Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230312e302f32342d3234203d3e20343032323938.roa
File: 3231372e3231362e3230312e302f32342d3234203d3e20343032323938.roa (raw, json)
Hash identifier: TB6cd5riH+zqs4rPwcKG4DiNEuiqmhhHwLWn12fRBgE=
Subject key identifier: F1:69:F2:2C:25:66:33:B8:C7:04:A2:C2:2F:75:21:7A:F8:5C:92:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6041D4B87610B073E9CC5AF2C408349DC31C396F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230312e302f32342d3234203d3e20343032323938.roa
Signing time: Wed 06 May 2026 08:55:53 +0000
ROA not before: Wed 06 May 2026 08:50:53 +0000
ROA not after: Wed 05 May 2027 08:55:53 +0000
asID: 402298
IP address blocks: 217.216.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:41:d4:b8:76:10:b0:73:e9:cc:5a:f2:c4:08:34:9d:c3:1c:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 6 08:50:53 2026 GMT
Not After : May 5 08:55:53 2027 GMT
Subject: CN=F169F22C256633B8C704A2C22F75217AF85C92F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:a2:dc:cb:2c:9a:5e:db:3d:bf:f1:a6:9a:
7b:a4:c4:e1:11:e2:69:ae:2d:77:67:a7:a3:f3:28:
05:5b:db:e2:cf:48:9c:fa:64:1f:94:ce:06:8f:c9:
5e:10:ba:da:16:55:9e:57:5c:27:aa:eb:b4:b0:75:
05:95:b6:8a:1b:23:b5:3c:19:28:b6:4f:bf:5b:eb:
53:10:a2:b5:78:ca:cd:06:18:e7:43:1d:ad:1e:59:
06:cc:ed:37:ce:c4:85:1d:d6:66:77:5e:e3:36:89:
b6:d7:73:14:cd:11:47:bc:15:68:98:de:88:f9:d2:
0e:21:b9:2a:c3:91:08:e5:56:b8:c4:4f:3c:aa:af:
1c:f6:e2:83:cb:1c:04:68:6d:8b:7a:66:35:e4:52:
e7:ba:3c:43:94:d6:bf:fc:92:e8:1e:99:8c:5a:e6:
24:cf:bf:d2:f2:07:e0:7c:e2:ea:90:48:ed:0b:b7:
a8:07:9b:83:ff:4e:b9:5b:5f:71:a0:78:cf:e7:37:
15:4e:2c:91:ec:36:62:84:66:8f:8c:4d:b0:b4:53:
62:4b:af:f7:17:77:05:a3:0b:b4:1e:7f:45:b4:43:
f5:18:42:c1:da:17:4a:db:f2:1d:c6:b6:6c:a4:b8:
c5:06:89:56:2b:a4:41:ef:3a:32:6d:00:a7:9b:ce:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:F2:2C:25:66:33:B8:C7:04:A2:C2:2F:75:21:7A:F8:5C:92:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230312e302f32342d3234203d3e20343032323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.201.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a2:e0:fb:aa:f7:7f:b9:e3:3d:2d:f9:9d:c6:c1:f6:67:9f:
47:d5:a0:e9:62:e4:91:f2:9e:74:03:88:56:7a:6d:11:41:75:
19:87:28:53:6d:57:a5:91:5e:dc:19:94:6e:dd:db:99:ff:50:
88:d3:d7:17:d0:bd:9f:66:a7:2a:97:00:ae:25:1a:9d:6f:67:
7e:8d:06:42:b9:a2:60:27:42:4a:c2:4f:13:3a:90:5a:62:63:
95:6c:9d:1d:35:64:6e:e1:85:ec:79:73:7f:2e:a5:fc:09:b7:
c1:68:27:34:82:26:df:06:5b:d5:35:57:21:30:30:bd:b3:22:
01:8c:53:c5:12:85:c5:a4:ce:52:ec:d4:72:1b:bc:23:a4:ab:
4d:91:b2:00:08:87:66:cd:95:35:87:9d:ca:ac:d9:22:37:a8:
fa:89:89:f1:f1:d3:bd:af:f3:53:89:f9:01:d6:a6:7f:e9:1b:
4d:f4:37:12:69:4c:39:48:4e:c4:5c:93:c6:31:bc:78:a3:74:
a3:8c:e4:81:c9:6a:9f:c4:8b:5a:f5:0b:7c:8c:47:2a:df:ea:
fa:b0:4f:9b:60:6a:f0:4c:f0:0f:1c:d4:91:7b:f2:cf:9b:ad:
c6:48:cd:55:5a:78:9c:c6:78:03:c2:9f:03:c9:05:ca:30:84:
a1:9d:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:37 2026 by rpki-client