Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e20333939393535.roa
File: 3231372e3231372e32302e302f32322d3234203d3e20333939393535.roa (raw, json)
Hash identifier: CuLhufNjpo4WZeWU6E8rAshF4R9Z761KGZqSSy0SLxU=
Subject key identifier: E5:98:3C:96:97:36:18:4D:85:9C:4A:83:FA:AA:94:D6:B1:A2:A3:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31E40EB1B530960A22183575AFB4F9E94C0F809D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:26 +0000
ROA not before: Thu 30 Apr 2026 13:41:26 +0000
ROA not after: Thu 29 Apr 2027 13:46:26 +0000
asID: 399955
IP address blocks: 217.217.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e4:0e:b1:b5:30:96:0a:22:18:35:75:af:b4:f9:e9:4c:0f:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:26 2026 GMT
Not After : Apr 29 13:46:26 2027 GMT
Subject: CN=E5983C969736184D859C4A83FAAA94D6B1A2A33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:53:d0:86:8c:a5:47:ff:19:f7:2b:c7:bf:
3a:57:b8:55:90:3b:fa:e4:37:a3:01:5e:7f:7b:c2:
8e:c7:c3:6c:f5:c7:28:cf:f3:5d:cb:97:63:e6:d6:
34:7b:4b:98:b4:b9:9b:7d:56:35:fe:0d:c7:40:d6:
44:07:e9:ff:eb:33:bc:33:2a:4e:12:c0:be:c0:08:
bb:a6:42:c9:1f:08:a5:90:cb:40:b4:f0:af:78:19:
98:b8:0c:9d:d5:ce:e9:68:d7:e2:b2:52:43:ed:76:
1a:44:0c:c3:c9:69:ea:f1:9a:40:b3:8c:56:c1:35:
80:8a:0a:a2:eb:b1:23:bb:46:7c:38:15:eb:82:87:
a9:f5:f7:28:79:8b:5a:0b:80:03:f6:a9:f0:13:fd:
0d:fe:08:11:97:60:a5:94:6a:33:cd:56:6f:da:8c:
e4:95:ed:d3:24:0b:08:8a:d9:bb:be:cb:26:04:01:
00:61:d7:2b:d3:8a:81:dc:dc:e8:d6:42:1b:3a:a9:
7d:c5:b0:9f:70:16:13:52:3f:c0:e8:68:18:43:36:
03:68:e5:50:9f:64:7b:43:65:2b:cd:5d:eb:99:f3:
f1:9a:15:a7:1d:08:87:9f:8a:ff:19:39:33:dd:94:
5f:b0:2d:1c:5c:d8:a1:0b:91:37:22:f5:25:ef:69:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:98:3C:96:97:36:18:4D:85:9C:4A:83:FA:AA:94:D6:B1:A2:A3:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.20.0/22
Signature Algorithm: sha256WithRSAEncryption
71:5b:46:50:a4:9b:f7:9b:47:de:46:90:34:d7:68:e1:1c:e5:
2d:db:f8:48:8b:51:d1:a3:3b:04:20:ee:5a:d3:34:0d:72:3f:
23:44:e8:8d:d6:40:98:6b:80:40:99:ce:26:cc:ef:38:b7:4a:
8a:76:ae:a9:b5:45:be:34:76:e5:4c:80:42:95:51:00:4a:53:
6b:dd:1d:8d:6a:1f:09:a7:ed:0e:cb:04:8a:a5:24:5e:aa:90:
f9:77:71:d8:6a:0f:6b:a6:51:ed:27:84:72:c7:37:33:a9:89:
2b:9d:ec:7c:84:6f:b0:4c:4d:81:47:b3:da:a2:e5:ec:1a:fb:
0d:30:2e:77:74:1d:a1:b4:63:a6:3e:6b:54:40:f9:78:0f:71:
14:cb:98:29:9a:5f:c2:3f:65:44:b3:c9:96:5b:1a:9a:ae:ef:
5c:71:63:3b:92:37:39:8d:56:ad:28:ba:10:65:e0:bf:73:2e:
00:9f:e6:da:53:c0:a4:7e:41:c2:fe:d3:e8:17:af:06:69:ff:
4f:a3:94:93:c5:7e:02:a2:aa:57:7f:34:27:56:b4:57:0b:76:
59:9b:e2:2b:64:ca:b3:62:24:6f:7b:24:6e:07:27:da:60:14:
2f:24:54:f5:93:89:ac:28:d8:45:f7:d6:5e:a0:21:69:c9:a1:
f5:b7:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:09 2026 by rpki-client