Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e2036303739.roa
File: 3231372e3231372e35362e302f32322d3234203d3e2036303739.roa (raw, json)
Hash identifier: o2V466VC5TnxzJw0ijMgkDWy1LA+hu4a6RGcLi3w80M=
Subject key identifier: 20:57:64:03:A6:20:22:43:47:04:F6:98:43:8C:5D:8A:4D:90:56:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5561E82F0A54C4FB2FC707FDAA2843D05083A5D4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e2036303739.roa
Signing time: Mon 27 Apr 2026 08:18:43 +0000
ROA not before: Mon 27 Apr 2026 08:13:43 +0000
ROA not after: Mon 26 Apr 2027 08:18:43 +0000
asID: 6079
IP address blocks: 217.217.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:61:e8:2f:0a:54:c4:fb:2f:c7:07:fd:aa:28:43:d0:50:83:a5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 27 08:13:43 2026 GMT
Not After : Apr 26 08:18:43 2027 GMT
Subject: CN=20576403A62022434704F698438C5D8A4D905619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:bc:53:d5:7a:fc:45:c1:3d:f7:b9:4a:4d:
36:4c:06:94:31:a8:03:c9:cb:7c:9b:97:1f:76:d8:
6b:70:c2:48:6e:dc:c9:28:b8:53:38:2d:68:44:96:
f4:ab:d6:80:e0:b9:0c:72:6e:45:29:16:a5:d4:d1:
86:8c:df:b4:e1:49:ff:0f:8e:c6:21:6f:58:09:0f:
ee:82:02:e9:f0:f5:62:9c:01:43:c9:e1:e5:31:a6:
4c:e9:1d:08:b0:90:1d:1a:bc:f2:8f:98:a4:16:0d:
3f:a2:3c:57:47:f9:3e:3f:95:fc:06:ec:94:04:f4:
76:74:7a:f4:3d:4e:40:8c:cf:d9:eb:29:d1:ff:64:
39:5a:a5:f7:70:3f:eb:0b:18:c5:d8:81:74:6d:fd:
06:f3:b3:2e:d8:50:87:28:31:40:3d:8e:41:e0:e2:
5e:9c:1e:8a:27:73:38:c2:d8:a4:4f:a2:2f:9c:0e:
5e:1d:76:72:27:ba:3d:2b:03:8b:37:9d:08:b1:81:
3a:74:33:ec:7a:60:48:1e:06:4c:43:0e:bb:9a:2f:
91:78:9d:89:c1:d6:0e:18:b2:f5:65:ef:c0:45:43:
96:52:ad:43:39:10:d1:11:c5:82:f2:1c:9d:69:4a:
86:dc:8a:95:9d:67:eb:82:b8:89:1f:2a:bb:83:b3:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:64:03:A6:20:22:43:47:04:F6:98:43:8C:5D:8A:4D:90:56:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ea:d9:8f:57:4f:ff:e7:50:d6:9a:65:0b:e8:f6:4a:04:b4:
d5:e0:c0:fa:6b:60:a5:43:89:f7:cc:33:12:45:5c:39:48:73:
1b:bb:e9:9e:97:7d:fc:9b:ff:c5:4b:a4:e2:b9:67:a5:3d:4e:
50:9e:0f:35:b5:e0:f9:c7:e3:9c:37:4a:84:7b:4f:e9:4a:84:
54:82:61:1c:44:75:50:64:6b:57:06:09:09:1b:9a:cd:b6:57:
90:26:c1:24:f0:24:44:51:21:68:34:f2:95:90:6f:7c:91:42:
28:bc:7f:24:cf:50:18:60:53:c4:9e:8d:ff:7e:14:7f:29:bd:
73:78:44:11:f0:17:06:67:13:82:4c:76:d8:02:ea:f3:af:97:
75:8a:b4:c1:9a:71:4b:41:16:ff:61:dd:99:66:7b:6f:d7:d9:
00:c1:5e:6c:c7:6c:77:5d:43:4d:ee:15:2f:30:84:78:9e:27:
11:9a:1b:d2:ea:64:99:ab:93:ba:3d:1d:af:5c:47:08:8b:43:
f6:71:5d:28:33:2b:64:e1:10:ca:57:24:72:30:ce:d6:03:9e:
de:56:a6:45:62:58:34:e9:c2:e4:27:8e:a3:37:00:3d:5d:a7:
79:2f:fe:9f:cd:b6:12:9e:00:17:9d:97:54:e4:00:b8:41:88:
1e:a3:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:43 2026 by rpki-client