Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KUvGK2/OD9eWJqyGXwZA+p4NUd/fl1h1l11Hm3Beerg=
Subject key identifier: BD:9E:9D:04:56:AF:E9:19:84:64:A2:06:F7:8E:15:AB:85:52:AD:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FFCCE94F8CB0B9F15BB6BC9CB6E69214AB17256
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:07 +0000
ROA not before: Fri 28 Aug 2026 11:31:07 +0000
ROA not after: Fri 27 Aug 2027 11:36:07 +0000
asID: 834
IP address blocks: 217.217.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fc:ce:94:f8:cb:0b:9f:15:bb:6b:c9:cb:6e:69:21:4a:b1:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:07 2026 GMT
Not After : Aug 27 11:36:07 2027 GMT
Subject: CN=BD9E9D0456AFE9198464A206F78E15AB8552AD93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:fe:ff:7a:55:19:1f:7f:58:f0:5e:0d:52:
fb:4b:72:25:37:21:97:cc:1f:94:21:b9:27:89:9d:
cc:c9:d6:10:de:0e:d1:e1:e2:29:74:5f:36:03:5b:
eb:8d:53:c8:a5:51:81:f9:2e:57:45:f8:71:b5:c9:
b0:65:9f:be:20:21:2f:39:1e:b5:63:85:d9:1e:c7:
85:68:e4:95:b9:5e:56:c1:3e:94:4a:ef:95:b9:0b:
01:c8:3c:e3:d7:93:c7:e7:8c:67:b5:8e:7c:07:4e:
6c:ca:00:1a:66:05:e3:1f:2e:13:c1:5e:7c:08:c7:
08:90:71:f0:db:f7:d8:7f:42:22:37:e0:17:35:3e:
b0:1b:7d:91:05:ec:de:20:4c:d0:58:f3:e8:d3:e1:
44:11:d8:d2:39:c8:62:c1:10:61:9d:40:22:54:9f:
ff:a6:ac:0c:c5:c0:a6:7b:b3:7b:6d:4c:30:d7:b7:
b9:10:66:b1:e7:ef:c7:56:35:72:41:d6:55:b2:60:
f0:2a:fd:91:f2:0e:6b:fb:14:a3:fe:6b:17:ce:e8:
43:c1:8e:39:74:2e:f9:1f:b0:bc:3b:e6:d2:b8:8c:
82:2f:eb:f6:b3:73:87:64:8c:6e:23:a0:6f:cd:ad:
5c:4f:ae:f2:4e:04:69:49:33:63:19:b8:a2:9c:65:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:9D:04:56:AF:E9:19:84:64:A2:06:F7:8E:15:AB:85:52:AD:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:56:69:5c:39:72:c8:82:38:e8:1b:91:dc:55:94:d6:01:52:
11:0b:48:1c:ce:cc:e9:94:21:87:4a:13:38:c4:ee:27:ef:fc:
68:a4:8e:d0:f1:8c:5a:01:a1:25:a9:b0:a3:cc:61:d1:b6:3e:
a6:63:06:94:86:5c:c6:0d:af:41:c8:02:3c:22:6e:e9:3a:2e:
27:d4:f5:a3:23:72:20:d3:b2:40:b6:32:b1:04:5b:b6:cc:46:
53:36:8a:0f:fe:bc:5d:03:9b:0e:43:76:e1:12:71:60:12:0e:
33:06:7c:d7:2e:97:3f:4d:72:50:fb:71:66:39:02:b7:6e:d9:
b0:4c:f2:fe:a0:d9:29:81:7a:33:5d:3b:a6:3b:ee:6a:9c:49:
f4:62:53:47:90:ce:16:9f:37:d7:39:54:98:bd:53:f0:81:a5:
1e:9b:78:4d:b1:fd:3d:a8:84:31:b6:e6:52:42:e9:4a:90:4a:
c8:27:7a:5b:12:a1:f8:08:ef:c3:16:af:9e:ab:4d:97:59:08:
b2:d9:11:e6:75:f6:df:14:71:d1:66:02:9f:50:d1:23:27:d8:
2b:9e:c2:61:a6:36:05:40:79:a1:dd:4b:9b:d5:af:70:77:4a:
f9:c5:e7:8f:02:1d:50:c2:6d:00:1c:44:c3:7a:14:d7:f0:cd:
e2:9d:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:28 2026 by rpki-client