Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3139352e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: 2ZjSkbtRTido0mH/dLuW8x3bHUSLbuW4SpVDuaJk4ag=
Subject key identifier: 39:76:91:05:C7:80:B7:73:08:2F:1A:F3:34:3E:0F:98:55:91:05:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F495CB3365E4EB94C750DD66FF87B8D9FE9B9AC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:17 +0000
ROA not before: Wed 25 Mar 2026 08:44:17 +0000
ROA not after: Wed 24 Mar 2027 08:49:17 +0000
asID: 48266
IP address blocks: 217.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:49:5c:b3:36:5e:4e:b9:4c:75:0d:d6:6f:f8:7b:8d:9f:e9:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:17 2026 GMT
Not After : Mar 24 08:49:17 2027 GMT
Subject: CN=39769105C780B773082F1AF3343E0F98559105BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:21:04:57:73:70:22:7f:bd:38:b3:c4:d0:
22:a6:f3:1a:b8:2c:14:16:d1:52:d1:eb:0a:d6:6f:
63:d7:8f:17:21:27:fd:da:e7:1a:72:fd:7c:32:3a:
93:88:36:be:0e:ce:6b:a9:8a:fe:73:02:45:16:36:
b6:42:4b:3e:ae:09:3e:73:cd:88:39:38:06:ca:4d:
19:b8:6b:70:6a:f7:d7:25:a4:a5:ed:2c:77:fe:f9:
4e:9c:de:01:8d:ec:c5:0c:e5:3c:44:f8:68:fe:5b:
6a:6d:94:2c:c7:64:62:90:25:d8:0c:a4:f2:9b:31:
1a:8e:7d:48:68:bc:68:78:d8:e6:ca:4c:89:d2:a9:
25:86:43:6b:9c:b5:ac:1f:de:7f:04:1e:b4:26:e0:
95:1e:2d:74:27:dc:78:ec:1c:b8:00:08:08:f2:98:
5a:40:97:e0:5e:c3:a6:c4:7b:eb:1e:c8:13:81:d0:
2c:18:b0:44:93:4a:54:b6:02:72:db:08:16:ac:5f:
37:92:8e:b7:9b:8f:bb:04:dc:56:f7:af:a9:61:8b:
c8:bd:5a:4a:6e:4d:b2:4e:6e:eb:7b:27:3a:eb:59:
9a:47:5d:e7:93:8d:30:99:c4:3a:6b:82:8c:af:b9:
89:88:40:ab:b7:c0:09:56:66:09:7b:c2:35:94:14:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:91:05:C7:80:B7:73:08:2F:1A:F3:34:3E:0F:98:55:91:05:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:68:0e:40:12:61:f1:1e:27:d7:dc:9b:9e:fe:bd:ea:e4:a5:
83:8f:73:0b:b6:5c:ef:64:bc:95:1b:c3:11:09:75:fe:5a:d2:
f5:40:85:cf:5f:8a:94:2a:6a:ec:e3:6a:88:5e:ca:c2:c0:0c:
2a:8d:87:14:f2:ba:04:c2:df:77:64:6f:28:98:91:82:53:f0:
8c:fa:29:4e:e8:19:bf:ad:b9:78:eb:47:6e:a5:82:e1:9d:3d:
d1:b9:19:cc:98:6b:35:86:f3:72:4f:fc:72:49:50:5c:70:a6:
31:c7:25:70:3c:78:62:f1:0e:5d:d4:23:a9:9d:22:3d:a5:d2:
5d:af:9c:a5:bf:8b:6f:62:0c:95:8f:48:91:b6:c0:42:ec:a0:
f5:4a:25:d4:2b:a7:9a:7d:da:21:fb:64:35:00:8d:be:0b:d9:
7c:eb:6e:87:7f:70:f3:57:49:52:ec:d2:ed:69:04:57:55:16:
3a:a7:2d:43:41:d9:3b:38:83:b9:6e:9b:37:ac:dc:d9:54:38:
fc:a4:4f:d3:fc:a7:9c:cb:22:cc:06:37:ea:13:b6:a7:5f:34:
79:c9:6d:28:ca:db:b5:39:a5:8d:8b:f1:ab:51:f9:9d:6a:72:
ee:1d:9a:c0:53:f1:e7:26:7a:32:5b:62:8d:90:7e:4b:32:71:
24:82:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:47 2026 by rpki-client