Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e20333939393535.roa
File: 3231372e3231372e35322e302f32322d3234203d3e20333939393535.roa (raw, json)
Hash identifier: ZJNW+7u49z+4FTgmV7o7eEcvv5rQToH1x87sGVcAjTM=
Subject key identifier: 2B:33:C3:69:3E:4A:95:4F:4A:BB:F6:D0:D5:3E:87:90:34:AE:1A:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E1E80477B028818B1D666DC88998B0C3A774268
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:24 +0000
ROA not before: Thu 30 Apr 2026 13:41:24 +0000
ROA not after: Thu 29 Apr 2027 13:46:24 +0000
asID: 399955
IP address blocks: 217.217.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1e:80:47:7b:02:88:18:b1:d6:66:dc:88:99:8b:0c:3a:77:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:24 2026 GMT
Not After : Apr 29 13:46:24 2027 GMT
Subject: CN=2B33C3693E4A954F4ABBF6D0D53E879034AE1AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:b0:e0:70:73:15:d3:66:f5:e2:43:ec:9f:
31:00:df:b9:10:0d:53:b3:2f:2b:ca:76:90:db:08:
1a:de:3f:8e:de:a2:6c:1b:e2:6c:a4:73:f8:6c:d3:
96:8d:a5:f5:ba:05:5e:ce:90:2f:17:91:b4:cd:7a:
45:a3:39:f2:56:f5:54:dd:02:53:fc:dd:59:f8:b6:
72:70:89:ac:a1:f7:bb:69:e5:3f:d2:3e:3c:2f:ec:
f9:4a:92:e8:cd:28:18:96:c0:d3:c1:51:5d:b2:16:
ed:82:bb:83:63:f5:9f:88:5c:08:26:3b:60:45:04:
5f:56:07:f1:e2:93:73:c4:93:94:73:47:1a:7b:80:
0e:85:9e:64:97:8e:ca:a4:74:e5:e5:b3:f9:87:e4:
90:9c:9b:ca:70:72:be:d9:b4:3f:03:a1:d8:e8:f0:
06:46:df:30:38:3b:42:77:61:9e:30:12:1c:1c:f4:
f0:cf:20:46:79:a8:e9:5c:35:2e:75:b3:29:1c:4f:
45:51:ac:50:1b:7d:51:cd:65:09:f2:fd:ed:70:b0:
df:b8:0e:b0:f8:c3:ee:41:0a:72:bf:53:e5:01:06:
f2:77:8f:3b:89:72:18:e5:0a:eb:a7:3d:71:19:e4:
8c:10:9a:8c:26:b8:71:94:a0:00:2a:12:1a:5c:7b:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:C3:69:3E:4A:95:4F:4A:BB:F6:D0:D5:3E:87:90:34:AE:1A:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.52.0/22
Signature Algorithm: sha256WithRSAEncryption
79:cb:65:9f:d4:1d:9e:4a:a9:9d:49:a3:45:0d:e6:ec:78:55:
91:d6:ca:b7:58:74:da:aa:1e:96:15:38:30:63:da:46:2d:c2:
af:63:ac:98:b4:0c:d8:bc:00:3a:71:3b:8f:01:80:0a:29:d1:
e8:2d:ed:ab:ba:5a:8d:ca:f3:c7:f8:ff:e6:04:7c:44:0f:6d:
88:da:a3:f0:b5:c6:a0:f4:bc:a1:3d:20:5d:cc:7f:e6:ae:5e:
2c:f8:01:8a:26:45:b1:31:1d:3d:d2:c5:ca:cf:10:34:65:f6:
1f:ff:80:a6:24:a6:a8:e5:c7:e3:80:00:69:fc:3c:2a:dc:ff:
e6:8b:bf:32:e6:29:ce:f1:d4:fd:15:3b:58:f6:c1:4b:da:62:
ea:e1:23:ae:f5:bb:8f:3b:f8:77:61:61:8c:84:e5:ce:74:18:
85:7b:ab:b6:96:f6:fc:d9:3d:b1:4d:60:61:5b:66:9a:fc:ed:
53:0d:a6:39:c5:14:f6:9a:a2:e3:14:3d:53:82:44:e3:a4:83:
60:57:71:e7:9b:19:e7:65:d3:d0:6d:2e:cc:b0:b4:97:8f:7b:
66:7e:f1:18:fc:c3:57:75:f9:c2:5a:4a:8c:63:45:47:9b:80:
a2:07:24:9a:15:6c:30:36:43:20:8c:2b:6d:47:ca:d7:f3:fc:
11:8e:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:00 2026 by rpki-client