Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39372e302f32342d3234203d3e20323134393631.roa
File: 3231372e3231372e39372e302f32342d3234203d3e20323134393631.roa (raw, json)
Hash identifier: NRk9nLwffowcj4uXsfPq9M1btga+fX0UJhEfuPnhw1I=
Subject key identifier: 27:42:30:BD:4C:26:A7:50:9D:B2:B9:5B:71:C7:1A:07:B8:47:A7:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 418BF052444B056C95B852ECDA614DC38F4EE8CC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39372e302f32342d3234203d3e20323134393631.roa
Signing time: Mon 29 Jun 2026 08:45:39 +0000
ROA not before: Mon 29 Jun 2026 08:40:39 +0000
ROA not after: Mon 28 Jun 2027 08:45:39 +0000
asID: 214961
IP address blocks: 217.217.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8b:f0:52:44:4b:05:6c:95:b8:52:ec:da:61:4d:c3:8f:4e:e8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 29 08:40:39 2026 GMT
Not After : Jun 28 08:45:39 2027 GMT
Subject: CN=274230BD4C26A7509DB2B95B71C71A07B847A76B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:4e:7d:02:02:f0:10:45:c1:5f:79:19:41:
db:3b:c0:b2:d5:a6:87:5c:65:8f:cd:4d:59:ff:15:
c7:39:16:b0:ff:72:a6:3c:68:aa:fd:29:b9:95:9d:
6d:63:f2:14:db:af:0d:ed:54:fe:44:1f:6e:01:44:
c8:5c:33:19:41:6c:28:51:bc:e2:21:35:50:18:94:
f3:f1:ed:58:02:f0:3a:47:2b:cd:d7:7f:19:4a:ea:
93:22:5b:0c:05:dd:8a:65:d1:22:4e:d4:84:33:01:
bb:b9:dd:01:0b:ae:68:09:22:44:d5:b8:f0:9f:62:
34:dc:45:37:3a:34:47:41:14:ce:5d:d3:70:8e:ec:
25:15:20:3c:0e:70:5f:54:b0:0e:fa:04:66:9d:26:
e1:39:a8:39:42:53:0f:4b:61:50:8b:db:47:7c:3e:
21:ec:da:41:f8:a2:ce:e3:37:f4:eb:e8:07:ab:ea:
4f:f1:00:b6:9e:34:3f:36:b2:bb:4e:4e:98:3a:8d:
d0:b5:01:c6:13:f0:77:8a:a0:b8:f8:b5:75:48:5e:
16:58:99:d7:0d:ba:2e:8c:25:03:1b:97:e2:dd:4f:
3e:6b:7d:fc:d8:3f:e6:50:45:f9:8b:c3:b0:28:6a:
5a:b8:d7:ee:e4:0a:83:a9:99:69:ff:71:80:46:ed:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:30:BD:4C:26:A7:50:9D:B2:B9:5B:71:C7:1A:07:B8:47:A7:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39372e302f32342d3234203d3e20323134393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c9:49:73:f0:7c:60:07:94:0d:f0:35:fd:ff:c9:d4:15:97:
35:d9:86:02:6e:0a:a1:e2:04:c1:e0:7b:c2:e5:c1:a5:58:59:
89:59:85:97:4c:8a:ef:44:74:d0:d4:dd:03:4b:c0:b9:59:49:
f6:f5:02:30:e5:74:1f:c8:41:3f:a0:44:d5:f7:d6:1d:29:36:
c6:82:c8:7c:6d:18:3d:53:35:73:49:47:de:9c:37:a1:c5:16:
59:84:9b:d7:5a:ed:27:f6:4d:b0:5c:51:0d:29:bb:d5:4c:1c:
c2:1b:88:57:96:d8:10:f8:36:65:bd:84:c0:ab:b9:ec:7e:53:
e6:2b:b5:53:a1:64:78:b9:b5:8c:4f:b6:be:66:c8:67:e9:74:
34:9e:39:59:7a:59:61:49:ab:c3:ac:86:1f:d4:53:ef:8c:17:
21:2d:75:97:2c:63:c9:5b:90:0b:66:66:4a:0b:a7:50:68:a9:
b2:05:28:a6:75:1c:c2:b3:34:cd:e6:d5:5f:b2:de:c1:73:15:
c2:f9:1d:2f:43:3c:0a:99:f0:42:19:19:1e:01:3e:16:78:1b:
30:89:a5:ee:a7:23:5c:1e:1b:98:9e:6f:4f:dd:16:7e:60:e8:
23:e0:29:d9:eb:3d:df:6a:1b:9c:e1:20:44:b8:f2:19:74:73:
a8:29:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 13:46:51 2026 by rpki-client