Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232342e302f32342d3234203d3e20313938373533.roa
File: 3231372e3231372e3232342e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: 3OSuLqkAPneHVvKXuTVj9XIrT11oCel7iAAoyo0aPSU=
Subject key identifier: 32:5F:05:2F:D7:76:C0:2E:7B:AC:C5:A8:83:00:97:C5:CC:1D:10:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22B235BB0E4EF8D7F8AFB626A34F8ACF1BCC4676
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232342e302f32342d3234203d3e20313938373533.roa
Signing time: Wed 02 Sep 2026 14:20:05 +0000
ROA not before: Wed 02 Sep 2026 14:15:05 +0000
ROA not after: Wed 01 Sep 2027 14:20:05 +0000
asID: 198753
IP address blocks: 217.217.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:35:bb:0e:4e:f8:d7:f8:af:b6:26:a3:4f:8a:cf:1b:cc:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:15:05 2026 GMT
Not After : Sep 1 14:20:05 2027 GMT
Subject: CN=325F052FD776C02E7BACC5A8830097C5CC1D10B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:1d:14:fa:e8:92:6c:45:11:d9:1f:13:8d:
8b:f5:20:e1:5d:0f:c9:cc:a9:e4:54:4e:39:08:dd:
02:28:04:ef:c3:68:9d:62:b9:64:ab:b6:52:9f:3a:
1f:8d:9f:27:48:03:36:2e:24:aa:99:50:63:6b:27:
cf:82:97:93:c2:ca:3f:12:7f:cf:63:b0:05:a1:09:
f2:e6:9f:45:05:3b:66:24:6f:ff:3a:d8:59:3f:5f:
e8:1e:c4:df:61:82:e6:b0:69:36:a9:9b:6f:0b:09:
11:7d:ba:7f:4a:95:07:3d:41:db:32:01:ff:9d:08:
65:2a:bc:ae:7a:4e:f9:3d:3f:e8:83:22:80:0d:10:
5f:d6:30:e3:e2:e5:22:37:50:00:26:8d:62:91:de:
31:f6:b5:be:2f:e6:e2:93:29:7a:75:b6:b5:87:bb:
4f:ba:f3:98:65:47:81:28:20:33:0f:17:e9:1e:fc:
23:2d:93:eb:4f:5b:4d:7e:6f:0f:70:07:61:a0:3d:
aa:06:97:5b:cd:39:5a:79:97:89:71:51:3e:a0:8f:
6d:97:6c:43:f2:f8:3e:a2:c2:f1:4d:95:47:0d:e3:
2a:47:ea:73:9a:73:24:38:7b:88:8a:9e:22:5b:78:
75:b7:a3:45:83:e7:9e:64:9d:25:00:1d:d8:5c:38:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5F:05:2F:D7:76:C0:2E:7B:AC:C5:A8:83:00:97:C5:CC:1D:10:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232342e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.224.0/24
Signature Algorithm: sha256WithRSAEncryption
63:52:87:9f:0d:2f:94:0c:cd:fa:d3:06:85:e5:e3:98:0f:28:
46:6f:a2:7d:15:39:c3:18:af:d6:34:99:cb:a3:1a:6d:4f:05:
ec:04:53:86:48:5f:47:0f:6a:8e:6c:20:1e:1e:d6:c0:52:0c:
1f:29:40:b7:4d:28:62:af:12:55:f6:cd:9d:44:2c:4c:8c:5d:
0a:7b:8f:28:9e:20:a4:37:ee:3e:70:cd:dd:bc:e2:93:fd:b3:
ce:1a:14:22:1c:70:02:8e:a3:c6:e6:b0:99:5b:75:11:40:b5:
c5:4d:11:13:ff:23:00:3c:38:5d:cf:19:53:00:d4:3b:68:41:
e4:02:97:96:0c:5b:2e:d9:d7:aa:1c:dd:cd:b5:8c:cd:b7:bd:
f4:c3:f4:9f:59:5f:cc:87:68:9a:9a:7e:0a:c9:a3:0e:43:6b:
bb:4a:04:63:75:66:10:cf:09:30:a6:45:9b:1b:ce:df:11:44:
c3:22:65:14:a4:36:02:e5:84:c6:9a:dc:62:ee:4a:b3:7a:f8:
47:d6:66:09:d3:51:a5:9d:6e:99:0d:0f:f4:10:f7:cb:08:4d:
43:4f:46:b8:31:cd:61:66:18:87:6e:36:6f:40:53:3a:83:10:
bc:1c:24:af:30:35:11:ab:b5:34:4f:60:cf:6c:77:fd:6b:27:
7e:98:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:24 2026 by rpki-client