Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e2032383536.roa
File: 3231372e3231372e36302e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: 2nupcnfFOvjoGE1vvFrWvxSLhkEu1UbW/Ly1AGwHj4c=
Subject key identifier: D2:62:F8:68:EA:02:1F:C9:82:5D:4C:0B:A7:B8:5F:F1:86:01:9B:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 56884D538E3A9A18DB2B5ADAE6E03347E74E85A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e2032383536.roa
Signing time: Thu 18 Jun 2026 18:25:23 +0000
ROA not before: Thu 18 Jun 2026 18:20:23 +0000
ROA not after: Thu 17 Jun 2027 18:25:23 +0000
asID: 2856
IP address blocks: 217.217.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:88:4d:53:8e:3a:9a:18:db:2b:5a:da:e6:e0:33:47:e7:4e:85:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 18:20:23 2026 GMT
Not After : Jun 17 18:25:23 2027 GMT
Subject: CN=D262F868EA021FC9825D4C0BA7B85FF186019BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:aa:00:d6:2f:66:93:c3:0a:b3:f1:02:be:
89:7f:da:ef:d1:2e:63:f8:63:ee:0c:cb:10:33:e7:
7c:93:ed:43:62:d2:a0:d8:72:a5:50:96:91:46:84:
6b:01:23:f8:74:2a:68:d6:6f:db:2c:de:e1:b6:fd:
f1:25:bf:b1:b1:da:c4:8a:52:c7:18:f4:13:bd:0e:
5a:50:a3:8d:e3:68:c7:eb:a9:02:1a:c7:ae:8b:9d:
c8:ac:51:02:7c:af:73:68:37:76:fb:2e:4e:e9:61:
75:00:fb:84:b2:39:7f:f3:1f:71:c5:26:3b:2e:dd:
1d:93:46:14:b3:db:85:24:67:d9:25:4f:d7:14:2d:
75:46:82:47:87:ae:38:f1:a4:f7:dd:9d:bd:f9:56:
24:a3:eb:8b:c7:07:72:32:be:e8:65:d8:7a:20:96:
5c:9a:80:74:0a:d3:0d:de:c1:e8:c7:09:00:b0:91:
0d:76:3f:98:71:df:31:a1:23:26:78:17:02:3c:7b:
51:5a:ca:2b:b0:b8:55:ee:3a:4a:2e:31:6c:2d:b5:
ee:01:43:70:f0:9b:e6:b4:bf:1e:47:8f:c8:f9:90:
23:86:b2:b1:2f:4e:b5:96:3b:3b:56:9a:bc:7c:e3:
40:ea:bd:47:da:b8:ca:39:62:b6:5a:e3:49:ac:51:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:F8:68:EA:02:1F:C9:82:5D:4C:0B:A7:B8:5F:F1:86:01:9B:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:60:e2:31:e8:6d:c2:63:67:e2:0a:b3:c9:20:4c:1c:0e:2c:
4e:29:e0:4f:31:1b:fb:3e:4e:d9:35:35:e5:69:c8:00:06:9d:
67:40:80:f7:4c:b5:b9:eb:15:79:e2:65:7b:bc:12:74:3b:92:
44:b1:8c:29:a8:7e:96:bf:76:b8:0b:81:5b:ff:ca:1c:4e:3e:
ef:8c:1a:23:03:89:a8:7e:fc:93:f7:27:4f:ff:e9:27:a4:60:
c1:c2:fe:ff:30:6a:02:b1:cc:26:7a:ed:41:d5:91:06:eb:50:
93:05:8c:af:9a:0b:c9:9f:c9:0d:7c:14:48:1a:e6:b9:4f:bc:
f7:7c:03:1c:db:ad:95:88:7a:2b:6b:6c:95:3b:9b:b4:77:2d:
dc:f1:f0:4c:20:e0:35:e9:fb:4a:82:2f:0b:0f:5b:21:0e:c0:
de:24:71:c6:3b:ec:40:19:3b:59:8c:27:a0:a4:94:ce:e8:05:
e6:40:25:42:a8:1b:86:23:6f:96:a7:82:cf:c9:3b:43:fc:27:
f3:87:63:fd:4c:2e:bb:ae:40:8a:17:e4:08:8f:69:f3:d4:7d:
df:1d:cd:21:8e:dc:14:0e:f4:eb:dc:9b:ba:9c:19:1a:e2:fb:
2c:1d:69:15:7f:5e:47:e7:a2:c6:eb:48:4d:38:a2:54:ab:2a:
bf:82:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:47 2026 by rpki-client