Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38312e302f32342d3234203d3e20323032393334.roa
File: 3231372e3231372e38312e302f32342d3234203d3e20323032393334.roa (raw, json)
Hash identifier: 06STmtl+AclfCKHr+mi9hP/e/PdnZmE2ZYpsZ4eBIZw=
Subject key identifier: 45:25:13:34:66:34:EC:0B:B6:BD:5C:6A:42:7D:A4:03:3D:B3:3A:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DC7B92CFE1A00EEC522297063C2FBF2DBF21890
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38312e302f32342d3234203d3e20323032393334.roa
Signing time: Thu 08 Oct 2026 11:47:49 +0000
ROA not before: Thu 08 Oct 2026 11:42:49 +0000
ROA not after: Thu 07 Oct 2027 11:47:49 +0000
asID: 202934
IP address blocks: 217.217.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c7:b9:2c:fe:1a:00:ee:c5:22:29:70:63:c2:fb:f2:db:f2:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 8 11:42:49 2026 GMT
Not After : Oct 7 11:47:49 2027 GMT
Subject: CN=452513346634EC0BB6BD5C6A427DA4033DB33AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:72:58:1b:a3:ce:3f:b3:ef:71:75:51:48:
1a:cf:ed:e6:3f:ce:50:51:cc:de:3d:ec:98:b5:c5:
6d:af:d9:30:41:02:3d:de:ca:61:45:f0:7e:07:8b:
37:91:bc:92:69:f4:89:ee:a8:97:2e:91:7a:9a:82:
5f:c4:76:86:c1:92:0d:98:fd:d2:60:75:2e:d7:2b:
a2:83:99:6c:0c:38:17:86:26:5a:18:64:12:2c:47:
07:1a:9a:83:7e:c4:75:4d:ab:80:77:99:b3:29:c1:
f4:a9:70:f7:12:3a:cb:fc:32:a3:48:8d:ad:94:1d:
e4:6d:31:fc:f1:04:b7:be:f4:42:fa:a9:c1:c6:8a:
2f:a9:cb:7e:3d:80:a5:46:8d:6c:79:98:fd:86:d3:
34:a8:48:fd:93:0e:38:4c:3a:5a:cd:4f:7a:ab:81:
b8:ad:2e:b5:ce:e7:50:56:21:dc:4c:67:d8:0f:1c:
21:9e:cc:49:9d:a5:2f:9d:d9:a4:08:8e:6e:d4:88:
86:7e:76:f4:ef:77:55:ee:2c:c9:38:9d:42:f2:37:
75:12:2f:45:85:52:48:44:9e:69:f4:69:6c:74:a8:
21:0d:9b:c8:9d:04:a2:a8:81:8e:a2:e2:b7:bd:90:
a3:e2:06:00:89:9b:cc:b6:40:0b:f6:a9:5b:a6:ae:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:13:34:66:34:EC:0B:B6:BD:5C:6A:42:7D:A4:03:3D:B3:3A:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38312e302f32342d3234203d3e20323032393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.81.0/24
Signature Algorithm: sha256WithRSAEncryption
56:76:24:d4:72:16:1a:4f:9c:5d:0d:88:6a:2d:78:d8:f2:6b:
05:d5:49:b4:41:33:e3:9e:1b:0d:46:2e:df:91:fa:d2:db:89:
12:45:44:99:bb:fd:e8:8a:4e:1e:a8:15:a1:42:f5:0e:4b:c4:
55:20:54:31:88:43:93:3a:98:d8:10:87:0b:0c:d0:5d:b2:88:
89:dd:1b:51:3b:b0:e0:cc:a9:77:cb:21:6e:1c:da:23:fd:23:
e9:cc:63:2a:8d:31:70:e5:1e:53:52:f3:79:f2:76:68:c4:f4:
f9:fa:a7:72:f8:29:43:6d:90:79:b7:64:8e:43:0d:ad:e2:91:
2b:7f:d7:e4:ff:9e:22:65:f8:0f:87:e3:61:16:9a:61:c9:f8:
62:99:72:82:c3:b0:ea:09:c7:0c:eb:0b:b2:4f:83:f1:30:21:
6f:90:8f:a9:8a:cf:57:df:55:13:bf:84:1a:05:ff:e3:bc:80:
f9:ae:ad:ee:fc:71:2a:ee:b4:64:e4:ef:d5:a5:33:2c:63:9e:
10:3c:ee:f9:af:96:73:ce:0c:82:9e:df:a3:b3:d7:d6:29:f4:
0a:5f:27:0b:78:96:70:ea:c4:67:e6:ba:05:32:f4:fe:0f:f1:
c4:97:d0:1a:91:53:76:b0:c9:b3:04:71:c2:c6:f3:aa:0f:c6:
ff:4e:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:58:54 2026 by rpki-client