Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e203136353039.roa
File: 3231372e3231372e3232332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: SI0G/N72N9002RdjATw5wubvcxml8mFNBXkD6A1l+pc=
Subject key identifier: 05:45:FE:06:CC:B7:D9:F8:F8:7E:B8:25:0A:34:86:0C:50:75:C2:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24F70C822156B7442E1B0B0A104C5E836ADA79C8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e203136353039.roa
Signing time: Sun 16 Aug 2026 21:36:09 +0000
ROA not before: Sun 16 Aug 2026 21:31:09 +0000
ROA not after: Sun 15 Aug 2027 21:36:09 +0000
asID: 16509
IP address blocks: 217.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f7:0c:82:21:56:b7:44:2e:1b:0b:0a:10:4c:5e:83:6a:da:79:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 16 21:31:09 2026 GMT
Not After : Aug 15 21:36:09 2027 GMT
Subject: CN=0545FE06CCB7D9F8F87EB8250A34860C5075C27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:b9:86:fa:aa:ec:55:fe:f5:b2:9d:3e:ee:
f0:d4:16:e6:dd:01:08:15:a5:62:9c:ec:c2:55:14:
7d:36:11:cc:96:9d:f2:4f:b7:c6:62:b7:89:97:08:
db:0c:41:ba:82:61:88:13:21:54:5b:b3:ef:79:44:
d0:39:82:29:79:8a:70:78:dd:f4:82:de:2c:a3:b7:
22:c0:1a:20:01:c2:03:9f:c3:3e:da:61:00:23:00:
41:a2:1d:b8:74:a5:9b:8a:85:bf:a8:fc:57:a4:64:
3c:56:67:0e:46:99:3b:be:17:77:be:4a:30:69:6c:
a6:b0:06:2f:d7:86:cc:3d:d9:82:37:e7:94:9b:2f:
0f:9d:4c:12:4b:eb:1a:da:a3:30:73:e9:d6:c5:7f:
76:29:9c:3e:b1:8a:9b:4a:9b:9a:7b:e3:70:59:2b:
dd:04:fa:87:02:ea:94:72:a7:c1:40:77:8a:af:df:
68:31:7c:a7:8e:7d:dc:1a:a6:9b:48:e7:88:cd:46:
29:e0:4a:4e:2e:a9:ef:5d:da:fa:75:dc:d2:a7:b5:
49:d4:0d:85:48:57:cb:50:45:c0:19:88:60:b1:e2:
ea:62:d2:5a:ee:79:64:06:ae:a2:55:07:8d:83:1d:
1f:bb:cf:12:bc:6f:8c:0e:ce:6e:9d:a8:60:b4:4c:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:FE:06:CC:B7:D9:F8:F8:7E:B8:25:0A:34:86:0C:50:75:C2:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:24:7d:37:05:c5:3f:28:a8:b8:ce:91:5d:34:3f:00:96:16:
1d:a4:35:93:30:1f:77:e8:7a:13:98:e4:f6:96:92:cb:40:90:
62:57:18:6d:c3:89:6b:c6:9c:11:b3:bc:18:82:ed:c3:e8:1a:
c6:c2:be:c1:1f:dd:e3:55:1a:48:78:ec:93:c3:f0:bb:39:06:
81:c1:6d:26:d8:e2:cb:ae:84:68:2c:ea:e3:c2:6e:24:03:9a:
78:8c:cc:52:04:35:79:be:84:2c:26:a5:d7:3f:a4:ec:25:40:
05:1c:6b:64:a8:ac:92:0e:dc:bf:13:2c:9b:81:10:2c:57:bd:
01:f1:0c:48:ab:5a:e9:2d:d1:9f:61:28:3f:86:60:f2:c3:33:
a7:b7:cd:b9:f1:19:9d:98:5d:0b:1c:bc:18:3a:9b:a8:4b:a1:
7c:00:1b:3b:a1:5e:7e:90:f2:79:a9:18:e1:a4:92:e1:2f:e8:
bf:92:27:01:43:47:ae:c6:32:c5:cb:a3:9e:3e:39:d2:8d:f4:
26:17:1a:44:f5:1f:9c:ef:fc:24:82:e0:97:86:89:a4:fe:40:
e3:96:6c:58:f0:c0:3e:78:0f:85:0b:1f:b0:22:9d:b2:66:df:
47:24:eb:84:c4:cb:2c:9f:73:ea:32:c4:be:e5:be:9d:71:db:
04:e6:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:44 2026 by rpki-client