Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20343031333632.roa
File: 3231372e3231372e3230322e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: tdAxZb8bDxl0QBUyh4iZIrWCLtvR5+ifxgfSP95J514=
Subject key identifier: 36:AA:24:C7:98:F3:33:79:22:74:00:55:07:AD:40:35:60:1C:87:B7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0231C87CB1A75FD8328DAE3E3FCA494CF0968929
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20343031333632.roa
Signing time: Sun 20 Sep 2026 12:16:50 +0000
ROA not before: Sun 20 Sep 2026 12:11:50 +0000
ROA not after: Sun 19 Sep 2027 12:16:50 +0000
asID: 401362
IP address blocks: 217.217.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:31:c8:7c:b1:a7:5f:d8:32:8d:ae:3e:3f:ca:49:4c:f0:96:89:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 12:11:50 2026 GMT
Not After : Sep 19 12:16:50 2027 GMT
Subject: CN=36AA24C798F333792274005507AD4035601C87B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:f6:f8:c9:87:4d:9e:30:cb:18:3d:d0:c4:
71:c6:b2:f2:37:75:86:01:83:b0:b6:88:6f:06:27:
7e:05:97:b1:78:ca:2f:59:16:b2:71:94:9d:a7:2c:
c7:51:4f:ee:be:16:31:2f:fc:68:44:ce:ca:e8:0f:
09:e3:92:aa:25:99:cf:00:d9:3a:59:42:76:fa:72:
53:c6:c7:5e:0e:87:d9:0c:e9:d7:cd:22:9f:5a:f8:
d9:da:df:bc:42:a1:f0:59:00:cd:61:39:79:19:7c:
26:ed:32:2e:59:9c:21:6a:44:66:ef:dc:0e:60:53:
c6:a5:ce:81:fc:8b:83:91:aa:62:fa:14:eb:da:71:
52:7c:1c:a3:41:26:cf:51:2d:0d:5e:e7:3e:a2:98:
90:87:48:68:3d:f6:54:ee:99:33:57:fd:e7:c3:be:
c7:a7:68:cf:ee:db:77:33:04:b2:89:24:f0:35:16:
c6:61:86:77:0b:c8:72:e8:46:4a:56:c3:16:dc:a0:
b6:f2:11:cc:37:21:9c:d8:eb:8b:ea:8e:48:1f:f6:
df:b2:ce:15:1e:c5:45:89:15:4d:15:bb:3c:a7:f5:
ab:8b:67:e3:12:21:95:75:47:2e:19:39:e4:7d:d9:
ca:d2:76:ea:dc:1c:9a:9d:a9:a7:2b:ef:1c:1f:b3:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:24:C7:98:F3:33:79:22:74:00:55:07:AD:40:35:60:1C:87:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
23:65:68:48:f2:cc:ab:7a:3c:08:a9:23:6d:eb:7b:3c:db:0c:
f3:4e:96:5d:cc:a3:72:9a:e8:72:cb:87:5d:73:fc:8b:64:dc:
5d:8d:4f:f1:d5:fa:35:b4:9b:77:f7:9b:97:d6:47:e3:62:f6:
0f:51:25:ec:63:73:06:5e:b2:ec:fa:dd:86:43:2f:ca:91:c6:
19:40:cf:83:60:43:6d:cf:33:e9:73:6b:8f:11:44:8f:d4:f4:
e3:76:c1:38:f5:37:bb:78:31:b7:85:14:9a:09:40:27:9a:47:
6e:c0:45:e8:f1:1e:7d:d6:2b:89:80:58:4d:eb:fc:b7:7a:71:
88:70:80:46:d1:50:c4:c1:94:5e:a7:c1:27:3a:d0:8a:67:86:
20:76:f0:2b:b0:49:fb:be:52:ff:2e:40:bf:c5:79:aa:b0:02:
33:69:bd:10:c2:e9:3c:7a:a5:7d:80:36:2b:65:51:b0:e3:56:
f9:f7:28:33:94:08:a5:18:dd:57:97:50:d2:d7:79:c3:db:d4:
fa:61:f1:5c:df:86:94:b8:75:63:89:54:63:ee:11:a7:7a:19:
fe:a3:d0:6d:b0:d8:fe:ce:36:87:ca:3f:b7:09:73:36:ec:96:
f3:49:e8:19:4b:2c:ef:58:51:67:b2:d4:bb:2a:d1:52:ef:6f:
f3:b4:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:48 2026 by rpki-client