Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233322e302f32312d3231203d3e203230333236.roa
File: 3231372e3231372e3233322e302f32312d3231203d3e203230333236.roa (raw, json)
Hash identifier: wQs+a7XDy3j/ktGs0XgL9+Yy/pQvx2fs2YfcUIJPIII=
Subject key identifier: 3F:6C:01:D2:11:0D:F5:99:E9:68:9F:36:6A:FF:AF:4C:B1:45:DC:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 01F18E3D28E588731A8060F4CE5D8B2E4780E9C3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233322e302f32312d3231203d3e203230333236.roa
Signing time: Wed 08 Apr 2026 12:33:35 +0000
ROA not before: Wed 08 Apr 2026 12:28:35 +0000
ROA not after: Wed 07 Apr 2027 12:33:35 +0000
asID: 20326
IP address blocks: 217.217.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f1:8e:3d:28:e5:88:73:1a:80:60:f4:ce:5d:8b:2e:47:80:e9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 8 12:28:35 2026 GMT
Not After : Apr 7 12:33:35 2027 GMT
Subject: CN=3F6C01D2110DF599E9689F366AFFAF4CB145DC5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:6f:7c:c6:0c:b0:c1:08:0d:14:5b:f3:8e:
ef:b6:8d:4f:62:d0:e3:77:2e:c3:48:ef:9c:c1:89:
6b:91:ca:7e:86:e7:9f:70:6a:dc:3d:52:6d:a1:60:
ef:d2:27:1c:bb:34:40:f6:ad:ab:d1:11:20:97:5e:
b0:d9:04:2c:6e:4e:01:d9:e4:60:a9:ca:d6:94:10:
0e:e1:dc:81:59:7e:44:c6:aa:dc:e3:e3:2d:fc:92:
60:30:d0:11:af:30:d4:5e:ef:6b:64:49:6a:ce:7f:
08:6b:76:3b:d5:97:9c:af:78:b0:1a:87:a9:91:66:
f1:eb:6e:5c:c7:73:3b:28:71:5c:39:aa:11:b4:b1:
1c:1b:a5:1f:82:46:89:40:d8:ae:0f:c5:63:d8:0c:
54:2f:d8:b7:79:f6:66:67:31:18:2c:e7:f2:ee:bd:
ed:c0:05:d7:b1:ef:84:ab:66:ab:31:f7:28:31:63:
7f:df:f9:db:30:b1:ba:78:42:c6:b9:29:5a:78:8d:
77:f1:f7:2d:f4:d0:c3:d1:6f:3e:39:43:a7:dc:92:
be:7a:b6:ac:f0:bc:7e:bf:06:8f:00:a9:72:cd:62:
09:f7:7d:ec:15:7e:66:79:28:8b:20:87:2e:91:e5:
05:98:56:c2:73:53:32:a1:a5:48:8d:2a:fd:e4:c5:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:01:D2:11:0D:F5:99:E9:68:9F:36:6A:FF:AF:4C:B1:45:DC:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3233322e302f32312d3231203d3e203230333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:92:79:0d:a9:1e:af:b4:a1:88:c9:0d:56:d5:0d:1c:7d:d8:
4d:24:37:4c:d9:0b:e8:ef:13:19:df:b8:fe:96:21:15:d2:b2:
6d:9f:f5:07:76:fc:d0:ee:87:a2:bf:66:6d:77:74:a8:3b:c6:
c8:a0:f6:77:a0:94:bf:4b:b2:d9:c4:86:33:27:87:61:59:51:
f8:b1:47:3d:9b:dd:01:21:85:89:2e:03:b5:e7:2c:80:d3:33:
64:33:70:da:05:a5:50:86:18:b4:f0:5d:67:86:81:76:b8:65:
5a:90:dd:e6:ec:62:bc:43:b3:67:6d:f4:e4:e1:b9:e3:ef:48:
52:36:eb:e2:0f:3d:86:8b:dd:39:f3:1f:87:6f:af:8e:0e:19:
4e:59:61:9f:f0:02:61:68:52:54:70:ea:88:af:26:41:2e:45:
74:8a:65:56:85:1a:62:36:f1:84:a4:f0:96:16:03:c8:20:d8:
22:72:7b:47:bd:45:72:84:d0:3c:f2:29:f0:16:73:ef:d6:fc:
59:fb:19:14:1f:4a:5d:07:11:d1:88:17:7f:13:a6:dd:e2:c6:
57:44:22:49:01:6e:ea:91:4e:93:dd:a5:a4:dc:1e:ca:d9:3c:
9b:46:24:63:1b:45:ce:67:b7:79:c8:34:c3:ab:48:7f:b5:29:
23:80:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:36:37 2026 by rpki-client