Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31372e302f32342d3234203d3e203239343035.roa
File: 3231372e37332e31372e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: DDST7kks9q2ds1FaT+50IBJBBJX55AtusDnbq0N98fU=
Subject key identifier: 71:07:A5:A1:45:AC:3F:CA:FD:AD:0B:6B:BD:DB:6C:AA:3C:57:B5:F5
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 6F6CFAC70A1F1E29DE5E86A00AE13B9847E9B7B1
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31372e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:15 +0000
ROA not before: Tue 08 Sep 2026 07:15:15 +0000
ROA not after: Tue 07 Sep 2027 07:20:15 +0000
asID: 29405
IP address blocks: 217.73.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6c:fa:c7:0a:1f:1e:29:de:5e:86:a0:0a:e1:3b:98:47:e9:b7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:15 2026 GMT
Not After : Sep 7 07:20:15 2027 GMT
Subject: CN=7107A5A145AC3FCAFDAD0B6BBDDB6CAA3C57B5F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:ed:b5:d8:db:f8:92:99:bc:cf:77:6c:6f:
7e:15:fe:ee:68:3d:60:39:86:91:ca:aa:09:c9:17:
ed:1c:ef:75:0c:18:cd:f0:b9:6b:95:23:c2:bd:56:
1f:51:76:3f:0b:3b:8a:96:a1:e9:2d:44:3f:6d:b2:
d3:99:f1:e7:27:a0:36:95:9b:74:6d:2d:ea:a0:30:
2a:a2:27:d7:bf:11:21:fa:e4:0d:b9:29:da:d0:17:
06:5c:a4:2c:7c:c2:77:fb:a8:68:5a:4e:4b:29:4f:
9c:ef:68:5a:95:a3:7a:ab:ef:4a:ce:44:09:f4:7d:
2f:28:93:bc:27:e2:94:d5:62:3f:68:b4:22:36:58:
03:74:85:9a:0f:5f:68:74:19:0d:70:f8:db:6b:5f:
af:18:90:ff:7f:8f:ea:78:41:28:b7:d6:6e:1c:32:
83:10:a7:97:02:4f:6d:80:8c:97:62:f0:33:24:70:
64:6e:28:53:ff:d9:9d:61:45:12:be:67:97:a9:24:
26:5c:28:33:db:35:ab:01:e6:ae:4f:e6:44:53:97:
50:7a:3d:17:80:2d:ca:dd:41:8d:81:dc:d6:60:46:
fb:91:1b:72:ae:70:c7:64:1b:ff:2b:ab:4a:eb:0b:
9d:c4:c8:7d:37:6e:91:3d:22:2c:de:52:64:3f:a9:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:07:A5:A1:45:AC:3F:CA:FD:AD:0B:6B:BD:DB:6C:AA:3C:57:B5:F5
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31372e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.17.0/24
Signature Algorithm: sha256WithRSAEncryption
25:de:77:41:3d:62:a6:c4:b5:a6:ca:8a:37:f4:00:d1:b7:4b:
7c:6f:94:e5:02:4a:38:4c:88:29:4f:2a:5d:c8:cf:53:2a:8d:
f9:81:ad:15:14:a4:9b:26:a4:29:ad:32:76:66:27:10:9c:45:
ec:41:f9:0e:fd:a6:8b:20:6f:a4:ea:bf:76:c3:3a:07:e2:f2:
a2:12:75:cc:32:6a:9a:c2:08:ef:20:f5:a8:f4:2e:eb:97:30:
76:5b:c3:ee:5a:3f:95:28:8e:8d:e4:44:94:c6:8c:c0:0c:01:
4a:29:fb:96:6e:30:55:06:f4:24:a7:1a:ad:68:f3:67:0f:58:
b6:59:be:fe:0e:a1:d3:8c:5a:70:e4:33:44:96:d7:5d:a0:bb:
98:19:ad:60:d5:dd:ff:f7:a2:16:2c:62:a7:62:b6:88:17:97:
50:61:b7:49:f6:b7:39:25:89:f2:ed:44:1c:93:27:64:13:6b:
0c:46:31:f3:bb:83:c6:06:a5:37:b6:3c:5a:a8:6a:7e:09:f7:
df:1a:d2:a2:f7:70:48:fd:96:b5:0f:de:66:63:44:69:27:3a:
7a:d3:d4:4e:48:be:07:f7:4a:3a:a8:c8:9d:8a:98:0f:8f:c1:
e8:0e:70:d9:dd:73:d5:0e:7f:c3:6e:96:53:02:b7:76:95:f8:
b0:89:76:5f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUb2z6xwofHineXoagCuE7mEfpt7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj
YjA1Yjg2NjAeFw0yNjA5MDgwNzE1MTVaFw0yNzA5MDcwNzIwMTVaMDMxMTAvBgNV
BAMTKDcxMDdBNUExNDVBQzNGQ0FGREFEMEI2QkJEREI2Q0FBM0M1N0I1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNe212Nv4kpm8z3dsb34V/u5o
PWA5hpHKqgnJF+0c73UMGM3wuWuVI8K9Vh9Rdj8LO4qWoektRD9tstOZ8ecnoDaV
m3RtLeqgMCqiJ9e/ESH65A25KdrQFwZcpCx8wnf7qGhaTkspT5zvaFqVo3qr70rO
RAn0fS8ok7wn4pTVYj9otCI2WAN0hZoPX2h0GQ1w+NtrX68YkP9/j+p4QSi31m4c
MoMQp5cCT22AjJdi8DMkcGRuKFP/2Z1hRRK+Z5epJCZcKDPbNasB5q5P5kRTl1B6
PReALcrdQY2B3NZgRvuRG3KucMdkG/8rq0rrC53EyH03bpE9IizeUmQ/qbdHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUcQeloUWsP8r9rQtrvdtsqjxXtfUwHwYDVR0j
BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2
M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz
RnVHWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzVhMGVmZjIt
YjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2M2UwLzAvMzIzMTM3MmUzNzMzMmUzMTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM0MzAzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANlJ
ETANBgkqhkiG9w0BAQsFAAOCAQEAJd53QT1ipsS1psqKN/QA0bdLfG+U5QJKOEyI
KU8qXcjPUyqN+YGtFRSkmyakKa0ydmYnEJxF7EH5Dv2miyBvpOq/dsM6B+LyohJ1
zDJqmsII7yD1qPQu65cwdlvD7lo/lSiOjeRElMaMwAwBSin7lm4wVQb0JKcarWjz
Zw9Ytlm+/g6h04xacOQzRJbXXaC7mBmtYNXd//eiFixip2K2iBeXUGG3Sfa3OSWJ
8u1EHJMnZBNrDEYx87uDxgalN7Y8Wqhqfgn33xrSovdwSP2WtQ/eZmNEaSc6etPU
Tki+B/dKOqjInYqYD4/B6A5w2d1z1Q5/w26WUwK3dpX4sIl2Xw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:08 2026 by rpki-client