Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39322e302f32342d3234203d3e203136323736.roa
File: 3231372e3231372e39322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: jNaYbgIaHuToDyMDRJ/O7ysR5ONZr9mVXyzNZ8rt/es=
Subject key identifier: 3D:3A:68:19:4D:E1:20:92:81:C9:37:75:85:6C:DC:51:61:EF:F6:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D772471A95C8D9F8D45144E08AD84F1334AA81B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39322e302f32342d3234203d3e203136323736.roa
Signing time: Fri 16 Oct 2026 19:20:26 +0000
ROA not before: Fri 16 Oct 2026 19:15:26 +0000
ROA not after: Fri 15 Oct 2027 19:20:26 +0000
asID: 16276
IP address blocks: 217.217.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:77:24:71:a9:5c:8d:9f:8d:45:14:4e:08:ad:84:f1:33:4a:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 19:15:26 2026 GMT
Not After : Oct 15 19:20:26 2027 GMT
Subject: CN=3D3A68194DE1209281C93775856CDC5161EFF6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:ce:bc:d3:cd:d0:99:45:44:0a:7c:95:24:
69:06:79:87:3a:10:8e:55:a5:03:bc:95:e3:18:b2:
9e:6a:f0:79:ab:4d:da:6e:9f:4e:8f:e0:dc:2d:e7:
33:a3:73:01:77:92:7e:ff:1c:05:cd:9e:e7:68:4a:
32:2f:78:81:a1:5b:03:8d:f3:72:56:c6:60:59:53:
19:94:d9:1c:04:e8:5b:7d:62:c8:b9:3d:ec:18:96:
e3:e4:bb:35:30:29:06:15:48:7a:91:31:38:85:d7:
b0:eb:39:32:d5:fc:a8:5c:b6:29:5c:14:da:d3:e9:
32:76:c0:19:e1:7b:3a:09:ef:52:b6:97:24:37:5c:
5c:e6:56:a6:5b:f0:a3:f0:02:a3:80:53:8b:77:8e:
e0:39:2f:15:b2:44:39:d3:e7:e6:3c:07:3d:8c:8a:
e7:5b:ff:84:33:2c:1f:79:3c:a6:30:0b:0b:e9:df:
e0:b4:11:bf:14:07:d8:e9:d7:90:51:61:1a:b2:17:
24:71:4e:77:80:05:a2:9e:2f:7c:e0:9f:b9:ba:88:
ef:64:c7:32:aa:06:18:ff:58:75:f4:fd:1b:07:0a:
11:5f:30:8e:67:c6:ff:ef:c9:10:3f:d3:7f:e0:4e:
da:57:50:0a:5c:4a:e2:1f:d5:a4:93:e3:7c:82:57:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:68:19:4D:E1:20:92:81:C9:37:75:85:6C:DC:51:61:EF:F6:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.92.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e4:44:7e:62:48:63:5a:1e:fe:d2:b6:95:cb:ef:63:01:da:
70:86:6d:ec:d6:55:3a:f5:ec:a4:67:42:f2:19:36:3a:cd:0b:
75:ef:d9:40:1d:f1:53:74:0e:2a:8b:18:16:c3:87:4f:33:de:
eb:62:ac:8d:f3:18:e1:f6:bf:4b:3a:60:de:4e:e0:76:f6:ba:
21:f7:ae:29:aa:1a:bb:5a:e2:22:e9:31:fa:7c:a8:b3:ef:53:
ea:46:fe:f5:fa:2f:cd:98:f6:d6:08:ac:4f:e0:da:cd:cd:b8:
d1:2f:94:5f:6a:b2:c1:9c:43:42:42:9b:2c:b7:ac:9e:8b:9a:
be:6f:ee:8b:9d:61:87:01:1c:3a:47:c4:bb:ec:20:45:4b:d5:
2c:6a:ee:f1:06:d6:48:e8:76:29:ad:34:34:b2:16:34:51:61:
88:47:ff:92:fb:cd:87:aa:1c:b0:42:39:97:80:b5:cf:a1:1b:
56:fa:b1:bb:96:42:a5:6d:83:34:6f:01:0f:85:ac:99:80:0b:
fb:07:95:8d:87:a5:75:7f:62:01:c2:1c:e9:bc:22:43:6a:c7:
d2:4b:28:b2:58:31:da:85:92:78:26:66:73:35:6c:1d:72:19:
71:e1:cf:de:92:50:03:7d:ca:78:4f:46:79:54:47:08:a1:28:
fe:f2:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:32 2026 by rpki-client