Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139342e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8LAZauG31X3vu6hMxMlrIuZKu9lmtvTx1ZSALiY8ig4=
Subject key identifier: 6C:F7:45:A5:60:12:8B:96:B8:5D:59:9A:2B:63:16:40:1E:AC:EB:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15B7D0F11424BFEEC415DEFE91C06DFED5F84B03
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139342e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:03:56 +0000
ROA not before: Tue 21 Jul 2026 11:58:56 +0000
ROA not after: Tue 20 Jul 2027 12:03:56 +0000
asID: 834
IP address blocks: 217.217.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b7:d0:f1:14:24:bf:ee:c4:15:de:fe:91:c0:6d:fe:d5:f8:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:58:56 2026 GMT
Not After : Jul 20 12:03:56 2027 GMT
Subject: CN=6CF745A560128B96B85D599A2B6316401EACEB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:bf:54:9d:1f:70:5e:e4:2f:8a:07:66:b1:
02:6e:23:69:30:60:80:f4:af:56:dc:46:ad:c4:ad:
ba:13:25:16:ec:da:bc:7e:a9:6d:d6:3b:c6:14:fd:
03:b4:b4:16:be:8e:86:74:a5:96:1a:da:fb:e9:8d:
43:8a:7a:c0:8b:7a:b3:43:3e:69:96:56:79:4a:6d:
cc:6f:88:be:ef:dd:55:a2:81:7e:74:59:2e:c6:23:
c0:ac:35:b2:2f:09:94:e6:55:eb:2f:77:10:d4:1e:
c8:2e:6f:99:9f:13:5f:2e:11:1c:09:8f:9e:eb:dc:
15:dd:b4:7d:8a:98:2c:be:2d:16:28:ab:43:9e:12:
3c:0e:2d:ce:a3:85:30:7f:2b:5d:fb:15:de:4b:9c:
23:89:31:29:86:e4:1b:ab:ed:7c:42:df:a5:97:88:
14:15:ac:4e:67:53:b2:77:c9:9e:8a:38:fb:d3:f0:
39:38:89:db:19:10:0f:0e:6d:ae:ae:9d:5d:ea:ab:
a4:a0:28:c7:9f:99:2b:1e:db:e0:1b:05:be:3d:6b:
23:86:85:39:a8:06:5d:f9:e7:b0:2e:e9:f0:5f:29:
a7:1a:53:59:46:fc:81:da:2e:0c:3b:b6:16:59:19:
f2:d9:9f:e5:6c:70:a9:ba:77:76:aa:87:e0:ba:9a:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:45:A5:60:12:8B:96:B8:5D:59:9A:2B:63:16:40:1E:AC:EB:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.194.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4d:aa:2b:3f:b4:9b:04:db:88:7a:ab:c3:51:fd:79:23:2f:
4b:58:32:db:42:63:68:de:ae:a2:95:40:11:97:fe:7d:a2:29:
67:64:b4:3c:f4:a9:fb:a0:8e:2b:df:c2:ea:14:57:3d:30:13:
2c:c2:cf:9d:db:33:85:cc:c8:a1:f7:6e:a7:be:6e:86:c5:94:
5f:77:c8:55:f1:25:19:57:94:90:1b:46:1b:a8:b8:95:4c:97:
68:a9:36:73:14:3c:17:c0:2b:57:e2:0a:b1:85:ee:dc:0c:04:
9c:0f:3e:de:23:92:78:1e:82:9b:8b:41:c1:d1:82:0c:bd:da:
bc:87:7f:3d:e5:8a:79:10:83:c2:69:30:16:21:dc:a8:0a:cf:
9b:d4:1d:6c:8f:8d:bd:cd:b4:c2:65:1a:15:02:a5:d3:00:c6:
97:f6:3d:f5:ee:4b:20:92:6c:87:b5:d5:94:e0:67:68:d6:ba:
39:5a:b6:ae:01:3d:f9:3c:d6:14:ab:76:c4:79:e9:04:6b:c1:
cc:ab:ef:f3:5a:52:32:b9:38:53:70:e0:41:cf:90:8d:63:4d:
9d:0d:d7:9f:d6:ef:45:42:a2:e1:8a:75:4c:62:f0:b4:28:79:
4c:42:20:d8:3c:8c:4f:a2:1c:48:98:60:c7:43:b6:56:12:5b:
31:2a:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:48 2026 by rpki-client