Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231312e302f32342d3234203d3e20333935343730.roa
File: 3231372e3231362e3231312e302f32342d3234203d3e20333935343730.roa (raw, json)
Hash identifier: 1W7S7mCAvuUVkNdgxg1YwFGxbFhgewnusBvkGA0pa8M=
Subject key identifier: 4C:9A:26:E8:BB:D8:32:2D:53:36:42:EB:E0:34:D4:DC:30:D8:2A:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47BF78CD8F58858E15A22762EAC852A9EF4FA36D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231312e302f32342d3234203d3e20333935343730.roa
Signing time: Tue 05 May 2026 18:31:17 +0000
ROA not before: Tue 05 May 2026 18:26:17 +0000
ROA not after: Tue 04 May 2027 18:31:17 +0000
asID: 395470
IP address blocks: 217.216.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bf:78:cd:8f:58:85:8e:15:a2:27:62:ea:c8:52:a9:ef:4f:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 18:26:17 2026 GMT
Not After : May 4 18:31:17 2027 GMT
Subject: CN=4C9A26E8BBD8322D533642EBE034D4DC30D82A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:9b:17:b8:ea:37:f3:3c:14:48:aa:47:11:
4d:30:f3:3d:10:3f:5e:24:49:50:17:04:76:46:72:
84:f5:70:20:8f:6f:bc:12:8a:14:b4:73:70:62:6f:
b2:fd:32:0d:3c:d7:9d:5d:b4:cb:18:1b:6d:22:89:
f6:83:55:d7:9f:40:0c:c9:f0:ad:d0:aa:30:f9:a0:
50:a6:59:09:bf:6a:d5:85:49:05:89:24:5c:90:7b:
47:7c:79:fb:54:56:c3:17:d7:01:a0:19:f2:3c:e5:
12:5c:e9:68:20:3b:d7:0b:bb:9b:c3:ac:2f:33:e3:
dc:61:fe:7a:22:04:3f:ef:9f:d5:53:bd:cb:5a:ef:
34:e1:5e:ee:43:30:4e:7c:b4:05:eb:e4:5f:3d:61:
11:52:0e:c0:09:54:6b:22:b8:e6:35:5b:60:22:f4:
ee:a5:93:e2:d7:47:e3:84:98:83:81:16:55:41:87:
27:4c:58:0f:b9:80:f4:a0:3b:5a:c7:ff:51:71:f5:
41:e3:7e:77:59:49:87:99:91:3b:84:4c:de:91:48:
fe:f8:f7:e7:7d:0f:ac:ba:22:d4:17:ad:de:95:c5:
d8:31:f3:12:2e:51:26:34:e2:b6:ee:be:32:55:a1:
b1:cc:81:8a:46:7d:e4:fa:af:2d:26:44:d2:a0:3b:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:26:E8:BB:D8:32:2D:53:36:42:EB:E0:34:D4:DC:30:D8:2A:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231312e302f32342d3234203d3e20333935343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:75:f1:0a:e9:62:38:e0:f1:d0:3a:ed:37:a0:7d:a2:77:d5:
24:b1:8c:47:cc:3b:57:55:09:1a:ec:82:83:14:83:04:95:aa:
10:88:91:61:6f:19:8f:94:9c:96:14:c1:ae:0b:31:aa:0c:97:
ba:28:e1:5e:d6:c3:ef:9b:86:23:1f:5c:82:dc:94:7a:07:ff:
02:fe:74:70:20:07:0e:10:1d:c9:d8:3f:41:0d:96:0a:25:e4:
20:e9:59:07:97:31:d4:2d:44:d0:3a:7c:f7:c8:c1:ae:2d:8f:
18:94:75:1c:03:52:5b:58:9b:91:92:e7:c1:6c:da:bb:9c:bc:
c8:27:85:19:98:52:81:be:45:81:83:a6:dc:ee:d1:88:f7:82:
12:56:43:03:e5:4c:53:74:d8:1c:8b:a1:36:a3:56:e7:b5:47:
c2:07:80:85:8c:6b:ec:df:11:71:42:fa:fd:d1:11:e5:46:73:
2d:39:ec:74:48:55:41:ab:fe:a3:d0:d2:7d:82:b2:74:fa:d0:
4c:22:0a:03:c0:dd:75:b9:84:41:23:6a:d4:d6:6f:2b:cf:4b:
38:d7:c6:a6:fb:c0:c1:47:29:a2:f5:6d:2b:43:b9:c4:08:2c:
a1:33:cf:72:49:d9:ae:b6:8d:af:63:10:80:45:88:a4:2d:36:
d9:35:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:00 2026 by rpki-client