Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132302e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3132302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Y1ISjsg3chide6nns6J5iBuAIxAiNpr7qJiwV/7pW9w=
Subject key identifier: 00:34:25:54:A8:C0:39:DB:9E:89:71:EA:DA:88:3D:9F:64:C0:60:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3FC95D4DE6D05C439466713E1259260EEA5A36DA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132302e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:49 +0000
ROA not before: Thu 10 Sep 2026 13:23:49 +0000
ROA not after: Thu 09 Sep 2027 13:28:49 +0000
asID: 136787
IP address blocks: 217.216.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c9:5d:4d:e6:d0:5c:43:94:66:71:3e:12:59:26:0e:ea:5a:36:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:49 2026 GMT
Not After : Sep 9 13:28:49 2027 GMT
Subject: CN=00342554A8C039DB9E8971EADA883D9F64C060BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:59:05:89:eb:53:4e:fc:7a:87:0a:c3:33:
18:4d:fe:c8:04:39:45:7d:2a:18:34:2e:ce:48:bf:
2f:f3:40:aa:e4:70:c7:19:a2:c3:38:4f:8f:40:c6:
40:c4:c3:39:5d:98:5b:ff:b1:af:ea:fc:d3:89:d3:
b6:15:57:60:66:92:43:d8:85:20:9e:6c:a8:1e:ce:
20:65:6c:12:fd:0a:ce:40:5c:8f:64:9c:d4:43:07:
d3:04:47:06:bf:0e:a0:b7:cd:54:3c:bb:18:7b:81:
fd:2d:52:b5:31:c8:0c:8f:f3:ee:62:ad:84:98:0e:
57:37:7a:ef:e7:14:21:4d:e8:fe:77:ad:94:9f:15:
f0:41:ff:87:0b:da:3f:d9:a8:13:6a:9e:45:ca:c0:
f7:a7:a1:b2:70:89:51:f3:5c:7b:b8:63:5a:c0:83:
c3:be:bf:5c:17:9c:39:0f:4c:ff:44:f8:b7:de:1f:
f4:4f:37:7c:53:f4:53:ce:81:20:e0:42:a9:ee:b7:
fe:da:9c:8c:8b:4b:78:61:78:6b:d6:27:9a:db:67:
8a:75:74:1f:64:dd:5d:74:bc:78:5c:82:5c:ba:8d:
8a:73:2f:a9:1f:31:cd:a5:db:bb:77:98:a2:ab:a1:
d0:d0:c3:d6:79:0d:49:d4:5c:88:9f:24:18:8f:6e:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:25:54:A8:C0:39:DB:9E:89:71:EA:DA:88:3D:9F:64:C0:60:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f0:cc:5e:78:4e:76:fc:23:f3:86:d6:67:be:14:41:fb:65:
d9:e1:56:6d:2d:94:5c:4f:1e:65:8a:5e:a9:6d:d0:59:01:42:
84:77:11:ef:f8:61:69:07:b3:8f:f9:d9:9e:06:5d:78:89:e4:
97:88:6e:01:3c:ed:db:12:98:b7:90:59:58:41:f9:2e:a9:0d:
cb:4c:02:11:63:68:75:2f:e9:74:48:0e:7e:aa:a6:34:3e:7e:
be:9b:dd:a6:3c:92:26:da:cf:c7:f0:0a:3f:3d:3e:0e:4b:b7:
6f:e6:1e:6d:92:e5:e9:1f:a5:36:a5:69:18:ea:4a:69:a2:7c:
73:79:b4:86:b2:a7:ad:47:9c:25:06:e0:c6:29:e3:7e:04:13:
7d:f2:f6:bf:7e:91:e4:a8:b5:b1:38:73:54:82:8b:f1:6a:fd:
55:f1:22:99:5c:a3:fb:43:20:16:1f:a3:63:78:b8:65:cb:9f:
06:25:8e:c9:29:88:3f:38:34:92:de:ac:c3:77:fc:20:c4:41:
aa:98:55:66:ef:c7:14:db:d0:fb:9e:fd:9b:4b:39:39:52:f0:
93:58:48:00:62:51:c8:12:53:de:8f:9f:76:5c:5a:86:35:ee:
b3:95:a2:dc:de:39:a0:6e:92:ab:73:4a:61:52:9d:d7:34:57:
3d:1b:5c:b6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUP8ldTebQXEOUZnE+ElkmDupaNtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMzIzNDlaFw0yNzA5MDkxMzI4NDlaMDMxMTAvBgNV
BAMTKDAwMzQyNTU0QThDMDM5REI5RTg5NzFFQURBODgzRDlGNjRDMDYwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIC1kFietTTvx6hwrDMxhN/sgE
OUV9Khg0Ls5Ivy/zQKrkcMcZosM4T49AxkDEwzldmFv/sa/q/NOJ07YVV2BmkkPY
hSCebKgeziBlbBL9Cs5AXI9knNRDB9MERwa/DqC3zVQ8uxh7gf0tUrUxyAyP8+5i
rYSYDlc3eu/nFCFN6P53rZSfFfBB/4cL2j/ZqBNqnkXKwPenobJwiVHzXHu4Y1rA
g8O+v1wXnDkPTP9E+LfeH/RPN3xT9FPOgSDgQqnut/7anIyLS3hheGvWJ5rbZ4p1
dB9k3V10vHhcgly6jYpzL6kfMc2l27t3mKKrodDQw9Z5DUnUXIifJBiPbvVdAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUADQlVKjAOdueiXHq2og9n2TAYL4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYeDANBgkqhkiG9w0BAQsFAAOCAQEAKPDMXnhOdvwj84bWZ74UQftl2eFW
bS2UXE8eZYpeqW3QWQFChHcR7/hhaQezj/nZngZdeInkl4huATzt2xKYt5BZWEH5
LqkNy0wCEWNodS/pdEgOfqqmND5+vpvdpjySJtrPx/AKPz0+Dku3b+YebZLl6R+l
NqVpGOpKaaJ8c3m0hrKnrUecJQbgxinjfgQTffL2v36R5Ki1sThzVIKL8Wr9VfEi
mVyj+0MgFh+jY3i4ZcufBiWOySmIPzg0kt6sw3f8IMRBqphVZu/HFNvQ+579m0s5
OVLwk1hIAGJRyBJT3o+fdlxahjXus5Wi3N45oG6Sq3NKYVKd1zRXPRtctg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:07 2026 by rpki-client