Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e203232373733.roa
File: 3231372e3231372e36382e302f32322d3234203d3e203232373733.roa (raw, json)
Hash identifier: XSQ/AinjaKadk9ishPbJjJdAvALq4vXkekJCx63kAa4=
Subject key identifier: 4D:E5:1D:8D:2A:4B:E3:DC:1D:15:35:3A:1E:37:CC:0D:11:0D:59:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CDB62B07EBFC95CCC33433AEFF0A52FBC03B490
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e203232373733.roa
Signing time: Fri 27 Mar 2026 13:50:57 +0000
ROA not before: Fri 27 Mar 2026 13:45:57 +0000
ROA not after: Fri 26 Mar 2027 13:50:57 +0000
asID: 22773
IP address blocks: 217.217.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 02:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:db:62:b0:7e:bf:c9:5c:cc:33:43:3a:ef:f0:a5:2f:bc:03:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 13:45:57 2026 GMT
Not After : Mar 26 13:50:57 2027 GMT
Subject: CN=4DE51D8D2A4BE3DC1D15353A1E37CC0D110D590A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:78:93:71:d0:91:5d:cb:68:e2:e6:28:ec:
a1:2c:e9:70:87:a7:09:fd:2d:16:06:0a:6a:f0:a6:
44:c4:86:a0:7a:b1:66:c6:af:71:3d:1e:d9:ac:6a:
10:8c:fd:a2:05:dd:3e:3b:bb:9d:e2:dd:5b:3e:c9:
3b:e5:12:46:6a:0b:32:5e:e2:cc:2e:44:80:57:6e:
b2:95:a0:d0:77:0e:b8:da:d9:f9:77:70:25:a8:4e:
c1:44:8d:bf:00:16:fd:cd:79:e5:8b:92:91:22:12:
7a:d9:d9:5e:bd:ea:27:6e:87:dc:cd:d1:12:2d:18:
ab:c0:7c:5a:d7:8d:88:fe:40:8f:44:c6:0a:6e:90:
35:9d:bf:f2:14:15:8d:df:00:34:ae:1a:56:b3:61:
c8:e6:35:1f:ac:60:b2:9a:1d:cb:2f:f4:7f:dc:b4:
18:76:80:62:44:5b:78:f7:29:f7:4e:50:02:a7:37:
fb:55:f0:4b:ad:e9:65:ad:22:0a:dc:c3:86:78:fe:
f1:79:0d:8f:8f:37:63:85:be:1d:02:60:a4:dd:fa:
c5:75:7a:a4:18:2d:e2:f3:90:f0:94:79:d9:ba:c2:
f1:e8:56:2f:55:f9:1b:79:24:cc:2f:f8:e3:da:e5:
50:8f:ad:6c:b6:52:f5:49:2c:dc:f2:ef:6b:7e:fa:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E5:1D:8D:2A:4B:E3:DC:1D:15:35:3A:1E:37:CC:0D:11:0D:59:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.68.0/22
Signature Algorithm: sha256WithRSAEncryption
03:de:33:3d:fc:58:fd:a1:65:9b:f2:f9:7b:47:4d:35:9a:2b:
2b:7f:dd:bf:8e:d7:6f:12:a3:e9:06:31:a2:50:8e:94:35:44:
25:45:d4:f5:b2:17:8e:e1:ff:44:f5:e3:74:78:8d:f7:46:52:
38:f5:f4:03:83:04:ec:51:5c:22:16:a9:cf:5f:05:24:49:32:
f2:5f:2c:34:9a:04:ba:50:cd:e3:c5:bf:43:d1:a7:04:10:22:
1d:74:11:07:27:d6:d1:3a:43:8d:e4:f8:b5:cf:a7:42:f6:4b:
29:e6:88:18:1d:be:80:a7:ca:dd:e5:e4:c7:bc:e6:a6:17:f7:
14:fe:c3:cb:07:64:53:06:a1:39:7e:c2:79:0d:31:54:6e:29:
6c:c2:00:d1:01:f1:68:75:3d:f1:64:06:6c:47:71:4f:82:50:
02:f4:30:3f:23:10:94:f3:c8:4b:05:6e:e0:27:c0:e9:c2:2e:
05:be:36:e1:53:0c:51:31:fc:54:47:aa:c8:bf:53:ec:ed:50:
8a:f0:1e:29:4c:c5:27:b9:35:4a:de:59:35:92:71:61:e0:7d:
77:ac:b1:57:95:25:ce:d2:d6:06:40:f7:d9:53:38:7d:f3:1d:
1b:55:de:b6:1d:9f:ab:6a:ff:94:6d:ff:a3:d0:97:f6:c6:23:
cd:60:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:41 2026 by rpki-client