Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130312e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231362e3130312e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 8jkv5VgUiJbGeXr0kqaFvo+t1KqBHxGHp/mmc+pu3tw=
Subject key identifier: CE:09:40:D9:8D:E4:DF:F0:60:33:FF:F9:D4:8A:53:46:E3:03:7B:C1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 192DE5754772BD6DAC7EED101CEF569D89552FF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130312e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 31 Aug 2026 14:28:30 +0000
ROA not before: Mon 31 Aug 2026 14:23:30 +0000
ROA not after: Mon 30 Aug 2027 14:28:30 +0000
asID: 137409
IP address blocks: 217.216.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2d:e5:75:47:72:bd:6d:ac:7e:ed:10:1c:ef:56:9d:89:55:2f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 14:23:30 2026 GMT
Not After : Aug 30 14:28:30 2027 GMT
Subject: CN=CE0940D98DE4DFF06033FFF9D48A5346E3037BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:60:21:df:e0:f3:b0:4d:97:b7:c2:e3:31:
88:ad:67:9b:1e:2d:d6:67:3d:d4:98:e6:2b:e4:b5:
87:94:2f:14:c7:5f:5b:ef:aa:b0:82:a2:2f:dd:b8:
8c:61:9e:14:62:ab:a0:45:b8:0a:49:81:c1:dd:43:
0d:24:ea:fe:0b:3b:5a:c9:8b:2c:13:64:92:34:c0:
0e:e7:57:30:51:94:65:98:4e:de:45:6d:91:ed:36:
24:e2:74:17:17:68:74:68:66:cc:ce:51:6f:19:f7:
67:2d:a4:b9:a6:56:3a:5e:42:59:34:93:4b:0e:59:
b1:84:75:7d:94:cd:05:d9:ce:af:7d:f1:e0:e3:ac:
b9:f8:58:82:f7:39:9d:3d:24:96:65:7a:ea:4a:2d:
f7:93:82:4c:05:e9:a6:69:fb:e1:41:c2:17:cb:f0:
d0:0c:58:ff:8a:6d:5f:8c:90:f0:92:c1:f9:20:e5:
c1:77:1a:ca:c3:06:f7:b8:a3:fa:09:a5:91:46:82:
e5:1f:e1:57:fd:15:d2:d3:68:50:eb:e6:2e:9f:19:
cb:60:46:73:69:c3:0e:63:c3:71:ca:6d:ac:63:b9:
95:40:8a:8a:32:7d:31:1a:2a:c3:58:1a:35:03:88:
bc:5e:b3:0e:38:d6:f2:e3:ea:56:5e:ac:c6:0b:6f:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:40:D9:8D:E4:DF:F0:60:33:FF:F9:D4:8A:53:46:E3:03:7B:C1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130312e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f9:e0:77:40:96:9a:2a:76:1d:4d:49:ce:89:ec:4b:6e:44:
74:30:e5:3b:ab:97:fe:8b:83:fa:5b:5e:c3:83:54:c8:d1:2e:
66:e5:9e:8e:7e:c3:0e:dd:d8:d5:dd:56:38:7c:49:e5:ab:3d:
39:00:8e:66:f9:3f:99:4f:36:f4:98:92:cd:a9:a1:15:dc:5c:
b8:22:d9:16:d4:0a:86:6a:25:40:94:b6:2b:ec:99:7f:94:d3:
9b:4c:fe:e3:da:5e:c7:80:6d:bc:cd:d5:4b:21:9d:80:68:23:
f5:d6:df:e9:f2:0d:c5:68:49:87:fd:1b:ea:64:e6:c9:8d:46:
e2:fe:0f:4e:74:18:6f:3c:e1:99:a5:62:b0:10:4a:1c:35:4a:
10:ad:ba:7e:df:7f:76:2d:3d:8c:75:e6:6c:d1:11:7b:12:f5:
d6:ae:ef:ee:2e:ad:68:e4:0a:c3:04:88:6f:23:3e:b5:17:e2:
2c:26:ee:ca:89:72:fe:33:58:23:a3:65:88:12:04:6b:73:0b:
5c:f0:be:6a:f4:00:d1:d7:c5:f1:93:77:a2:ee:ab:71:a1:48:
78:bc:27:64:fd:cf:ac:e6:de:b2:f8:7a:cc:8e:f8:85:06:bd:
db:11:d2:6c:79:d9:63:8b:5d:f3:b0:93:43:3b:70:9c:1b:87:
a6:16:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:41:50 2026 by rpki-client