Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e203232373733.roa
File: 3231372e3231372e32302e302f32322d3234203d3e203232373733.roa (raw, json)
Hash identifier: cR5tuBbzJxeBofhALl4fElUz508gpZXme7kFKxhvenc=
Subject key identifier: B5:C1:CF:6F:2C:1B:AB:71:E5:C7:15:68:90:D0:39:50:D3:42:77:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 64E246892D52AE4B10D9A343A1FD70289483E65F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e203232373733.roa
Signing time: Fri 27 Mar 2026 13:51:13 +0000
ROA not before: Fri 27 Mar 2026 13:46:13 +0000
ROA not after: Fri 26 Mar 2027 13:51:13 +0000
asID: 22773
IP address blocks: 217.217.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 02:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e2:46:89:2d:52:ae:4b:10:d9:a3:43:a1:fd:70:28:94:83:e6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 13:46:13 2026 GMT
Not After : Mar 26 13:51:13 2027 GMT
Subject: CN=B5C1CF6F2C1BAB71E5C7156890D03950D3427727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:05:00:ca:c6:8c:a8:2d:ba:de:ae:cd:cf:
cc:48:5a:ec:c0:a5:d9:cf:ca:af:1d:e2:71:67:81:
0a:aa:c1:02:39:38:e2:5e:2c:f3:5a:08:c9:5c:db:
cc:e0:33:b0:d3:4f:53:94:7f:0c:6c:b8:80:8b:ae:
74:28:ec:2d:8d:cb:cb:90:da:8e:aa:12:bb:49:92:
5d:3d:4e:d3:27:5c:5f:f3:5a:1b:66:10:e2:80:b6:
22:f6:02:a1:6e:78:38:7b:48:bc:ee:32:fc:22:a2:
51:2b:e8:fc:05:3a:a3:e7:cc:87:4d:dc:07:e5:c7:
85:74:86:d0:ef:7f:26:8f:7b:d7:18:be:58:6c:85:
17:48:18:3c:f9:73:a1:33:95:8e:78:84:01:7f:48:
a5:34:e3:9e:a1:9d:ac:78:90:63:2d:da:b6:c4:61:
f0:98:91:0e:e6:34:13:a9:a1:d2:41:8b:ac:bd:df:
fd:c9:33:45:59:be:a1:e0:75:90:1c:c7:67:3d:fa:
85:e0:94:f2:25:2e:28:39:0d:7a:cc:08:7d:18:46:
3f:fa:70:7b:89:1c:6a:99:f1:ef:53:92:db:56:f6:
2e:0a:f1:43:ba:a5:8b:51:90:b2:09:e8:b8:8d:9d:
55:5d:f0:c2:c6:0a:fb:61:61:71:2d:35:ec:28:e2:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:CF:6F:2C:1B:AB:71:E5:C7:15:68:90:D0:39:50:D3:42:77:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.20.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ac:43:5b:be:83:8a:55:c2:24:8e:77:d4:35:6c:de:99:2b:
4a:f8:d3:2c:42:85:27:ff:71:b1:8c:e7:f0:33:0b:09:85:58:
af:ed:36:91:d2:17:dd:2a:3c:2c:17:73:10:a6:6d:ee:b7:1e:
d4:35:dc:58:44:56:f1:cf:1d:dc:a8:f2:e9:50:42:3c:92:2d:
50:9b:76:fe:33:27:33:a1:b7:67:11:c5:4d:c0:ce:36:5a:a2:
16:71:9a:6a:fb:6c:64:ad:86:dd:38:2a:27:5a:52:b7:3d:5c:
b8:e1:db:e4:6d:31:0f:62:e0:74:93:2d:8f:2f:c2:4a:78:c0:
61:61:19:c0:5a:c3:50:f2:d6:e1:24:17:0f:66:78:01:7f:34:
89:11:07:4b:51:8d:fb:e8:40:4c:cb:6d:c1:26:fb:16:8a:87:
7b:98:f7:76:cc:fd:5a:b2:20:5d:ab:1a:bb:bc:f1:b5:a1:d2:
3a:39:c4:58:d0:a9:86:de:2c:99:14:1d:9a:94:45:6c:af:86:
76:94:f5:ee:81:c8:df:54:75:64:67:7d:78:64:11:53:0b:11:
f2:3b:98:f8:7c:42:e2:ff:6e:13:00:94:7e:6a:f9:83:e5:50:
2e:28:a5:32:e7:b1:2e:d4:63:5f:23:f8:74:17:7f:8c:13:6b:
44:13:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:42 2026 by rpki-client