Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037383433.roa
File: 3231372e3231372e34382e302f32322d3234203d3e2037383433.roa (raw, json)
Hash identifier: uWOK0bG/H7meJogNPQtozIXSR3io2HQxqstpwsocS/8=
Subject key identifier: B0:CB:1C:1A:0D:9A:54:81:C0:43:5C:B5:21:AA:0E:C5:4A:3E:6A:0C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B6335815A272B7393DFBD8C1A456118A2163AC7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037383433.roa
Signing time: Fri 19 Jun 2026 19:25:31 +0000
ROA not before: Fri 19 Jun 2026 19:20:31 +0000
ROA not after: Fri 18 Jun 2027 19:25:31 +0000
asID: 7843
IP address blocks: 217.217.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 12:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:63:35:81:5a:27:2b:73:93:df:bd:8c:1a:45:61:18:a2:16:3a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 19:20:31 2026 GMT
Not After : Jun 18 19:25:31 2027 GMT
Subject: CN=B0CB1C1A0D9A5481C0435CB521AA0EC54A3E6A0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:ac:8c:5c:78:4b:33:44:07:ce:37:b0:0a:
e9:9a:50:bf:9a:6c:69:04:0d:5f:b5:76:2d:50:c1:
b0:b4:2f:81:23:d6:c2:5e:ed:b1:26:db:a5:66:94:
ce:33:9d:11:4d:cd:4a:7a:84:87:bb:42:80:bd:c9:
e6:11:77:79:3e:db:dd:11:65:40:56:fe:06:c1:99:
4e:35:0d:91:9c:c0:d4:a1:2c:6e:3d:d5:60:22:78:
f7:b0:ae:ae:a7:2a:d3:f2:26:ff:07:65:59:7b:f1:
df:41:d7:cd:7c:2e:33:67:8e:5d:fb:e4:53:72:04:
f3:2a:de:c6:98:61:fd:63:63:38:f6:8f:61:ea:8d:
93:d6:fe:70:ec:4b:b7:49:85:34:7c:57:09:89:36:
a4:14:3d:a8:dc:80:5f:2b:6c:71:75:6a:04:66:0d:
8f:c3:63:e0:76:ef:7e:17:28:3e:5f:f5:9d:6c:66:
2e:1a:d4:ee:6a:52:a9:77:d5:55:f5:0d:d8:0c:c2:
06:7f:02:f1:7f:6a:20:5a:94:ff:72:98:e3:24:a6:
6c:98:ca:4f:76:c4:02:c1:ec:b9:62:f5:76:6a:2e:
87:ed:f5:30:69:a5:c1:6f:7e:d4:e9:b5:d4:b9:54:
75:75:6e:7a:04:c2:43:72:5f:c9:bf:44:c5:64:28:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:1C:1A:0D:9A:54:81:C0:43:5C:B5:21:AA:0E:C5:4A:3E:6A:0C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a0:44:fd:2c:d0:21:36:6f:da:22:c3:19:85:8b:eb:5e:e4:
33:77:a3:8f:89:e2:89:75:cf:57:2b:b1:3f:a2:02:79:c8:c8:
ff:21:7a:34:b2:9a:77:f2:6e:bd:fc:04:80:2f:7a:f8:36:d6:
5d:96:c1:f4:6e:d3:3b:4d:b8:59:6e:ae:b6:0e:28:f2:a9:59:
0f:4b:21:e5:ac:b3:25:2f:cb:60:33:92:98:36:c4:d0:0f:ee:
1f:88:94:60:c9:19:b1:7e:cb:00:ff:36:9f:5a:18:e0:c1:d8:
10:dc:8a:41:9b:87:c1:20:7f:de:8e:5f:f8:02:e5:b1:b4:54:
37:67:c9:d9:f4:e5:ed:54:4d:f7:22:3b:89:fb:61:2c:dc:f2:
5a:00:2f:6f:bf:29:22:01:2d:41:74:c1:51:61:c2:5a:d3:48:
8d:5b:9f:73:df:bb:c6:2f:10:bd:09:0b:90:9f:44:fc:42:55:
6d:d6:5d:d0:1c:d9:0b:09:5f:e4:02:45:ba:48:7e:ec:29:2f:
6b:92:5b:ff:3e:7a:e9:74:61:5a:db:6c:2a:22:9a:a5:a8:31:
7c:e1:2c:a1:6b:22:cf:48:93:34:fd:e2:8e:95:40:e6:d5:50:
51:4d:4f:58:dc:59:59:a2:f2:af:8e:63:83:96:9c:25:fb:c9:
11:51:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 05:39:50 2026 by rpki-client