Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e20333939393535.roa
File: 3231372e3231372e36302e302f32322d3234203d3e20333939393535.roa (raw, json)
Hash identifier: nzjprnbIw7ZALAWWwcmK+7gpLRRk8hvQlIFU9/JbTL4=
Subject key identifier: E0:76:CF:46:29:43:B0:F2:57:9A:CE:08:95:3B:D5:0D:8E:0D:13:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28F1A8B47480AE1C0CC8CC9126E2961B48BA512C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:22 +0000
ROA not before: Thu 30 Apr 2026 13:41:22 +0000
ROA not after: Thu 29 Apr 2027 13:46:22 +0000
asID: 399955
IP address blocks: 217.217.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f1:a8:b4:74:80:ae:1c:0c:c8:cc:91:26:e2:96:1b:48:ba:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:22 2026 GMT
Not After : Apr 29 13:46:22 2027 GMT
Subject: CN=E076CF462943B0F2579ACE08953BD50D8E0D1379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:19:b9:8e:eb:31:b3:3a:a2:a4:25:2d:e4:
e7:18:d1:31:c0:d2:26:41:8f:a1:06:19:16:ca:7d:
c6:9b:96:0e:b8:bc:cf:be:bf:54:5b:ae:60:91:ac:
d1:ce:d5:56:34:50:1c:9b:77:54:fa:58:38:0a:a7:
86:ec:c6:c9:13:c3:00:d1:e7:39:37:28:f0:9d:fc:
aa:ae:14:c8:58:89:45:78:3f:01:ce:7f:26:fa:7d:
12:3f:06:64:e1:39:fd:0d:d3:23:7e:8a:7f:05:20:
fc:69:68:bf:aa:fb:ae:c2:bd:15:32:98:17:71:fb:
2d:7c:9e:e3:9c:e4:ec:30:f9:81:7a:2a:d6:55:70:
e5:a4:f6:d8:e9:92:d9:35:c8:fe:8a:76:a5:39:29:
a3:05:e5:22:55:cf:af:26:df:5e:34:2f:92:91:25:
b7:23:f8:a9:00:ce:af:03:1b:2b:74:96:b0:34:53:
be:dc:01:fb:e2:c0:de:0b:cf:4b:91:18:f9:09:4a:
13:a2:16:62:95:96:57:fd:c3:8f:df:f1:17:49:c6:
c2:d2:b5:50:00:7a:a9:05:c3:84:a1:41:bf:c4:71:
47:06:ae:f3:61:1c:d1:3e:3d:db:11:a2:3e:a1:9a:
27:26:34:aa:77:fb:f1:c2:cc:0e:61:98:3f:ff:7a:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:CF:46:29:43:B0:F2:57:9A:CE:08:95:3B:D5:0D:8E:0D:13:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.60.0/22
Signature Algorithm: sha256WithRSAEncryption
84:31:5e:82:6c:81:2a:ec:67:d6:69:cb:e7:ea:e7:dc:33:0d:
85:1d:b4:e1:3f:c4:70:52:b3:9c:f6:45:fa:9c:b1:7f:2a:9d:
1a:f4:a4:15:d4:05:38:c0:53:9a:13:e9:53:96:47:8d:01:3d:
96:de:b8:59:49:b8:f4:b7:62:73:bd:c4:02:98:bb:94:f0:9e:
9f:bd:dc:9a:b5:e0:5a:44:2a:d9:56:93:6d:fd:e5:ab:95:14:
8f:d4:71:d9:2f:c5:f1:7e:87:f9:c5:eb:84:c2:fa:3a:fc:18:
a0:c2:58:8b:8b:c3:e0:9f:79:0d:eb:5c:02:3d:ca:91:6d:34:
e0:4f:15:57:0a:35:4a:ae:e0:7a:8c:f8:e5:3d:7b:92:a0:6f:
83:f4:c8:f6:e2:bd:d3:5d:6c:cc:50:d5:ff:26:44:63:11:b7:
5d:22:fa:4d:4f:cb:a2:cb:36:cb:af:42:7f:d4:24:88:f4:ce:
17:d9:3d:3e:3c:89:ee:55:95:2b:db:eb:65:71:b1:5b:a0:4a:
35:3d:53:e3:c3:dc:c0:21:34:a0:8e:e7:67:3c:39:dc:20:02:
60:10:57:e5:f6:81:ad:e7:ec:54:00:2c:39:85:2b:9e:ac:65:
92:04:df:ca:7a:a1:6d:35:dc:40:50:ea:81:a0:87:68:78:f6:
3b:04:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:13 2026 by rpki-client