Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230392e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jrUfZYpC9CW+0arTegdiwrE13SV1G2VRUXsds+u94Hg=
Subject key identifier: C7:AE:DB:5A:6B:9D:35:3C:AE:A2:60:E6:6E:EA:6D:17:0D:1C:8C:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1BC21901EAB16C0147E0EF213F8C60DFE48B88B5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230392e302f32342d3234203d3e20383334.roa
Signing time: Sun 24 May 2026 12:35:37 +0000
ROA not before: Sun 24 May 2026 12:30:37 +0000
ROA not after: Sun 23 May 2027 12:35:37 +0000
asID: 834
IP address blocks: 217.216.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c2:19:01:ea:b1:6c:01:47:e0:ef:21:3f:8c:60:df:e4:8b:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 24 12:30:37 2026 GMT
Not After : May 23 12:35:37 2027 GMT
Subject: CN=C7AEDB5A6B9D353CAEA260E66EEA6D170D1C8CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:6b:df:95:e3:74:1c:a2:42:4d:dc:46:ef:
7f:4c:44:4f:40:02:8c:b2:9f:12:db:0a:31:44:4a:
b9:46:cb:80:48:1f:46:b6:cb:1f:aa:c6:21:a7:bc:
d0:81:8c:2f:33:bb:bc:3a:02:8b:4f:37:c6:15:b0:
89:54:72:fa:66:1e:dd:c9:b9:a3:b0:34:53:27:76:
2d:88:b9:14:5d:88:8f:a4:27:bb:1d:82:ef:69:82:
b0:1e:ef:30:18:f2:e9:59:5e:e1:95:38:fc:18:b3:
c0:a8:69:6f:0b:1d:31:a6:ae:00:a7:e5:c3:47:ee:
02:1e:66:72:18:fc:c7:4c:9b:f6:a8:0e:33:d2:56:
b0:28:de:d8:3e:5a:9d:5c:8b:e5:93:e3:d2:cf:dd:
90:9f:f1:d8:1d:12:10:5f:6e:43:d8:5b:ce:95:28:
77:47:fa:83:2c:36:b0:a9:95:b1:9d:b0:79:4c:cb:
49:f6:3b:a7:50:c0:4e:38:e7:53:56:11:78:6c:61:
ac:57:e3:d9:79:57:aa:44:b7:0b:44:ff:e9:d2:aa:
c8:6c:27:fa:8b:6d:72:10:37:e3:8b:6a:b5:fb:1a:
21:16:0f:03:9c:9c:eb:52:cb:1c:59:89:ad:fb:94:
eb:f2:5d:5b:36:d3:8d:b7:31:18:4e:b3:b2:4d:b0:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AE:DB:5A:6B:9D:35:3C:AE:A2:60:E6:6E:EA:6D:17:0D:1C:8C:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cb:b7:28:33:6f:60:33:97:de:a3:67:17:f5:b0:c7:a3:92:
01:98:b9:5d:fd:83:87:b3:43:b3:cd:bc:4d:f9:4e:8c:28:3d:
65:e4:29:1a:52:06:fe:a2:ce:6a:57:a7:30:c7:81:98:3a:2f:
b5:99:d6:0c:63:52:b1:35:d1:17:5c:54:13:fd:59:9d:19:14:
ec:a8:21:15:6f:7f:38:21:b9:14:47:ee:cc:6b:59:75:95:1a:
01:b8:98:69:a5:01:8e:43:68:55:a2:59:28:a8:2f:f0:72:1c:
c8:5d:44:cc:36:86:93:3e:4f:4b:70:cc:9d:f9:fd:50:6b:7d:
a7:41:c1:ea:79:f7:fe:3f:35:86:70:ee:f4:fe:ff:f9:11:6e:
cc:23:d8:c3:f3:70:71:c9:c4:93:a6:61:a2:01:65:41:5c:11:
e0:81:85:78:35:11:0d:b6:f7:92:54:37:49:c6:d9:46:74:5f:
00:57:30:54:eb:69:5f:c2:cd:66:4b:be:e9:8e:97:e6:e1:fd:
65:a8:5e:63:16:a1:f3:d5:30:2b:be:22:2b:c1:ac:34:6e:46:
91:25:90:21:5a:d1:30:99:f8:8d:30:2a:7d:92:22:64:ce:4c:
67:6d:2a:3f:51:40:59:12:8f:a6:0d:21:33:de:fe:5f:fe:a8:
1d:72:fe:69
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUG8IZAeqxbAFH4O8hP4xg3+SLiLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MjQxMjMwMzdaFw0yNzA1MjMxMjM1MzdaMDMxMTAvBgNV
BAMTKEM3QUVEQjVBNkI5RDM1M0NBRUEyNjBFNjZFRUE2RDE3MEQxQzhDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMGvfleN0HKJCTdxG739MRE9A
AoyynxLbCjFESrlGy4BIH0a2yx+qxiGnvNCBjC8zu7w6AotPN8YVsIlUcvpmHt3J
uaOwNFMndi2IuRRdiI+kJ7sdgu9pgrAe7zAY8ulZXuGVOPwYs8CoaW8LHTGmrgCn
5cNH7gIeZnIY/MdMm/aoDjPSVrAo3tg+Wp1ci+WT49LP3ZCf8dgdEhBfbkPYW86V
KHdH+oMsNrCplbGdsHlMy0n2O6dQwE4451NWEXhsYaxX49l5V6pEtwtE/+nSqshs
J/qLbXIQN+OLarX7GiEWDwOcnOtSyxxZia37lOvyXVs20423MRhOs7JNsBFLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUx67bWmudNTyuomDmbuptFw0cjL8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnY
0TANBgkqhkiG9w0BAQsFAAOCAQEAesu3KDNvYDOX3qNnF/Wwx6OSAZi5Xf2Dh7ND
s828TflOjCg9ZeQpGlIG/qLOalenMMeBmDovtZnWDGNSsTXRF1xUE/1ZnRkU7Kgh
FW9/OCG5FEfuzGtZdZUaAbiYaaUBjkNoVaJZKKgv8HIcyF1EzDaGkz5PS3DMnfn9
UGt9p0HB6nn3/j81hnDu9P7/+RFuzCPYw/NwccnEk6ZhogFlQVwR4IGFeDURDbb3
klQ3ScbZRnRfAFcwVOtpX8LNZku+6Y6X5uH9ZaheYxah89UwK74iK8GsNG5GkSWQ
IVrRMJn4jTAqfZIiZM5MZ20qP1FAWRKPpg0hM97+X/6oHXL+aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:00 2026 by rpki-client