Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: u4v0OFjEPiNoVUoInkKEMFAIZ55LO5K3oJUi7uMaAJQ=
Subject key identifier: BD:D2:CA:EA:BF:FA:2C:26:80:4C:BA:C4:0F:BB:CA:E8:62:0F:33:F1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24C0302C25FCF65F8B8FCF0AC481C947E2A1F3FC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:20 +0000
ROA not before: Tue 21 Jul 2026 11:59:20 +0000
ROA not after: Tue 20 Jul 2027 12:04:20 +0000
asID: 834
IP address blocks: 217.217.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c0:30:2c:25:fc:f6:5f:8b:8f:cf:0a:c4:81:c9:47:e2:a1:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:20 2026 GMT
Not After : Jul 20 12:04:20 2027 GMT
Subject: CN=BDD2CAEABFFA2C26804CBAC40FBBCAE8620F33F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:fc:32:f2:d8:1b:f3:b9:5e:b5:1f:05:ee:
90:5e:8f:46:1d:69:f2:bd:2f:ad:0c:c8:84:55:df:
b8:41:a9:aa:50:53:4e:d2:dd:09:de:77:7c:3e:35:
10:44:98:d6:6c:e4:48:a7:15:f6:cd:19:ab:f6:48:
3d:e1:90:c2:b9:3c:7c:7e:e1:dc:cf:cd:f7:2f:e8:
82:ba:7c:26:7f:28:1e:4c:74:89:90:b5:08:e3:1c:
4c:cd:76:6f:7c:bc:90:c9:4c:9c:86:de:75:88:1a:
36:4e:fb:93:45:d1:ac:38:52:e9:88:d9:05:3e:4c:
27:d2:65:0c:8e:d4:f7:0d:84:c4:f4:ee:52:80:b0:
fa:35:bf:1e:17:5d:1d:5e:af:c9:1d:cd:09:2c:ba:
08:25:87:d3:ad:a8:29:95:01:95:c8:7b:e4:31:55:
bd:82:4c:94:ef:f7:aa:8d:12:51:8d:8e:42:7d:94:
1d:b4:52:c5:89:4e:ef:5b:ad:cf:17:fb:11:94:6f:
bd:e7:50:47:1e:df:8e:06:f5:e4:3f:8d:91:b8:3f:
7c:07:67:17:e6:8d:ff:a9:ac:12:61:3b:77:c1:1e:
a3:a6:a7:de:16:73:c0:1a:c7:a6:40:33:98:e1:52:
e8:7a:f8:6a:c6:40:16:28:c8:c4:8a:4d:af:d6:e6:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:CA:EA:BF:FA:2C:26:80:4C:BA:C4:0F:BB:CA:E8:62:0F:33:F1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ba:ce:9e:b3:69:3f:b3:3b:4c:43:61:b3:fc:05:4a:70:a7:
ec:97:30:96:19:6d:b2:c9:9c:71:2b:ea:fa:ba:36:d6:1b:96:
64:da:9d:db:fe:42:dd:47:84:ca:2d:51:bd:ea:57:a8:a0:ae:
b3:d5:9a:7b:d6:1a:ad:ec:01:9e:3a:99:35:8a:21:ce:79:95:
c7:78:59:8c:5c:b4:77:2e:11:1d:02:43:a0:c3:69:08:2c:8b:
91:5a:e9:c7:13:ca:6a:65:60:88:2d:6b:0b:ed:21:ef:37:b1:
fb:72:da:20:99:f5:e9:e8:89:d8:b9:92:2a:70:90:6b:2b:7c:
7d:32:7f:5a:b1:33:b7:6e:0e:f5:f8:6d:b7:12:71:8c:c6:0f:
65:a3:64:88:87:9a:cb:0b:f0:30:a8:90:0e:72:8b:3b:77:a3:
60:6f:80:b9:64:d4:92:9a:09:52:78:a0:8a:7f:15:a5:07:3b:
21:c5:5f:37:4e:7f:5e:22:93:20:89:e5:0a:b2:d5:1d:10:95:
e0:a1:57:e2:ba:39:8a:4a:08:1f:5f:a5:c3:dc:ad:c8:33:be:
e8:9f:fa:5d:1a:86:15:7d:f5:8a:37:d4:8c:61:78:fe:2a:ba:
32:25:5b:1b:5b:fb:7c:7a:76:1e:dc:48:0e:56:86:a8:e1:81:
cf:6c:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:09 2026 by rpki-client