Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e20313532353233.roa
File: 3231372e3231372e3231332e302f32342d3234203d3e20313532353233.roa (raw, json)
Hash identifier: Gj4gD1hSaOtVHuZtNwVZGxMFpSntZL+7lOQGmwyTEtU=
Subject key identifier: E8:04:5A:2D:F5:E9:13:5D:13:A1:2D:23:88:55:D3:74:A5:76:BA:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61390BC3AAD7CC6876D2CFFB99E4F8158F810A94
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e20313532353233.roa
Signing time: Thu 08 Oct 2026 11:35:01 +0000
ROA not before: Thu 08 Oct 2026 11:30:01 +0000
ROA not after: Thu 07 Oct 2027 11:35:01 +0000
asID: 152523
IP address blocks: 217.217.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:39:0b:c3:aa:d7:cc:68:76:d2:cf:fb:99:e4:f8:15:8f:81:0a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 8 11:30:01 2026 GMT
Not After : Oct 7 11:35:01 2027 GMT
Subject: CN=E8045A2DF5E9135D13A12D238855D374A576BAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:92:44:c5:57:a9:54:ab:93:0d:fd:42:fd:
87:7d:14:fc:3d:7f:dd:de:e6:8f:2f:c7:78:cf:96:
18:b8:0b:2b:71:15:1f:ad:d5:b1:ab:3b:5b:ac:5c:
4d:5c:19:a2:ed:6e:d4:ce:b0:db:c6:6a:22:8d:1e:
d6:f5:26:f1:46:6d:c5:09:3e:93:e0:e1:ad:94:06:
94:a2:57:18:30:c2:e6:0b:92:39:6c:6d:93:0e:f0:
ef:e7:78:ea:a8:3b:12:6d:1a:20:ae:93:ae:b9:b3:
bf:03:51:3c:87:93:57:08:d2:85:b4:07:2a:79:47:
cc:55:85:33:46:2c:40:bf:b5:f3:82:9e:04:8a:3c:
7b:a4:cd:d3:40:24:cd:4a:e3:fb:cf:d7:42:92:cf:
83:b8:6b:9e:24:1c:20:d1:1d:88:b9:16:aa:be:76:
e0:cb:94:aa:ce:50:17:4d:9e:85:98:41:94:dd:21:
0c:77:f5:23:b6:cb:1e:ec:bb:ed:ac:8b:00:a8:f7:
8a:12:4a:3b:ef:57:d7:a5:c6:6b:48:74:c8:c5:59:
f3:1d:eb:fc:22:09:44:b7:14:31:99:05:a9:f6:5d:
91:92:27:d0:78:55:de:d6:f0:27:04:e8:eb:4c:71:
82:ac:b6:0d:73:4f:0a:fe:f0:18:31:37:79:ef:6d:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:5A:2D:F5:E9:13:5D:13:A1:2D:23:88:55:D3:74:A5:76:BA:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e20313532353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.213.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b1:ec:9a:67:aa:e3:0b:f9:be:e1:48:a9:5f:1c:67:b9:ef:
25:98:57:49:e5:69:65:5f:71:cc:d9:11:37:c6:25:62:6f:46:
fa:16:e2:ca:33:6e:a6:38:b8:51:07:68:8f:7a:02:02:ef:04:
66:ff:a7:49:5f:23:7e:7c:ec:62:34:31:4a:2d:79:a5:6c:67:
91:ad:45:ec:29:16:e5:00:07:b1:7c:cd:a8:38:7e:bc:d8:96:
f8:2d:5f:1b:df:cd:22:20:f7:09:c9:22:d3:03:cd:87:92:9b:
44:8b:eb:c4:28:ce:00:33:75:2b:af:1f:1f:26:a9:32:75:6c:
38:75:4d:e6:ce:a7:58:e8:e9:52:92:6f:c1:99:a5:d8:27:f6:
48:e8:34:2c:71:d1:24:74:c9:e7:07:b1:c3:e1:c9:d8:41:a7:
a4:df:71:8f:74:f7:83:71:8f:70:6c:24:44:ea:93:cb:cc:cc:
70:92:a2:c3:d0:3e:22:37:a5:9e:6b:74:55:51:ec:a9:c9:c8:
a4:9e:88:71:ec:a0:ba:21:be:48:78:da:78:1b:81:75:df:d1:
95:8f:d6:e7:12:15:15:99:5d:3e:a4:c6:f7:32:d0:63:58:44:
8e:4d:72:17:f7:dd:ba:5e:93:23:00:7b:90:f3:49:ea:f1:06:
af:1d:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:17 2026 by rpki-client