Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39362e302f32312d3234203d3e20383334.roa
File: 3231372e3231372e39362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: IXXqkfKNmCkJgy6/FSjGx6RUn6MIHTYm7epPuvf1IWo=
Subject key identifier: 60:16:99:46:4B:64:A5:66:A0:5B:E5:BE:B6:12:5F:64:7C:78:50:15
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FDB28A1718983A437EEE95F2AA0DF9727D58BBD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39362e302f32312d3234203d3e20383334.roa
Signing time: Thu 23 Apr 2026 10:11:32 +0000
ROA not before: Thu 23 Apr 2026 10:06:32 +0000
ROA not after: Thu 22 Apr 2027 10:11:32 +0000
asID: 834
IP address blocks: 217.217.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:db:28:a1:71:89:83:a4:37:ee:e9:5f:2a:a0:df:97:27:d5:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 23 10:06:32 2026 GMT
Not After : Apr 22 10:11:32 2027 GMT
Subject: CN=601699464B64A566A05BE5BEB6125F647C785015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:ac:37:a3:cc:4e:85:20:ed:84:b4:c3:96:
06:f2:23:0c:a8:0a:a6:44:20:ca:7f:6e:7d:f0:0a:
a9:0b:c6:4d:77:ef:9a:0a:1f:cd:9c:a5:78:89:40:
b7:0f:2c:26:87:8b:88:80:6a:99:1f:b0:97:da:c4:
a9:19:36:b0:bc:a1:16:40:60:68:b4:1a:65:1b:67:
d9:5f:dc:cc:a8:95:be:97:ce:9c:87:dd:52:10:cb:
f0:a9:7f:e3:f9:be:a0:10:80:7f:c6:ef:55:97:d9:
86:ca:b0:12:c0:1d:98:d9:67:b2:99:fd:8b:aa:cc:
65:db:8f:33:e4:47:01:ef:f2:b1:0e:93:1b:58:8d:
cf:49:93:ab:d1:a4:a1:91:3c:06:b7:bc:b0:b1:41:
bf:14:2d:5d:f1:85:93:64:ff:2a:08:3b:cc:29:5f:
94:e9:72:23:31:b0:d9:28:54:82:ff:c9:e7:b6:13:
da:7d:82:ef:30:7d:ea:ee:9f:0d:d0:13:71:df:1a:
28:9c:fc:3a:9d:c4:be:16:05:c5:9f:e3:fc:ad:fc:
47:d9:d4:58:93:16:28:79:c4:4b:16:c2:7e:91:6a:
c1:bc:71:f8:7d:52:d5:5b:34:db:6b:c0:9a:69:e3:
a6:15:ed:88:54:5b:f4:07:03:b8:f2:a1:63:92:58:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:99:46:4B:64:A5:66:A0:5B:E5:BE:B6:12:5F:64:7C:78:50:15
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.96.0/21
Signature Algorithm: sha256WithRSAEncryption
78:ba:f8:e2:5a:01:ef:d0:34:02:23:c4:e7:73:b3:b6:32:f8:
af:86:04:41:53:f8:5f:5c:0a:91:89:f0:a5:3c:16:46:c9:a2:
93:4f:37:ae:0e:52:a5:e9:f6:12:32:4d:f1:a8:e2:21:fb:8e:
29:5c:98:93:f0:84:0d:5c:02:de:67:67:c8:4c:2e:c1:77:5f:
a3:85:87:6e:e8:f2:05:0b:8f:df:b4:7d:ee:9f:21:2a:be:69:
4c:c0:9a:c7:98:a5:a5:26:71:f6:2a:56:c1:27:df:9c:a1:80:
1c:0d:db:d7:49:3f:4f:1d:45:78:43:aa:29:a5:26:9d:85:0f:
11:b1:6f:44:12:92:78:aa:3a:d6:6a:fe:73:90:88:d1:a1:14:
5b:e7:44:1f:c6:e9:66:9d:57:56:69:d3:f8:bf:d5:7a:2c:d8:
63:eb:e6:10:c4:f2:14:18:7c:65:e5:72:1a:47:55:82:9a:99:
5b:61:27:d2:00:b3:48:db:5f:8d:07:d5:56:a5:84:e0:ca:bf:
1e:7f:d4:aa:14:82:87:46:0a:a4:c9:a9:36:c4:c1:a2:2f:99:
90:01:cb:5a:cc:08:dd:90:90:6e:b2:8f:7f:5c:57:63:23:37:
5f:52:56:3d:42:4b:f0:0e:15:4b:42:19:5a:d9:17:ef:e7:43:
80:e8:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:32 2026 by rpki-client