Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231302e302f32342d3234203d3e20333935343730.roa
File: 3231372e3231362e3231302e302f32342d3234203d3e20333935343730.roa (raw, json)
Hash identifier: zoLuTzzPu5FInq3dS5GKXnJEB1CEkXCuME5m+wIIfpA=
Subject key identifier: 65:26:46:6C:DA:77:DD:64:AB:EF:09:E6:54:F5:93:9B:22:34:A4:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5BD84661FE50B6DE345946B1643B239F38EC549A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231302e302f32342d3234203d3e20333935343730.roa
Signing time: Thu 30 Apr 2026 13:19:37 +0000
ROA not before: Thu 30 Apr 2026 13:14:37 +0000
ROA not after: Thu 29 Apr 2027 13:19:37 +0000
asID: 395470
IP address blocks: 217.216.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d8:46:61:fe:50:b6:de:34:59:46:b1:64:3b:23:9f:38:ec:54:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:14:37 2026 GMT
Not After : Apr 29 13:19:37 2027 GMT
Subject: CN=6526466CDA77DD64ABEF09E654F5939B2234A4F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:f5:e3:d3:98:92:99:47:93:15:e4:8a:6d:
2c:11:45:7a:b4:cf:fc:1f:67:81:a5:16:e0:a1:53:
f2:28:25:c6:11:3a:90:52:c0:fa:46:82:6d:ff:30:
53:33:d4:bf:82:4f:1c:67:a3:80:f1:11:49:34:74:
ca:b8:01:ce:d0:96:26:a8:8a:3d:fd:d7:2a:3f:0e:
8c:0a:ba:f0:59:0a:6b:04:af:61:97:bc:21:ed:d2:
43:80:d3:ae:de:7e:28:5d:85:a5:8d:61:b9:0f:93:
4c:ce:35:f7:1d:fa:fc:af:ac:c1:22:66:0f:9a:05:
5e:a3:71:9e:b0:2c:62:75:d3:20:ce:5d:f1:c5:a0:
5b:72:0b:36:90:55:7e:bf:6e:ae:46:fb:2f:64:c0:
aa:3e:71:e6:01:2a:a6:ea:24:b0:ad:a4:cd:24:27:
67:0e:51:b8:80:91:81:6c:dd:e5:71:47:ab:26:0d:
cd:de:ed:ea:8a:0c:35:39:12:e1:61:9b:f9:64:ed:
1f:53:67:e5:eb:20:34:25:00:b4:e7:20:97:a2:42:
8b:57:98:fa:9b:1b:cf:62:b3:71:88:eb:5b:31:b7:
ce:a1:5b:b3:65:f6:e9:f6:a4:5c:e0:52:95:a1:e4:
36:1b:dc:13:93:57:d9:f4:19:d2:a1:40:d2:48:a4:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:46:6C:DA:77:DD:64:AB:EF:09:E6:54:F5:93:9B:22:34:A4:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231302e302f32342d3234203d3e20333935343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
28:db:36:b9:f7:89:f9:e9:79:c9:3f:2f:64:fa:4f:86:78:c7:
b9:6f:03:d8:ed:10:28:7c:cf:9b:0f:c7:78:1a:7a:16:95:c2:
7c:75:f3:7f:54:46:c5:90:2e:b1:9a:01:85:e3:32:b0:3b:bd:
72:6d:71:75:4a:3d:88:54:74:3c:35:f6:84:ea:ab:e7:3f:2c:
8e:95:1b:1d:dd:1d:bf:b3:57:1e:01:40:59:8c:44:2e:e4:2a:
61:6e:d7:e7:bb:08:39:13:5a:ff:5f:51:70:a9:4a:67:06:b2:
74:31:c1:0d:a5:d1:ac:62:a8:fc:1d:3f:bd:ac:5a:83:a0:60:
da:06:a3:b4:c1:fa:64:52:d7:99:73:1e:1e:65:f3:34:de:5a:
f5:3f:f9:23:a8:4c:c7:40:4f:68:84:70:e4:e1:52:4d:e0:bd:
53:4d:f1:f1:ab:49:ea:35:0c:56:37:3e:1e:28:a5:3b:c9:25:
18:ad:db:17:4a:cd:c1:93:c4:45:eb:d9:b5:24:47:12:80:c0:
d4:39:22:83:95:6e:02:89:ac:33:ec:0b:e7:91:4b:33:47:66:
42:3c:5c:fb:0f:45:12:04:db:52:49:c1:aa:4e:a8:a7:26:47:
28:24:44:df:bb:62:78:41:f0:0b:ed:74:43:8a:ef:c5:ef:57:
91:a0:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:13 2026 by rpki-client