Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234352e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3234352e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: PyQ36oeBpLEmX6Ap7L/syZCtRPf/zZB5Gv0LXqSrzLU=
Subject key identifier: 04:8F:F5:1E:5F:44:C1:DF:48:9D:16:E4:F8:A2:29:54:4A:8E:2E:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4A503FC51889DEAD58E80975F36B7B0C4003B552
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234352e302f32342d3234203d3e20323136323533.roa
Signing time: Tue 18 Aug 2026 19:28:05 +0000
ROA not before: Tue 18 Aug 2026 19:23:05 +0000
ROA not after: Tue 17 Aug 2027 19:28:05 +0000
asID: 216253
IP address blocks: 217.217.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:50:3f:c5:18:89:de:ad:58:e8:09:75:f3:6b:7b:0c:40:03:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 18 19:23:05 2026 GMT
Not After : Aug 17 19:28:05 2027 GMT
Subject: CN=048FF51E5F44C1DF489D16E4F8A229544A8E2E47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:a3:76:bf:ab:37:b5:e2:c4:41:a5:1c:7f:
e6:4f:30:9c:1b:71:8f:e0:17:3f:e6:ef:0b:17:59:
8c:8b:b8:37:bd:89:21:19:32:7e:1f:a6:a5:cd:84:
87:af:db:fb:d3:7b:41:2c:e5:e7:2b:cf:f3:79:8d:
26:21:97:e6:2d:4c:e4:77:27:44:2b:79:70:7d:46:
6f:c5:9c:14:ea:96:84:80:02:36:1d:1a:bf:0a:f5:
0d:58:29:b1:6f:33:90:b1:77:e1:44:36:e7:10:85:
4d:50:c3:49:58:21:e9:2f:c6:ef:35:f3:91:94:9f:
8b:28:cd:8f:e4:03:ad:cb:18:bb:4c:39:47:da:0e:
8d:75:71:b4:40:c6:10:2a:6e:70:dd:e0:ee:0f:ba:
5b:29:a7:d5:1f:be:0a:cd:60:4a:da:a2:48:eb:74:
cc:f0:db:0f:a4:63:99:de:42:c7:ad:06:e5:85:7a:
98:a8:04:30:46:1e:4c:3d:9e:0b:f0:77:8e:f5:d1:
3b:3b:40:bf:58:6b:03:bd:99:d9:7d:dd:5f:8c:d2:
9a:49:41:f7:b3:0d:b8:8c:af:f4:06:91:54:2a:8c:
e1:1e:17:9e:8a:f4:fc:de:79:c3:54:06:a9:03:7c:
f4:b3:41:93:19:42:56:70:22:58:c2:ca:12:6b:df:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:F5:1E:5F:44:C1:DF:48:9D:16:E4:F8:A2:29:54:4A:8E:2E:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234352e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:66:37:a7:24:08:23:9a:70:be:0b:86:d0:04:cb:a6:b8:6c:
92:c3:a4:48:90:bf:4e:21:3a:c3:ee:24:a8:f8:2d:18:f6:34:
15:2f:81:81:6f:73:11:b0:53:e6:4a:6d:a3:5a:2e:e5:2b:b3:
13:5e:ac:63:f0:98:76:af:b9:4e:f6:82:b8:00:15:ba:37:17:
70:79:00:e4:00:f3:16:b0:8f:d0:65:e8:ca:58:80:e3:96:97:
f6:ab:22:4b:c0:75:d8:c7:9f:81:63:16:39:7b:90:a3:55:80:
99:e2:dc:d5:41:33:eb:37:b6:ce:82:8e:93:1c:24:8e:4b:d6:
9a:ba:76:fa:3d:37:d5:b9:5a:7f:c8:2c:d4:90:2a:4f:9e:9d:
c1:92:90:8c:e6:2d:f3:d6:af:12:0c:59:fc:a0:a6:69:84:6f:
74:12:cd:6f:18:6f:72:9e:ee:91:de:b1:8d:d4:27:77:05:38:
82:d8:2f:99:fd:0c:36:98:fa:7b:f0:f7:90:02:e3:2c:bd:15:
b6:22:ef:05:75:69:4a:51:85:a7:e7:98:1b:cc:a8:36:f3:11:
68:c5:db:5c:ae:9c:f0:02:a4:32:42:3f:10:fb:da:38:b0:bf:
6f:e4:cc:fa:c3:d7:36:eb:57:b0:a9:ec:42:41:76:00:cf:b2:
57:56:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:26:35 2026 by rpki-client