Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e2037303239.roa
File: 3231372e3231362e3138342e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: 23oqFQzJxfSng/a8SkuyhxEbQP1y5waWm/Gc6vNjIfM=
Subject key identifier: 7C:0A:69:6E:F5:98:AA:A0:55:E2:CE:2F:E1:43:B8:AA:B1:CC:DA:0D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76AE1419269FC55CC642D68EB323339152015C4E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e2037303239.roa
Signing time: Sat 11 Jul 2026 09:08:55 +0000
ROA not before: Sat 11 Jul 2026 09:03:55 +0000
ROA not after: Sat 10 Jul 2027 09:08:55 +0000
asID: 7029
IP address blocks: 217.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ae:14:19:26:9f:c5:5c:c6:42:d6:8e:b3:23:33:91:52:01:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 09:03:55 2026 GMT
Not After : Jul 10 09:08:55 2027 GMT
Subject: CN=7C0A696EF598AAA055E2CE2FE143B8AAB1CCDA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:22:4b:b0:4e:1d:da:0f:c0:4d:58:2c:60:
1a:a0:25:80:53:de:eb:89:f1:ef:91:f0:c5:90:20:
74:87:bc:6b:3c:79:a0:c6:6a:ed:23:d9:27:12:75:
da:c3:4e:23:58:9c:30:02:d9:08:ea:ea:40:1a:dc:
e1:e3:27:22:b8:c1:29:23:83:03:5d:af:d6:a5:59:
6e:f5:9c:0b:d8:ab:22:5a:e2:51:db:90:32:86:72:
77:32:ec:c1:f8:07:fa:e4:c9:a9:7b:fc:2c:f6:9c:
34:30:1d:ec:39:58:2a:d6:f6:30:c2:ac:25:5c:73:
9d:17:7c:33:bd:ee:3a:6a:9c:10:a5:6c:ba:a9:25:
7b:87:2c:d1:b8:df:09:8f:d9:3a:6b:82:7d:e2:c4:
64:f7:70:56:c7:c2:3b:b0:6a:77:5c:3d:eb:21:ff:
88:37:75:89:b5:b6:fd:70:39:9c:33:fc:46:91:41:
d1:e6:09:3e:6c:80:5c:d5:dd:73:c9:5f:a3:01:c5:
99:2a:ee:72:3c:43:b6:e4:01:ff:c4:07:dd:dc:df:
14:81:8c:da:80:b1:4f:6d:5d:59:61:39:d7:89:d1:
7d:d0:2d:02:65:6e:68:e3:47:fd:78:e2:6b:ee:8a:
a8:1a:3c:d8:b2:b3:17:4a:e2:d8:53:b4:2e:e2:5e:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:69:6E:F5:98:AA:A0:55:E2:CE:2F:E1:43:B8:AA:B1:CC:DA:0D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:af:e9:03:cc:20:52:ca:83:5d:34:57:09:01:40:92:b5:89:
11:97:e4:aa:6a:c7:1a:46:ed:a4:bc:bf:0c:9b:cd:23:b1:8e:
e5:0d:af:04:fc:8e:e5:79:37:15:8f:f3:0b:0f:94:21:d5:53:
1c:55:94:51:76:e4:2b:a7:9e:04:32:01:49:43:f6:07:d2:71:
64:1e:88:69:04:db:6d:68:22:40:57:9c:1c:6f:f2:bd:3b:c4:
e5:95:0a:ec:75:6a:8c:7e:94:c9:b5:f1:70:28:d0:c8:84:a9:
30:25:e4:ad:db:1f:3b:e3:ce:41:3d:2b:3e:52:e8:25:94:45:
c2:ae:b7:e2:1b:62:10:3c:2f:74:c1:e7:83:f7:df:fb:6a:25:
87:4a:e2:37:c7:bc:95:65:9e:81:36:4b:b3:a8:0f:d5:b3:22:
a3:e8:1d:3a:5e:43:4c:9a:3c:57:79:9a:b6:7a:b9:90:8b:4e:
c0:2c:97:dd:bc:e3:07:a6:f9:3c:3e:3f:3c:0c:5b:1e:ac:47:
3c:c2:5c:3b:b5:4f:f3:61:f6:36:d8:68:3c:ec:25:c3:4d:ed:
74:fa:db:70:08:81:f9:66:ba:fb:f5:86:56:73:37:ed:a7:db:
6d:4d:25:7f:8f:e8:fa:43:c9:54:9e:e6:c0:26:08:83:6d:7d:
8d:6e:a4:9d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdq4UGSafxVzGQtaOsyMzkVIBXE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MTEwOTAzNTVaFw0yNzA3MTAwOTA4NTVaMDMxMTAvBgNV
BAMTKDdDMEE2OTZFRjU5OEFBQTA1NUUyQ0UyRkUxNDNCOEFBQjFDQ0RBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogCJLsE4d2g/ATVgsYBqgJYBT
3uuJ8e+R8MWQIHSHvGs8eaDGau0j2ScSddrDTiNYnDAC2Qjq6kAa3OHjJyK4wSkj
gwNdr9alWW71nAvYqyJa4lHbkDKGcncy7MH4B/rkyal7/Cz2nDQwHew5WCrW9jDC
rCVcc50XfDO97jpqnBClbLqpJXuHLNG43wmP2Tprgn3ixGT3cFbHwjuwandcPesh
/4g3dYm1tv1wOZwz/EaRQdHmCT5sgFzV3XPJX6MBxZkq7nI8Q7bkAf/EB93c3xSB
jNqAsU9tXVlhOdeJ0X3QLQJlbmjjR/144mvuiqgaPNiysxdK4thTtC7iXnbxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfAppbvWYqqBV4s4v4UO4qrHM2g0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzgzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
2di4MA0GCSqGSIb3DQEBCwUAA4IBAQBrr+kDzCBSyoNdNFcJAUCStYkRl+Sqasca
Ru2kvL8Mm80jsY7lDa8E/I7leTcVj/MLD5Qh1VMcVZRRduQrp54EMgFJQ/YH0nFk
HohpBNttaCJAV5wcb/K9O8TllQrsdWqMfpTJtfFwKNDIhKkwJeSt2x87485BPSs+
UugllEXCrrfiG2IQPC90weeD99/7aiWHSuI3x7yVZZ6BNkuzqA/VsyKj6B06XkNM
mjxXeZq2ermQi07ALJfdvOMHpvk8Pj88DFserEc8wlw7tU/zYfY22Gg87CXDTe10
+ttwCIH5Zrr79YZWczftp9ttTSV/j+j6Q8lUnubAJgiDbX2NbqSd
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client