Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nA4VLJdYbl+hDK/gIr2DpHMWuezIuuoobJRdm81YfXU=
Subject key identifier: 93:12:F1:A4:8A:F4:FE:FF:AC:D9:16:2C:7B:A3:EA:1E:EC:16:CE:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 587D8E4BE0F4602060BA4596E9CB89287EDD7069
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e352e302f32342d3234203d3e20383334.roa
Signing time: Sat 10 Oct 2026 19:45:57 +0000
ROA not before: Sat 10 Oct 2026 19:40:57 +0000
ROA not after: Sat 09 Oct 2027 19:45:57 +0000
asID: 834
IP address blocks: 217.217.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7d:8e:4b:e0:f4:60:20:60:ba:45:96:e9:cb:89:28:7e:dd:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 19:40:57 2026 GMT
Not After : Oct 9 19:45:57 2027 GMT
Subject: CN=9312F1A48AF4FEFFACD9162C7BA3EA1EEC16CE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:3c:e7:b6:bc:a7:1a:06:35:0b:63:29:df:
83:4d:c5:4b:b4:c1:13:c8:83:57:ed:e5:02:1b:63:
54:5d:ab:5f:de:9b:16:8f:8e:b0:63:9c:6e:c0:64:
82:9d:b7:4f:3f:f9:bc:4d:d6:b5:74:d1:cd:19:f8:
6f:df:58:67:e1:e9:39:9b:ee:79:70:37:41:26:5b:
ed:c7:6f:a5:64:4a:1c:d9:07:95:b2:1a:5a:63:a6:
ee:5f:94:71:80:d3:64:13:36:32:95:02:d7:1f:b9:
72:59:02:1b:58:85:07:a4:ae:d7:1d:2e:63:21:61:
b3:eb:ea:3d:96:bc:66:1b:8d:a6:7c:ae:ec:5d:86:
30:e3:f0:70:ba:8b:52:10:8a:25:5e:5b:1a:0d:02:
c4:85:d4:cb:53:84:f8:0e:de:26:b5:98:50:1d:59:
dc:6e:64:21:cb:ce:40:3e:b6:ab:d7:50:9e:b1:d0:
1b:84:46:ee:76:78:52:58:90:5e:e4:da:48:e5:e4:
db:85:4d:06:f4:31:b5:85:b7:19:cd:09:cf:fa:0d:
d2:95:7a:a6:83:44:b9:46:2c:52:44:e7:7f:8f:da:
28:25:7c:22:de:5f:1a:0d:8b:c8:55:c5:be:fa:d4:
50:ed:6a:c6:26:5a:90:fa:52:4d:70:d8:ea:55:62:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:12:F1:A4:8A:F4:FE:FF:AC:D9:16:2C:7B:A3:EA:1E:EC:16:CE:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.5.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2e:87:02:06:32:c2:3e:77:68:58:68:e1:3d:75:df:e0:71:
6b:e8:3d:55:aa:a2:3d:b1:65:ae:91:04:3b:25:8d:40:30:5b:
48:c3:70:65:69:c1:0e:ac:15:ec:d7:19:8d:d4:25:9b:47:45:
a5:dd:36:61:70:87:bf:5d:63:dc:a8:20:36:1a:dc:87:94:49:
59:05:ea:e2:e2:dd:dd:b0:6a:db:5c:6f:7a:6b:0a:46:bc:50:
3f:1c:b5:a6:9e:22:ab:0a:6d:78:dc:43:33:b1:dc:18:d8:d8:
c7:b9:6d:f9:73:09:d0:b9:46:77:24:16:e6:43:48:f1:02:4d:
b7:c3:da:56:ef:84:1b:9c:5b:87:ca:73:e9:0a:62:88:6b:a3:
40:3d:32:05:72:63:8b:09:f5:3c:a4:b9:9a:65:3d:b9:90:d3:
e4:4c:5d:0d:b9:0c:2b:cb:b8:0f:03:57:2c:08:b9:52:41:51:
c2:50:10:03:e5:c3:85:ad:65:7d:77:35:ad:9c:88:4f:69:a7:
85:4f:ab:73:ac:0f:c8:ce:90:56:50:d5:17:a5:8e:8b:57:8f:
14:9b:bb:54:d0:ce:6a:28:6e:b5:da:3b:a1:19:d4:27:85:6d:
5d:d4:c1:89:1e:bc:73:df:86:85:4f:55:24:85:d9:c2:c4:41:
d4:b6:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:56 2026 by rpki-client