Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3133362e302f32312d3234203d3e20383334.roa
File: 3231372e3231372e3133362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: eLlyzu0GZu37c/ABTQSrKvSEJPxhyE6cnUOFWDhJZ0Y=
Subject key identifier: BA:3B:E3:26:F1:DB:3C:89:2D:A8:66:71:57:FC:2A:78:2E:8B:D8:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A43B0A9FADE625E8E900C7344CB49BB359F94B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3133362e302f32312d3234203d3e20383334.roa
Signing time: Tue 05 May 2026 09:47:56 +0000
ROA not before: Tue 05 May 2026 09:42:56 +0000
ROA not after: Tue 04 May 2027 09:47:56 +0000
asID: 834
IP address blocks: 217.217.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:43:b0:a9:fa:de:62:5e:8e:90:0c:73:44:cb:49:bb:35:9f:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 09:42:56 2026 GMT
Not After : May 4 09:47:56 2027 GMT
Subject: CN=BA3BE326F1DB3C892DA8667157FC2A782E8BD8A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:39:03:eb:47:43:b5:92:cf:10:da:0c:0a:
ee:51:4f:40:72:7c:32:c9:de:ba:20:c3:c9:1e:77:
f5:f7:c4:d9:fc:a5:c9:a3:31:3c:a2:a9:55:c5:3a:
06:e7:43:b1:28:71:5d:f3:7f:65:a0:c1:54:4e:50:
63:fd:c3:c5:83:85:3a:91:c1:75:8c:f8:c2:71:bc:
4a:8b:34:13:e4:21:85:60:63:4c:4b:cd:64:98:3e:
7a:5f:55:f5:9d:94:96:04:72:8e:8f:fd:2c:34:d3:
e4:84:db:44:e3:2e:79:0a:c4:5c:51:37:bb:b8:12:
3e:52:c5:5d:18:6d:0e:11:1b:02:db:d3:35:b2:d4:
05:5a:37:5f:86:df:b1:ea:a9:43:7d:fd:12:92:18:
81:c0:8b:b1:8b:c3:4a:f7:2b:fc:13:9b:4b:0a:76:
33:77:92:3f:85:bf:7a:2b:26:15:cc:a4:a4:5f:20:
c1:e9:4f:31:81:13:3f:c5:c0:63:48:e1:19:ca:96:
dd:9d:e0:3d:92:70:68:75:31:2c:f2:df:64:bc:eb:
62:61:8b:0d:c3:9e:88:13:b1:62:6a:fc:47:86:46:
16:46:fb:b1:f9:d1:27:e0:81:ae:59:03:6d:5a:8c:
92:82:d7:9c:ac:6f:bb:1c:8a:3b:e3:13:8d:3b:a6:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:E3:26:F1:DB:3C:89:2D:A8:66:71:57:FC:2A:78:2E:8B:D8:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3133362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.136.0/21
Signature Algorithm: sha256WithRSAEncryption
44:a0:aa:7f:8d:71:5b:2f:33:2b:e7:ec:b1:68:35:cc:73:a6:
b9:91:e8:53:94:b0:f8:ef:db:b0:3b:0b:f7:a0:16:f1:a6:12:
ec:4b:76:ed:05:00:43:07:29:73:04:db:fa:df:b9:49:1a:06:
20:77:84:2d:14:02:43:65:9c:e0:af:9a:1c:ce:e4:a3:1e:f7:
89:14:e4:34:14:94:01:c2:07:4a:3b:32:0e:d1:bf:94:db:04:
cd:37:98:f3:9b:b3:75:82:ca:92:53:90:86:08:78:38:ae:2d:
97:64:07:4f:2c:f9:b0:74:e5:9d:7e:d0:d8:3c:bb:48:10:11:
2a:9f:25:70:b8:87:9d:fe:fd:8e:40:20:d4:37:ab:78:c5:09:
72:53:dc:33:37:58:b3:71:e2:1f:b6:a0:2e:25:f3:c3:22:3c:
2e:0d:1d:46:71:99:3b:fa:a3:25:73:16:af:bd:b1:49:a9:96:
8b:d3:e3:bd:a0:d9:02:38:b1:ea:af:e9:7a:1f:5c:1e:76:3b:
c0:82:64:de:cf:d7:4c:a5:6e:2b:54:2e:97:20:52:83:bb:52:
a0:41:46:91:0b:c3:f7:43:6d:07:35:96:a1:96:81:2f:9a:92:
ff:c7:fa:23:4c:b3:28:46:52:7b:a7:78:f8:0d:17:ae:84:76:
68:fd:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:28 2026 by rpki-client