Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e203133333437.roa
File: 3231372e3231362e3138342e302f32312d3234203d3e203133333437.roa (raw, json)
Hash identifier: FUlCHBNQHOZ+AjWg/pJ2cQ9/xLStMoigZW/0/SgP11Y=
Subject key identifier: 0B:2A:05:64:57:CD:75:05:79:09:7D:6A:4E:79:0A:D7:90:EC:7F:2F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22A0B851A0F25EFD14FD9625FD53ECCB0462EB33
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e203133333437.roa
Signing time: Fri 10 Jul 2026 22:48:38 +0000
ROA not before: Fri 10 Jul 2026 22:43:38 +0000
ROA not after: Fri 09 Jul 2027 22:48:38 +0000
asID: 13347
IP address blocks: 217.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a0:b8:51:a0:f2:5e:fd:14:fd:96:25:fd:53:ec:cb:04:62:eb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:43:38 2026 GMT
Not After : Jul 9 22:48:38 2027 GMT
Subject: CN=0B2A056457CD750579097D6A4E790AD790EC7F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:ab:14:11:30:89:ba:05:51:5e:b7:83:31:
6c:56:24:f6:cd:8a:ef:95:49:c0:88:dd:1f:00:1c:
63:be:4f:46:36:ba:86:db:55:03:94:87:05:1e:aa:
a3:bf:1b:33:00:45:ff:92:47:ce:65:5b:61:6b:ec:
fd:70:b7:14:03:c0:4a:d0:3a:05:f8:33:76:9c:99:
50:ae:55:c7:90:ad:36:7b:23:38:7e:a9:29:c6:ca:
55:6c:5e:20:14:01:cc:44:cd:17:a1:21:b5:31:08:
00:c9:ff:61:fc:8b:1d:8b:e0:cb:68:b4:55:fa:b9:
a7:9b:5a:c4:a5:dc:b2:b0:17:52:52:70:85:1a:40:
4a:45:01:bf:bb:db:de:62:36:7d:34:81:af:5e:9a:
25:60:c5:80:3b:87:8d:a2:13:c0:ba:9e:e1:8e:56:
34:84:c4:b2:da:3f:a0:21:b9:ce:16:12:e1:a0:5b:
93:53:09:fd:76:c1:7f:50:44:ee:7b:9a:42:5f:b8:
c3:71:b6:19:23:df:97:da:ad:09:26:40:6a:00:26:
01:33:b3:2a:6e:ae:3e:65:fa:94:8b:22:8a:ab:85:
a1:2b:de:af:65:3e:00:e4:0d:0d:ad:9c:87:da:f4:
7f:cc:c6:b5:d8:ca:a0:d7:af:35:cd:2b:f5:d5:ca:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:05:64:57:CD:75:05:79:09:7D:6A:4E:79:0A:D7:90:EC:7F:2F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
64:9a:29:3a:41:93:08:c0:7f:f9:e7:5c:92:df:fd:88:8d:ba:
ce:a6:5a:fb:c1:66:90:10:be:b4:c9:10:9a:43:85:cc:3b:69:
64:dd:76:2c:57:71:0b:fe:be:04:84:3c:85:9d:b7:1e:a1:e3:
ef:99:dc:02:d4:cb:41:06:08:8b:b0:5d:85:ba:17:cd:63:b9:
63:97:d0:9a:d6:43:d3:cc:7d:97:a2:38:d0:6b:26:41:c2:76:
98:b8:36:81:a9:12:d7:04:b7:7f:92:b4:4d:de:76:34:df:ca:
a5:75:f1:48:f8:5c:f5:5c:99:20:87:8f:75:94:ae:6f:32:ba:
98:d3:a4:5f:b7:41:4a:f2:de:e4:30:9e:cc:f3:e4:eb:55:dd:
5d:e2:29:5f:05:61:26:d6:2f:be:10:ed:31:96:d4:d6:5f:aa:
50:d2:d3:c4:08:1b:9f:3b:01:ed:43:5b:9c:77:b7:d1:fe:c0:
80:32:c0:7f:f0:44:b1:d3:ad:ef:b1:d7:a3:fe:16:12:d0:7c:
88:29:1f:0a:57:be:b9:57:18:9a:bd:dc:02:c6:37:4b:61:76:
83:fe:b7:58:8e:d7:6d:3a:1f:14:1c:1f:75:f0:a4:30:6b:e1:
e8:16:64:30:57:1a:2b:9a:02:d9:c8:43:17:fc:1c:1c:25:d0:
6b:3c:00:81
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIqC4UaDyXv0U/ZYl/VPsywRi6zMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MTAyMjQzMzhaFw0yNzA3MDkyMjQ4MzhaMDMxMTAvBgNV
BAMTKDBCMkEwNTY0NTdDRDc1MDU3OTA5N0Q2QTRFNzkwQUQ3OTBFQzdGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYqsUETCJugVRXreDMWxWJPbN
iu+VScCI3R8AHGO+T0Y2uobbVQOUhwUeqqO/GzMARf+SR85lW2Fr7P1wtxQDwErQ
OgX4M3acmVCuVceQrTZ7Izh+qSnGylVsXiAUAcxEzRehIbUxCADJ/2H8ix2L4Mto
tFX6uaebWsSl3LKwF1JScIUaQEpFAb+7295iNn00ga9emiVgxYA7h42iE8C6nuGO
VjSExLLaP6Ahuc4WEuGgW5NTCf12wX9QRO57mkJfuMNxthkj35farQkmQGoAJgEz
sypurj5l+pSLIoqrhaEr3q9lPgDkDQ2tnIfa9H/MxrXYyqDXrzXNK/XVynMpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUCyoFZFfNdQV5CX1qTnkK15Dsfy8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzgzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzMzMzM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAPZ2LgwDQYJKoZIhvcNAQELBQADggEBAGSaKTpBkwjAf/nnXJLf/YiNus6mWvvB
ZpAQvrTJEJpDhcw7aWTddixXcQv+vgSEPIWdtx6h4++Z3ALUy0EGCIuwXYW6F81j
uWOX0JrWQ9PMfZeiONBrJkHCdpi4NoGpEtcEt3+StE3edjTfyqV18Uj4XPVcmSCH
j3WUrm8yupjTpF+3QUry3uQwnszz5OtV3V3iKV8FYSbWL74Q7TGW1NZfqlDS08QI
G587Ae1DW5x3t9H+wIAywH/wRLHTre+x16P+FhLQfIgpHwpXvrlXGJq93ALGN0th
doP+t1iO1206HxQcH3XwpDBr4egWZDBXGiuaAtnIQxf8HBwl0Gs8AIE=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:46 2026 by rpki-client