Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39312e302f32342d3234203d3e20313530313432.roa
File: 3231372e3231372e39312e302f32342d3234203d3e20313530313432.roa (raw, json)
Hash identifier: 55Va2M3RmqOhNkJZCETgvATGaewwG9A1BtpReDSJhFc=
Subject key identifier: CE:FB:15:77:7D:E6:FA:2F:EE:63:49:8F:41:ED:CF:D6:55:5A:0F:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49B976EA911947D7C4E07C85A694972D2555B8E9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39312e302f32342d3234203d3e20313530313432.roa
Signing time: Sat 17 Oct 2026 19:45:07 +0000
ROA not before: Sat 17 Oct 2026 19:40:07 +0000
ROA not after: Sat 16 Oct 2027 19:45:07 +0000
asID: 150142
IP address blocks: 217.217.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b9:76:ea:91:19:47:d7:c4:e0:7c:85:a6:94:97:2d:25:55:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 19:40:07 2026 GMT
Not After : Oct 16 19:45:07 2027 GMT
Subject: CN=CEFB15777DE6FA2FEE63498F41EDCFD6555A0FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:d0:de:1b:2f:b2:12:d3:bf:41:47:40:f0:
bb:0b:2f:71:af:df:0d:81:b4:ff:37:ca:9b:83:d9:
b5:28:24:8c:78:df:e3:ad:a1:33:c7:1a:4a:72:a0:
2f:77:2c:4d:c2:63:75:c2:65:73:a4:00:d8:f6:64:
e2:e5:4a:56:59:b0:0c:b5:8b:bf:e8:7a:67:19:06:
c2:b3:8d:3a:d6:6e:37:fb:77:b8:cc:7d:b0:93:d8:
d9:7f:02:7f:8a:de:f8:ee:a6:34:c6:57:45:7d:09:
50:65:d9:e5:4e:36:e7:2d:5c:04:8f:5a:14:28:c7:
31:af:9c:56:9f:ad:e5:3b:88:48:80:33:6e:16:92:
b7:a3:a2:f9:ef:45:88:d6:44:43:fe:bf:63:04:4b:
6a:84:92:43:4c:ec:5e:3b:23:ac:73:ff:87:fd:9c:
2b:94:8d:80:df:df:84:86:1b:62:c6:d9:61:96:a3:
51:bf:89:10:d6:7c:0c:e8:3d:d6:9d:55:df:c9:c5:
5a:b0:f4:49:db:71:85:79:9c:ff:8d:82:fc:95:d1:
0d:1a:93:4c:6f:47:18:78:6c:50:2d:97:1b:6e:a2:
66:07:80:d1:2c:2f:6f:e3:70:88:e6:ad:02:b8:c2:
82:54:49:19:f8:38:da:a5:38:60:17:71:90:7a:42:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FB:15:77:7D:E6:FA:2F:EE:63:49:8F:41:ED:CF:D6:55:5A:0F:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39312e302f32342d3234203d3e20313530313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.91.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fb:37:1b:2b:9b:cd:8e:f8:85:19:30:74:d4:fa:6b:e2:06:
01:db:0c:f6:54:9b:43:61:c4:30:26:c8:c5:bc:18:9d:80:d4:
ff:7a:54:62:c2:73:bd:90:e2:a4:6e:f5:ba:2a:6b:c5:1c:d8:
a2:ab:d0:36:44:1d:f7:bf:e1:19:96:34:87:97:33:89:a3:a1:
65:b0:02:3f:50:b0:d3:28:4c:e5:e3:d5:5a:36:97:af:ff:3d:
4b:eb:e5:bc:df:54:f1:49:fc:a9:40:ac:0b:d8:77:f5:16:0f:
80:a9:bf:b7:eb:dd:18:1a:ec:11:a0:c3:40:d2:6b:e1:7f:36:
d3:a0:7d:77:98:1d:2d:55:6c:d2:0f:fd:0d:68:ec:fa:db:62:
cf:1f:c5:aa:e1:09:13:29:ef:8f:2d:a6:1f:c3:83:12:7b:64:
dc:e7:6c:88:de:08:86:49:13:d8:42:dc:30:89:c1:74:b4:d8:
3f:50:6d:d0:e0:ee:ad:75:5d:70:05:7d:a9:38:88:30:a5:15:
37:d9:92:46:70:ba:ea:b6:31:b7:5b:cd:38:e0:4e:3a:db:9f:
8a:07:28:be:5e:ec:50:37:c0:4b:21:bc:73:16:9f:e2:d6:71:
30:61:57:c3:f0:0b:9b:ac:51:4c:6c:67:33:b0:a3:77:32:6f:
df:ad:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:36:18 2026 by rpki-client