Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232342e302f32312d3234203d3e20383334.roa
File: 3231372e3231372e3232342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: l7lUzN9J424Lm4xlFgOsfksjMR0gZC+jVMuv5vM1V1k=
Subject key identifier: FA:5A:D5:B1:AB:75:AC:AF:6E:2C:77:0C:E9:33:07:B6:53:54:62:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16D1BB42311698DBBD3C75F83DCA7C38FCEE2AFD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232342e302f32312d3234203d3e20383334.roa
Signing time: Sun 09 Aug 2026 18:50:03 +0000
ROA not before: Sun 09 Aug 2026 18:45:03 +0000
ROA not after: Sun 08 Aug 2027 18:50:03 +0000
asID: 834
IP address blocks: 217.217.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d1:bb:42:31:16:98:db:bd:3c:75:f8:3d:ca:7c:38:fc:ee:2a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 9 18:45:03 2026 GMT
Not After : Aug 8 18:50:03 2027 GMT
Subject: CN=FA5AD5B1AB75ACAF6E2C770CE93307B653546246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:3b:b8:ff:1a:ff:fe:ea:ff:11:31:0d:78:
be:7b:cb:5e:2d:0c:0d:83:b8:07:a0:3b:02:64:0c:
c2:08:38:15:5f:bf:46:ff:13:b5:27:90:6e:17:d3:
6f:0b:2d:92:51:1c:21:11:46:e9:51:46:5a:11:2b:
b5:7f:3f:9a:30:26:35:e8:4c:fc:30:2b:9d:6a:f9:
6e:e8:7c:cd:75:3e:6b:37:df:48:3a:f3:b6:57:a0:
0b:a5:a1:96:e8:13:e4:6d:a3:d3:e8:3c:97:10:cf:
70:53:5e:31:ec:e8:2d:49:89:15:17:b3:7b:64:e1:
84:91:af:11:12:4f:42:d2:d7:14:1f:35:e7:91:50:
f4:9e:8d:7b:69:a3:ae:7f:3e:f8:1b:e7:4c:8b:55:
69:07:04:16:60:65:cd:c8:d0:10:ed:b7:d7:53:10:
b6:39:77:30:21:a3:cc:3e:f8:05:22:a2:b5:34:4c:
33:f6:8e:ba:ab:b7:e1:2e:1c:8e:c1:f6:1f:bc:48:
af:a0:59:e6:c4:10:09:ea:35:a7:82:c4:58:3d:d3:
16:c4:bd:93:e4:7f:43:d9:25:2b:89:b3:b9:af:11:
36:b8:09:05:90:52:00:9e:95:94:b0:d8:37:1c:79:
c3:53:ea:fd:ac:61:f5:fe:44:d9:25:27:d3:34:ad:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:D5:B1:AB:75:AC:AF:6E:2C:77:0C:E9:33:07:B6:53:54:62:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:05:eb:cc:10:2c:fa:40:a3:eb:cc:59:d9:ed:62:c0:56:2d:
a3:53:e6:54:3c:51:1d:08:a9:c2:97:b9:b4:0f:03:ac:99:33:
ef:d6:85:0d:fd:f2:e3:75:72:77:ba:fa:d4:2b:9a:3e:b5:a8:
89:fa:1a:e1:9c:b8:c3:56:a8:09:94:de:59:8e:0e:b1:03:76:
00:ea:74:97:3e:e9:98:a6:cf:61:e1:78:38:57:1f:71:b2:fa:
9f:dd:ef:73:a1:d1:93:4b:6d:2a:f3:e1:eb:35:b7:04:a7:e4:
b4:f4:07:86:5e:f1:7d:5e:21:7f:7d:06:51:f4:51:37:c0:5d:
89:0a:b4:5e:c6:d7:f4:da:5d:da:b3:26:f4:06:e1:d3:ba:b7:
d0:b7:3c:b2:c5:84:23:83:0e:e7:cd:85:c7:b0:f1:2d:7a:cc:
36:24:b9:73:23:2f:8c:3e:3b:27:99:b8:b7:4a:0e:48:fc:7f:
16:3e:ab:6f:9f:c1:91:9b:c0:79:73:5c:6a:97:15:00:30:3f:
63:05:74:db:d6:b8:4f:03:df:32:5c:a8:89:de:d3:1a:26:00:
ec:0c:40:7c:43:25:03:da:76:be:02:80:4a:22:91:32:c6:13:
46:42:38:60:eb:3b:36:13:d9:1d:7c:5e:38:b4:f1:4f:49:bb:
e2:5f:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:58 2026 by rpki-client