Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234332e302f32342d3234203d3e20323134363737.roa
File: 3231372e3231372e3234332e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier: +2gAWF02cpNn8ppO7lpY87OzP0mobDw59JM6q6JFm28=
Subject key identifier: D2:DE:81:BA:70:DF:5D:90:16:4B:19:24:0D:02:08:37:C7:ED:08:06
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 077ADAB5F2C808E1C4B6DC054C0CDA4F017CC0BB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234332e302f32342d3234203d3e20323134363737.roa
Signing time: Mon 10 Aug 2026 16:27:48 +0000
ROA not before: Mon 10 Aug 2026 16:22:48 +0000
ROA not after: Mon 09 Aug 2027 16:27:48 +0000
asID: 214677
IP address blocks: 217.217.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7a:da:b5:f2:c8:08:e1:c4:b6:dc:05:4c:0c:da:4f:01:7c:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 10 16:22:48 2026 GMT
Not After : Aug 9 16:27:48 2027 GMT
Subject: CN=D2DE81BA70DF5D90164B19240D020837C7ED0806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:88:bc:8f:74:5e:ac:0e:0a:c9:0b:9b:50:
aa:3f:82:94:aa:81:da:d3:68:b9:b3:7f:c0:3b:44:
07:67:27:35:3f:93:ad:58:7a:50:e7:78:0c:1e:e9:
5c:e3:ca:00:81:a3:f5:c5:4e:11:af:40:6e:2c:ed:
3c:bf:97:a9:ac:a5:16:e3:fa:57:1b:8a:e7:e9:8c:
86:a9:78:0e:cf:66:76:c3:76:e0:0b:22:9f:45:20:
3e:c1:e9:c1:51:3c:96:ef:59:fa:46:01:8d:7b:d0:
e1:77:1f:e1:ff:30:83:ea:6b:21:de:9c:c5:99:8b:
9f:fa:c7:36:8f:cb:e7:d5:52:56:6d:cf:23:eb:a9:
da:8b:07:bb:43:16:4f:42:e3:7e:f2:0b:03:42:b8:
64:82:43:61:bf:16:99:fc:74:61:43:9f:e1:da:4f:
b1:d2:9d:3e:85:b8:84:ed:73:08:51:8c:57:ba:2c:
0a:48:66:7f:ac:02:43:68:30:84:fd:60:9d:31:e4:
c7:4b:ef:6e:cb:cb:c2:29:84:20:57:6e:ca:e6:b5:
fa:c2:87:f7:ab:51:37:3d:81:98:98:63:4b:5b:61:
51:37:9d:6d:b3:02:bf:fc:73:0a:74:1d:a3:f1:d3:
9e:1c:5b:d3:58:94:c4:7a:d9:d3:65:6a:85:be:4d:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:81:BA:70:DF:5D:90:16:4B:19:24:0D:02:08:37:C7:ED:08:06
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234332e302f32342d3234203d3e20323134363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:47:e5:76:11:3c:24:f3:f8:58:a3:cd:2c:82:34:fe:f4:32:
d5:b3:b7:6b:4f:7c:af:d8:d5:42:ea:91:8c:16:0e:90:1e:67:
09:84:61:da:e0:07:c7:68:1d:72:f3:5e:32:a8:37:a3:aa:8d:
0b:16:42:27:f3:8e:37:7b:69:00:ae:04:68:c3:05:7d:da:f5:
3b:38:09:25:d7:5f:23:83:3a:f9:7e:61:91:4d:a6:c8:de:3e:
a6:0e:7c:02:a8:a5:d7:44:58:1c:fa:0b:81:74:f0:43:e7:9d:
08:2b:ac:15:e7:92:49:16:04:c4:17:c3:72:98:03:55:11:58:
a2:1a:1b:16:e5:bd:97:c0:c0:c4:05:6d:17:73:63:06:f4:c3:
78:10:96:30:ce:70:0c:b2:16:cf:4b:40:48:c6:2c:3e:6c:c9:
00:5d:7d:3e:64:15:ff:8c:bf:3e:b0:00:78:08:bb:d4:0c:4d:
91:66:f8:4e:e3:43:d4:d5:35:bb:ee:26:00:bb:80:f7:6e:9b:
2a:c3:be:3d:a6:79:21:44:12:d6:d3:89:20:64:ff:3b:38:06:
ca:40:e2:58:94:68:bd:fb:33:bc:e5:bf:62:ea:fa:8d:dc:a0:
a9:4d:73:38:97:1f:97:82:77:52:70:2a:71:80:34:cd:71:de:
11:a1:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:45 2026 by rpki-client