Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2037383433.roa
File: 3231372e3231372e31362e302f32322d3234203d3e2037383433.roa (raw, json)
Hash identifier: 7XQ2NLBWfmoKjpWhhcTeNLBScIyyCvv45dRhkvmW9OU=
Subject key identifier: 0F:4D:CC:71:D0:89:13:4A:D1:D6:9C:0A:B0:A8:BB:EE:E0:9D:44:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D6D3BDB27FB71E1C0C50B5E00828D939FE558AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2037383433.roa
Signing time: Wed 24 Jun 2026 18:25:42 +0000
ROA not before: Wed 24 Jun 2026 18:20:42 +0000
ROA not after: Wed 23 Jun 2027 18:25:42 +0000
asID: 7843
IP address blocks: 217.217.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6d:3b:db:27:fb:71:e1:c0:c5:0b:5e:00:82:8d:93:9f:e5:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:42 2026 GMT
Not After : Jun 23 18:25:42 2027 GMT
Subject: CN=0F4DCC71D089134AD1D69C0AB0A8BBEEE09D44CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:9a:29:80:bc:2d:5b:e4:29:e4:c8:b2:32:
69:07:1a:bc:8b:05:71:c0:89:70:3a:31:f3:a4:9b:
2f:85:2a:5d:be:98:9e:a5:f5:a7:aa:70:df:1d:c6:
64:d5:5b:cd:a7:c9:ef:25:91:cd:48:23:ed:f0:45:
c7:c8:6b:34:90:86:67:b0:04:b2:b0:23:93:b0:88:
74:1a:35:eb:0d:62:86:fe:2f:4a:82:91:ce:e8:27:
1f:10:b0:6f:c2:b0:55:6f:70:aa:b8:51:49:7c:b9:
3a:d9:29:10:ee:ea:a2:fd:4c:eb:2b:0a:63:b3:ad:
a4:b2:d2:b5:77:0f:a7:c5:eb:ad:96:32:6d:97:c0:
07:c8:d1:d3:be:d6:4f:ef:53:99:ca:fb:e2:db:85:
78:6e:d9:9d:fa:98:29:ce:bd:66:c1:11:68:40:19:
75:48:78:a7:c3:f1:3b:23:52:39:b8:f1:c7:ec:9a:
9d:0a:73:35:43:60:b9:29:56:6f:bf:de:b7:1e:66:
25:cb:d1:ba:d4:24:bc:43:5d:bc:34:e8:f8:8b:b6:
84:e1:c7:85:5d:f5:70:21:bd:ef:ad:8f:02:8f:21:
c8:0f:26:e3:69:2d:36:0f:7f:8d:aa:7b:cd:57:ca:
5f:64:f3:f5:3b:7d:11:cd:2f:13:18:04:35:2b:47:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:CC:71:D0:89:13:4A:D1:D6:9C:0A:B0:A8:BB:EE:E0:9D:44:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2037383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:51:e2:3d:4b:3e:a9:7b:bd:c5:fe:7c:79:78:13:2b:23:21:
d2:c8:9c:d2:7c:db:06:5d:92:c6:77:92:ec:cd:89:33:f8:53:
d5:62:b1:73:1d:46:23:bb:a9:95:00:56:39:77:34:77:d3:49:
57:43:a3:2d:88:5c:66:d1:f3:67:0b:69:de:39:ea:bc:85:76:
9e:3c:46:64:df:75:27:88:1f:79:51:a9:2b:a1:96:e3:b2:72:
b7:fb:64:62:05:ba:d1:4a:9e:d5:c5:e3:75:58:45:53:09:ac:
1c:65:78:c3:c4:54:84:1d:2e:e1:c9:1b:bb:76:ec:6d:1c:3d:
72:2b:4e:2a:e1:70:ef:3b:ee:eb:e6:42:a3:70:98:46:23:1b:
8f:3b:93:db:d2:c1:84:87:a6:7d:12:98:fe:a0:47:c7:00:ef:
4a:eb:dc:ea:e8:31:1b:cf:5d:d1:8b:9f:19:d7:25:4a:58:57:
57:b7:34:5b:72:d3:12:66:ab:93:a7:dd:cb:5e:06:da:47:d1:
51:f6:a4:43:27:d1:fd:c1:20:07:19:7a:c0:71:3c:18:ee:fe:
49:26:d6:e6:f6:1e:3f:26:73:fd:93:d8:25:17:9e:aa:88:0f:
23:c9:e0:a0:35:63:94:16:59:14:b9:78:dd:fb:49:01:ca:28:
b8:df:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:42 2026 by rpki-client