:70:5e:bb:22:22:c9:b3:9a:16:
39:c2:eb:b0:41:99:76:3b:70:b1:c4:16:68:73:3f:
1f:7a:47:18:53:c2:2b:f7:3e:7d:87:1d:ce:9c:6f:
d0:96:2d:5e:5f:88:50:83:78:e7:a0:06:63:62:5b:
01:c9:db:52:78:de:0e:ba:94:55:53:e0:e9:06:5f:
49:83:0d:c7:f4:72:c9:ef:5b:47:1b:f1:d1:cf:1d:
4f:85:04:dc:3a:4f:a9:85:df:46:29:de:a7:c9:19:
51:06:bf:8a:48:d2:70:83:ac:07:06:f0:4e:ee:a3:
2d:db:9b:01:aa:02:2f:83:db:5b:fe:d0:6d:4b:a6:
f4:6c:16:33:3c:f4:0f:5d:38:ea:6a:5a:10:15:6e:
e2:6a:89:8e:eb:d6:30:77:5b:0e:1c:34:d2:db:fa:
4a:7e:8b:9a:05:f4:c5:2d:4d:a1:ba:74:67:32:ca:
ff:70:81:e7:9e:fd:4a:49:13:09:4b:0b:3f:6b:e9:
6c:55:22:a2:05:89:f7:3b:9b:5e:9d:a9:86:18:85:
94:93:27:9c:21:b0:50:78:e0:26:1c:b0:06:7f:10:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:45:88:C8:9A:61:FC:97:3A:78:18:E2:40:20:93:91:10:92:4D:B9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.199.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a8:fb:cd:90:d2:6d:b1:3d:2f:24:3f:c6:06:39:99:36:04:
4f:c3:ac:59:ff:50:07:54:b4:0f:b8:06:a2:c9:c6:b1:80:97:
b4:80:e2:a4:c1:a3:2f:9c:9c:1c:1d:e7:0a:ce:55:2b:0a:01:
81:f5:f3:d3:0b:f7:2e:e9:69:b4:11:e9:6c:ea:c6:eb:a7:3c:
4e:64:1a:99:eb:bd:7c:a8:2a:a3:4d:96:3b:89:1a:28:dc:fc:
b5:1f:04:4b:89:7d:22:fb:06:e6:5a:11:9a:34:00:2d:8a:92:
0c:4e:45:ce:21:68:f0:50:90:a3:18:7e:f1:c7:c9:d8:3f:19:
34:b9:1a:46:88:85:4e:b8:a3:d3:d2:8e:2d:8b:49:de:50:f0:
eb:40:b6:48:bc:2a:1b:f0:35:0a:de:be:38:50:bf:43:49:5f:
21:31:c2:c8:33:93:76:9b:a6:e2:ca:53:82:de:53:71:4c:1f:
6d:f0:0d:b8:c9:3f:7a:65:86:cd:f1:a6:e7:58:20:70:e8:9c:
bf:86:f2:3b:ea:b6:72:82:a2:a2:02:72:af:d2:f0:18:2d:1e:
f2:bb:b3:a7:db:9c:26:4b:14:ff:9e:dd:d7:cd:63:88:0a:0c:
e2:27:77:05:78:ec:6b:51:6b:dc:12:5d:1d:64:ba:97:8c:b6:
df:15:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:38 2026 by rpki-client