Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sDUi9OlwLu5boYunmyrLhvTGUf4m92fzfQ1r8pDQ3K4=
Subject key identifier: 63:C6:5D:89:75:21:1F:F8:B7:C5:40:5F:BE:D9:3C:7E:CA:C9:79:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 717F6E0BD1151E7EC80B49E9A5FB17F9B557D73E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:08 +0000
ROA not before: Tue 21 Jul 2026 11:59:08 +0000
ROA not after: Tue 20 Jul 2027 12:04:08 +0000
asID: 834
IP address blocks: 217.217.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:7f:6e:0b:d1:15:1e:7e:c8:0b:49:e9:a5:fb:17:f9:b5:57:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:08 2026 GMT
Not After : Jul 20 12:04:08 2027 GMT
Subject: CN=63C65D8975211FF8B7C5405FBED93C7ECAC9794F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:74:15:49:cb:62:98:a5:02:cf:0d:55:24:
24:a1:05:59:08:d8:3f:e9:9e:de:be:0f:09:96:9c:
eb:f4:17:15:52:ce:89:a8:de:20:52:4f:99:25:84:
b7:d8:37:0f:92:fd:a9:4f:58:aa:d4:d1:37:c2:5b:
c4:eb:62:bf:71:d8:34:c6:33:f5:cf:2f:7c:ec:a8:
dd:33:d5:b4:9b:8c:50:e4:a2:c8:92:e9:f2:18:a6:
49:b1:61:d6:8c:10:81:0e:41:2e:1a:c6:ef:60:7a:
38:cc:a1:b0:0f:76:ec:82:68:06:3b:f2:5c:cd:f9:
e8:c4:e5:f2:90:9a:05:8d:6c:6c:84:94:f9:d4:5e:
f1:60:3c:0f:64:67:c4:65:f8:64:23:58:67:7a:b8:
c9:c7:a8:ac:2a:88:29:00:79:32:51:cc:3c:8e:2d:
6c:60:83:1e:15:b1:a7:f2:51:40:f4:8d:60:e3:80:
b3:52:ef:41:c3:53:9c:7c:12:f0:6a:bb:29:6b:3c:
d2:bc:70:b3:69:af:52:ed:ef:fc:91:93:28:a4:fc:
77:c7:36:4b:6c:24:7f:3e:b0:c6:7d:7e:7b:f7:e7:
79:ca:17:75:7c:0a:d7:e8:03:da:45:73:5c:9d:59:
ec:8c:cc:5f:bd:6c:ba:d9:09:81:c0:de:1f:cc:20:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C6:5D:89:75:21:1F:F8:B7:C5:40:5F:BE:D9:3C:7E:CA:C9:79:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:74:59:13:62:7b:da:e9:64:0a:dd:2c:56:94:be:db:f6:b1:
75:70:b6:9e:5d:95:4e:54:2a:fe:27:03:21:92:03:ef:bb:75:
62:50:f2:f6:89:da:9d:22:9f:a8:0a:02:58:bb:69:4c:08:79:
f8:09:38:10:df:b5:cd:de:81:b5:45:a8:77:ce:d5:da:9e:05:
30:d9:4b:f1:f8:46:87:33:4b:26:2f:e6:6d:40:09:d4:57:95:
d4:fc:88:17:4d:a8:22:4c:d0:c2:88:fa:98:ed:37:ca:72:16:
45:50:80:20:a4:00:b1:85:16:ae:70:68:4a:f7:7b:7c:3f:82:
f1:5d:94:0a:b1:2f:18:7e:15:fe:6d:d1:dc:81:c2:f9:fb:89:
aa:4e:fa:0c:3a:4a:e4:71:f7:b6:8d:06:18:28:a3:83:82:43:
65:b1:ac:58:89:db:3f:60:85:9e:b7:0c:9d:7e:00:fb:19:7b:
73:73:91:bb:46:18:10:69:d8:1e:66:f8:7f:7c:ff:6f:39:d2:
45:06:fe:79:b1:29:d1:ec:67:30:bd:0a:d4:40:46:ca:20:e0:
0a:eb:38:32:f0:8f:cc:08:d8:89:a6:f6:30:46:bb:7e:65:c1:
c8:6a:17:90:ad:63:14:11:13:00:34:27:85:6c:7e:3a:1f:73:
4c:a9:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:28 2026 by rpki-client