Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231372e302f32342d3234203d3e203234393437.roa
File: 3231372e3231362e3231372e302f32342d3234203d3e203234393437.roa (raw, json)
Hash identifier: DyOkSPSe+/KLReroTNKrwvgZXW/cP75E2DJGkRbk+jo=
Subject key identifier: E7:CA:60:0F:06:0D:B7:7C:41:32:F9:33:1E:FA:58:69:97:87:AA:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3BF0FBD1CF5CD3D0966A06CC8446990D8FFEDE22
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231372e302f32342d3234203d3e203234393437.roa
Signing time: Wed 24 Jun 2026 20:14:31 +0000
ROA not before: Wed 24 Jun 2026 20:09:31 +0000
ROA not after: Wed 23 Jun 2027 20:14:31 +0000
asID: 24947
IP address blocks: 217.216.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f0:fb:d1:cf:5c:d3:d0:96:6a:06:cc:84:46:99:0d:8f:fe:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 20:09:31 2026 GMT
Not After : Jun 23 20:14:31 2027 GMT
Subject: CN=E7CA600F060DB77C4132F9331EFA58699787AAC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:9c:e3:44:2e:cf:ca:0f:1e:83:47:71:17:
95:ee:b8:40:65:23:be:b7:9b:b8:ec:f2:15:f3:91:
33:1d:d0:c6:e2:ad:f5:a0:1d:45:c0:ed:4e:a0:a4:
1d:ab:c5:98:bd:43:18:f1:18:f0:9f:ca:28:f6:77:
3b:c8:ae:22:a9:1d:92:1f:9e:20:d5:f7:88:16:f0:
9c:81:e7:95:60:80:aa:4d:53:94:42:ac:50:da:52:
43:dd:a5:92:3f:7d:79:a3:33:89:3f:a3:e9:70:59:
f0:4f:a7:68:ed:5e:74:21:c2:d9:ed:c5:af:78:7b:
89:ab:d6:60:6d:04:c9:5f:aa:dc:98:c3:07:31:27:
ed:70:e6:6e:6d:bc:b1:76:4b:28:50:cb:5d:40:56:
39:c9:6f:98:02:39:d5:a6:d6:24:39:bd:d9:95:60:
c2:dd:6c:fd:be:d5:d1:6d:d6:b9:2a:a1:b1:45:9e:
64:c9:85:5c:00:71:3b:63:17:52:b3:9c:ea:6a:4d:
a4:22:14:81:8d:5c:d9:63:08:aa:98:4f:b3:74:b6:
51:b8:ad:b7:c8:67:c1:ec:0b:49:ce:fe:4e:c8:88:
05:1a:cc:c4:f7:ea:44:a5:b8:aa:02:d1:13:cf:37:
66:7e:b5:94:b8:2d:f2:2c:9f:7b:77:7d:ad:40:03:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:60:0F:06:0D:B7:7C:41:32:F9:33:1E:FA:58:69:97:87:AA:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231372e302f32342d3234203d3e203234393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.217.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4f:4d:2e:6e:94:c0:c1:76:e9:d4:2f:37:e4:35:6c:6c:69:
8c:72:2c:33:b6:69:56:d7:56:03:12:45:d0:da:1b:01:8f:21:
6d:aa:7e:a7:a1:bc:11:5a:7d:7c:df:0a:3f:31:63:53:58:04:
f0:91:8c:a0:c8:6d:fa:a3:d3:21:67:d7:87:3b:5d:4e:13:8a:
4f:18:9c:ab:39:4a:bd:7e:e9:61:f2:f5:09:ce:6f:0b:39:f6:
7c:57:91:24:7a:85:ce:f6:7f:d6:44:da:31:77:43:38:76:1b:
21:14:60:ce:e0:62:54:75:3b:ad:d4:86:3c:38:66:34:81:6d:
4c:3e:85:47:ee:fe:03:3f:fd:0c:b0:5a:c8:dd:7d:e5:19:03:
d2:83:13:5e:84:e3:69:0f:72:57:6e:c5:8e:3d:e2:54:e5:07:
9a:b8:f2:96:6c:71:3a:6c:c4:95:a6:57:ba:20:5b:5d:33:a5:
0a:fc:1f:ab:51:22:ce:d7:50:a7:3e:7a:1f:3d:4b:70:89:db:
1a:73:01:69:d9:2a:5c:c6:06:4a:76:51:ad:a2:71:53:63:88:
25:bd:bf:ed:cb:5a:88:01:41:4f:39:9c:63:0c:e1:e9:ad:6c:
85:98:dc:0f:6d:f6:f6:62:64:72:ec:39:93:99:b5:e4:fc:30:
b1:66:6a:9a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUO/D70c9c09CWagbMhEaZDY/+3iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MjQyMDA5MzFaFw0yNzA2MjMyMDE0MzFaMDMxMTAvBgNV
BAMTKEU3Q0E2MDBGMDYwREI3N0M0MTMyRjkzMzFFRkE1ODY5OTc4N0FBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifZzjRC7Pyg8eg0dxF5XuuEBl
I763m7js8hXzkTMd0MbirfWgHUXA7U6gpB2rxZi9QxjxGPCfyij2dzvIriKpHZIf
niDV94gW8JyB55VggKpNU5RCrFDaUkPdpZI/fXmjM4k/o+lwWfBPp2jtXnQhwtnt
xa94e4mr1mBtBMlfqtyYwwcxJ+1w5m5tvLF2SyhQy11AVjnJb5gCOdWm1iQ5vdmV
YMLdbP2+1dFt1rkqobFFnmTJhVwAcTtjF1KznOpqTaQiFIGNXNljCKqYT7N0tlG4
rbfIZ8HsC0nO/k7IiAUazMT36kSluKoC0RPPN2Z+tZS4LfIsn3t3fa1AA/2TAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU58pgDwYNt3xBMvkzHvpYaZeHqsAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQzOTM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2NkwDQYJKoZIhvcNAQELBQADggEBAHJPTS5ulMDBdunULzfkNWxsaYxyLDO2
aVbXVgMSRdDaGwGPIW2qfqehvBFafXzfCj8xY1NYBPCRjKDIbfqj0yFn14c7XU4T
ik8YnKs5Sr1+6WHy9QnObws59nxXkSR6hc72f9ZE2jF3Qzh2GyEUYM7gYlR1O63U
hjw4ZjSBbUw+hUfu/gM//QywWsjdfeUZA9KDE16E42kPclduxY494lTlB5q48pZs
cTpsxJWmV7ogW10zpQr8H6tRIs7XUKc+eh89S3CJ2xpzAWnZKlzGBkp2Ua2icVNj
iCW9v+3LWogBQU85nGMM4emtbIWY3A9t9vZiZHLsOZOZteT8MLFmapo=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:47 2026 by rpki-client