Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32342d3234203d3e203230343733.roa
File: 3231372e3231372e38302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: u7Qfv4XziCKkgTs86QNwmVsW8aPWKpRaI+YHaaL4F2A=
Subject key identifier: 2E:65:1F:3F:66:48:0D:78:35:A1:DE:92:A5:D4:AE:22:AE:D6:D3:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 508934B10E1F8E449CB4E62C564C7C68958430D4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32342d3234203d3e203230343733.roa
Signing time: Sat 07 Nov 2026 19:32:30 +0000
ROA not before: Sat 07 Nov 2026 19:27:30 +0000
ROA not after: Sat 06 Nov 2027 19:32:30 +0000
asID: 20473
IP address blocks: 217.217.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:89:34:b1:0e:1f:8e:44:9c:b4:e6:2c:56:4c:7c:68:95:84:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 7 19:27:30 2026 GMT
Not After : Nov 6 19:32:30 2027 GMT
Subject: CN=2E651F3F66480D7835A1DE92A5D4AE22AED6D38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:aa:bc:ee:a3:1b:1c:d8:65:ab:8e:0f:43:
f2:35:78:34:9c:d5:48:45:5d:69:aa:e0:20:55:f0:
b7:34:74:d2:0d:b3:70:d8:d0:8e:22:18:86:0e:7b:
57:9f:f5:47:32:d2:0c:20:23:2e:8a:1a:0f:08:3f:
c8:7c:21:58:d7:cf:c8:39:13:bc:1c:24:44:80:e2:
bd:1b:f6:ca:81:67:b5:00:65:5b:a5:18:88:1d:bf:
5d:49:22:68:c0:19:df:15:34:a5:a7:10:9a:b8:46:
d3:6a:46:74:38:4d:eb:9b:61:66:99:4c:94:27:fd:
1a:63:4a:be:1f:ff:52:5a:a2:22:0c:c8:a1:87:6d:
32:42:92:75:02:54:37:b0:87:7f:67:78:17:a2:50:
29:98:f4:6e:4e:6c:e7:b0:de:5d:32:96:ba:17:ae:
72:3c:ef:77:1b:6c:6f:93:a5:4d:09:53:17:65:aa:
87:ff:60:90:cd:6f:bd:4c:d5:27:02:6b:09:b6:a8:
02:dd:2e:65:89:3d:4c:12:83:ef:8d:6b:b5:5e:48:
b3:00:02:b3:3f:ce:28:31:bd:ee:25:86:0e:29:04:
03:c2:63:8e:b1:52:1e:93:43:7e:f4:a1:63:14:33:
e5:78:16:dc:df:22:e0:c9:5a:4d:80:74:92:e5:84:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:65:1F:3F:66:48:0D:78:35:A1:DE:92:A5:D4:AE:22:AE:D6:D3:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.80.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ff:48:cb:89:36:ec:9d:ae:68:51:17:1e:0d:26:19:ba:8b:
f7:e5:b9:c8:69:6e:55:db:10:6e:5a:44:5a:11:52:24:a9:74:
7a:01:6b:2c:50:d5:b9:81:fd:76:bd:08:a6:1b:d3:33:e3:c9:
68:9d:e4:c1:22:47:27:26:59:76:85:9e:af:4f:4c:df:50:13:
af:56:0e:61:83:76:5b:ff:4d:51:bb:61:31:8d:5e:75:8a:26:
57:2f:19:fa:a9:6a:b1:c4:59:fe:e9:33:d0:95:ee:16:49:92:
bf:2e:32:94:5e:1c:34:07:31:89:48:c7:00:08:40:a8:f1:cd:
d8:99:43:63:1a:b6:62:23:8b:46:93:6a:04:88:b0:84:8e:68:
11:21:90:80:49:25:b7:76:2b:5f:5e:6a:5d:cc:18:54:ef:ba:
51:97:e8:6f:2f:c5:94:fa:cc:dd:b9:d6:2e:5b:d7:32:b8:59:
36:b8:81:df:88:00:9c:a3:5d:ae:71:0d:45:1f:06:07:71:d1:
74:91:7e:46:36:72:89:37:6e:b6:51:08:d7:28:a6:c4:5b:98:
56:49:86:b1:06:66:8d:ee:3b:93:fa:1e:5e:fa:54:1a:f1:d5:
03:c6:cb:47:fa:77:90:66:11:5c:2b:58:80:4b:b2:98:77:c5:
9d:e6:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:28:19 2026 by rpki-client