Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37392e302f32342d3234203d3e20313937333436.roa
File: 3231372e3231372e37392e302f32342d3234203d3e20313937333436.roa (raw, json)
Hash identifier: E2ZKiEBiNonWFZs/lPxFUBT5DDyeKI4JR9UfaNKiei8=
Subject key identifier: 67:DB:48:78:6D:EB:D5:66:A2:69:37:65:2D:09:91:EB:B9:46:DD:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D263B68B91AED2F16DD2C4C2487041C04D6E5C1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37392e302f32342d3234203d3e20313937333436.roa
Signing time: Tue 13 Oct 2026 11:42:44 +0000
ROA not before: Tue 13 Oct 2026 11:37:44 +0000
ROA not after: Tue 12 Oct 2027 11:42:44 +0000
asID: 197346
IP address blocks: 217.217.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:26:3b:68:b9:1a:ed:2f:16:dd:2c:4c:24:87:04:1c:04:d6:e5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 11:37:44 2026 GMT
Not After : Oct 12 11:42:44 2027 GMT
Subject: CN=67DB48786DEBD566A26937652D0991EBB946DD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:c1:31:f9:f9:c5:5e:07:8b:f0:2a:ff:62:
e7:a5:a1:c3:6c:8e:85:f1:d2:23:cc:7f:19:f3:1f:
5e:45:88:45:ce:63:82:f9:16:36:62:91:40:69:9e:
5f:75:c8:f2:1e:13:35:cf:ed:54:bd:4c:82:27:fa:
ec:e0:8d:df:e2:7f:d8:71:64:c6:ef:24:97:a6:de:
17:be:28:14:a7:8a:f7:de:2c:b7:90:f2:4a:e7:0a:
7a:0a:c2:fd:21:f7:3c:54:c5:98:55:45:d1:28:7a:
e1:50:7c:8f:f6:13:53:1d:13:cd:78:bd:4d:c6:71:
af:5b:0e:b8:99:67:37:e4:80:09:03:4e:c8:1b:5a:
5c:cd:cf:43:de:f3:52:5e:74:15:14:82:8b:cd:3d:
e7:b7:1a:6c:a2:41:d7:d4:22:86:5b:70:aa:dc:6c:
13:6b:0f:29:5a:70:ad:03:45:5d:d4:e3:88:26:ae:
b6:c5:e4:60:7a:b6:84:6a:ef:ec:c4:61:3f:9e:0e:
9b:11:02:d7:fd:3f:77:b0:0b:42:7d:4c:02:53:c9:
da:34:61:d8:dd:5d:c1:70:da:e5:69:75:14:75:f8:
7b:d8:44:6b:12:20:ce:7e:38:07:22:79:80:c6:de:
9c:16:ac:1c:52:e1:ba:e8:0d:54:47:40:e2:b3:27:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DB:48:78:6D:EB:D5:66:A2:69:37:65:2D:09:91:EB:B9:46:DD:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37392e302f32342d3234203d3e20313937333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.79.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e5:ba:13:9e:17:16:cc:c4:4b:85:5a:6b:80:03:4c:61:90:
6c:6d:6f:ae:0e:94:25:b6:07:de:47:00:51:e1:ce:f6:ed:2a:
13:5b:8e:03:3c:af:b4:46:89:f9:39:15:a8:4e:97:1c:2f:9c:
9a:8a:c4:6e:01:27:db:93:2e:77:a2:88:6a:c4:4b:c3:03:4a:
81:a5:8c:9d:86:6b:93:21:49:76:87:20:3d:8b:a9:29:1e:af:
49:88:47:fe:59:44:a3:e7:3d:76:0a:12:d7:08:10:7f:4d:02:
ca:42:99:d4:e9:05:c3:9d:5f:8f:fc:32:c3:29:d1:81:99:b2:
0a:91:5e:6b:15:06:61:fa:9b:0d:8b:41:66:77:83:f3:96:77:
c2:8d:52:d3:f4:89:e0:f9:3b:3e:88:8d:40:bf:3a:7a:fd:d5:
cc:df:c7:69:11:f8:86:3b:06:f6:ac:b4:2a:80:5f:4f:0f:f3:
24:7f:02:13:37:e3:df:21:4a:1d:e2:ef:96:48:00:ef:22:6d:
c0:43:42:0a:2d:6c:a7:52:35:28:41:d0:1d:45:8f:d4:03:19:
df:13:8e:88:9d:80:e0:5f:7c:11:2a:c6:14:14:f1:9a:90:29:
8d:7f:c8:3c:d6:d7:aa:75:2d:08:27:65:13:d5:c4:86:c3:15:
12:76:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:23 2026 by rpki-client