Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32352e302f32342d3234203d3e20323030363336.roa
File: 3231372e3231372e32352e302f32342d3234203d3e20323030363336.roa (raw, json)
Hash identifier: oBj/tPJClOihu77P9Wkh0NBmTfwInLWOW7JKOWjNyLc=
Subject key identifier: 3F:A4:A0:60:43:9E:94:A0:DA:D7:80:58:1E:DD:7B:C4:67:A1:A9:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1BA20124D6512BA9EB0CEE3543BB1DACCBF37553
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32352e302f32342d3234203d3e20323030363336.roa
Signing time: Wed 24 Jun 2026 09:25:38 +0000
ROA not before: Wed 24 Jun 2026 09:20:38 +0000
ROA not after: Wed 23 Jun 2027 09:25:38 +0000
asID: 200636
IP address blocks: 217.217.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a2:01:24:d6:51:2b:a9:eb:0c:ee:35:43:bb:1d:ac:cb:f3:75:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 09:20:38 2026 GMT
Not After : Jun 23 09:25:38 2027 GMT
Subject: CN=3FA4A060439E94A0DAD780581EDD7BC467A1A9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:15:2a:ff:68:00:19:b3:82:00:65:2c:d9:
b5:75:50:2d:26:e2:27:81:e7:d9:5b:c5:87:89:01:
3c:2b:ed:0d:b5:a2:96:52:b3:4a:61:b6:45:93:cf:
13:1e:73:60:6f:c9:99:49:ed:b5:48:e4:e6:ec:e7:
c2:af:40:df:e7:3d:79:55:c5:6e:f5:78:8a:92:bf:
5e:44:87:14:66:8f:ad:c4:c5:97:e6:aa:ac:4d:5f:
69:0a:86:ab:e1:f9:cd:e2:e0:91:25:cd:7c:04:d2:
49:76:59:0f:a3:72:72:01:1b:a0:c1:7c:1c:1a:7b:
c2:aa:0d:9a:ab:37:fb:78:ea:b6:f7:9f:8e:07:0c:
c4:81:69:96:83:3a:2a:d9:31:bd:be:42:99:7d:a6:
85:82:a4:1a:6f:99:eb:3b:33:88:ab:a9:6e:a4:c9:
f4:81:b3:45:f1:3c:2f:52:7d:69:f9:36:69:a3:08:
85:85:9c:23:01:84:4a:0a:bf:55:46:39:1f:f4:cc:
63:8b:05:63:5b:cc:c6:88:50:f4:65:2f:98:aa:f6:
75:0f:69:d6:18:c7:2e:1c:10:54:76:a7:5a:9c:71:
6e:a9:ab:33:fc:08:ff:f7:8d:01:e7:59:89:58:1f:
96:2d:43:15:34:81:b8:de:8f:de:18:83:5d:a9:d7:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A4:A0:60:43:9E:94:A0:DA:D7:80:58:1E:DD:7B:C4:67:A1:A9:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32352e302f32342d3234203d3e20323030363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b2:3b:e6:b9:b3:c9:44:b2:48:71:fa:d2:95:07:f0:39:f3:
cd:23:9f:20:fc:c3:19:65:70:55:c5:25:fe:c0:66:d1:57:c2:
4f:fe:d8:62:77:e1:4b:a5:1f:77:26:62:b8:45:e4:1a:32:45:
88:f1:43:e1:e2:ea:30:24:9d:74:db:ee:c1:b5:88:df:93:74:
33:ef:63:3d:ce:be:d7:4f:06:25:96:f4:97:63:64:dc:cf:c1:
2a:60:a3:0c:e5:9f:b0:16:ca:97:61:aa:aa:ef:d4:05:d6:90:
5d:a3:19:3d:9f:a2:54:42:7a:7b:2a:5b:ff:91:1b:34:c5:83:
07:6f:d0:d4:a2:ba:3c:7f:3c:21:1d:41:0d:54:4e:96:3d:14:
6c:8a:06:83:8e:c6:22:b0:5c:5c:a1:9c:1b:b0:40:8d:99:8a:
28:47:52:91:b6:51:3d:f3:67:82:1e:1d:c3:55:e3:9d:46:b7:
60:1b:61:a5:e3:f4:b2:be:94:57:ed:f6:8e:5a:34:2d:56:68:
cd:bb:0c:05:45:b5:b5:b7:33:bc:02:70:e7:82:ef:17:9c:7f:
78:3f:57:2a:55:65:b3:70:4b:50:9f:b0:77:35:4d:cb:22:ed:
7e:3d:66:81:d2:4e:12:d7:b7:0b:61:7e:e7:80:fc:ed:26:1c:
7b:bb:0b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:39 2026 by rpki-client