Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130382e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3130382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: lBVYGapROmKC2/nfMWMoX8Sn5jlaVRxGIhz/uRaTJAw=
Subject key identifier: B9:A3:03:07:66:00:DB:40:9E:C2:DA:BB:63:9F:91:E0:A4:FD:4C:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 707DB26433BEA4B6D084F0A6212D83957C9F20BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130382e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 03 Jul 2026 21:44:08 +0000
ROA not before: Fri 03 Jul 2026 21:39:08 +0000
ROA not after: Fri 02 Jul 2027 21:44:08 +0000
asID: 216253
IP address blocks: 217.217.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7d:b2:64:33:be:a4:b6:d0:84:f0:a6:21:2d:83:95:7c:9f:20:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 21:39:08 2026 GMT
Not After : Jul 2 21:44:08 2027 GMT
Subject: CN=B9A303076600DB409EC2DABB639F91E0A4FD4C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:9a:ee:0b:50:6d:9a:fb:c3:c7:67:c0:bc:
55:ec:a8:99:a9:52:c6:dd:cc:8d:ed:ec:1a:2d:7f:
e4:c8:ac:87:28:fc:d8:73:6b:48:9e:ac:a7:54:09:
c4:64:a7:a4:79:d2:11:61:c6:0e:ef:ea:48:02:f6:
e1:2a:7e:c3:d3:eb:a1:03:9b:c0:6e:c7:3e:83:2e:
bd:e1:4d:f7:13:2f:19:09:7b:b2:c3:09:85:31:5b:
6b:7a:a8:d3:a9:58:93:6c:63:c6:e0:05:38:c2:73:
9f:90:f0:f4:a8:9b:b7:42:2a:02:4e:d9:b2:d9:72:
12:c9:80:e7:bf:80:4e:2c:74:a0:3b:b1:71:80:6f:
1b:ff:04:8e:e8:05:ce:16:8c:26:90:e5:d1:31:bf:
fe:45:36:de:52:32:ef:f7:4a:7d:e4:50:35:af:c1:
8b:89:06:9f:ee:5f:4c:a3:65:2c:8c:e2:67:48:33:
82:35:59:83:7f:50:85:20:02:1c:b8:28:38:83:ac:
04:fb:a4:89:58:2a:50:2d:d3:2b:f5:f4:20:5d:c1:
24:82:c5:f4:88:d5:ca:74:71:36:78:cd:b9:d4:4c:
dc:1e:70:cd:c4:62:01:37:85:d5:a1:09:ac:32:ac:
20:db:35:2a:7f:d1:77:7f:7c:a5:86:d6:14:42:41:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:03:07:66:00:DB:40:9E:C2:DA:BB:63:9F:91:E0:A4:FD:4C:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:af:d8:29:c1:2e:1a:b1:d2:67:0a:d6:57:14:9b:32:1d:60:
65:86:81:42:94:ef:03:fb:a7:bd:be:9a:98:9b:5c:86:e1:21:
e2:dc:13:1a:73:be:fc:91:c1:1b:9d:86:d3:76:d7:9b:b4:89:
ac:62:a1:e8:26:a3:eb:aa:86:b3:da:fa:54:7e:d8:ae:4d:5e:
4e:19:01:f0:a0:66:a6:30:aa:b0:05:c6:79:be:aa:67:e6:4e:
2b:2d:d3:a9:a6:03:bc:cb:43:52:fd:18:d4:73:40:47:a6:b8:
a2:47:d9:b5:6f:f5:e0:75:56:7f:a5:2c:59:28:5b:e2:ac:bd:
00:c1:dc:8c:c6:a5:b4:86:f4:78:62:47:61:cc:75:9e:91:b2:
b4:3e:80:4f:a3:fe:0d:33:90:8a:39:e7:7f:3c:a1:a6:ad:b8:
64:a6:c1:14:65:bc:be:d6:23:91:c3:47:79:30:06:f4:ea:4e:
2b:6b:2d:10:23:b2:26:ec:f8:cf:65:3e:c6:32:c5:c4:77:aa:
13:49:34:fd:de:45:a1:5a:d7:00:aa:a5:29:4e:33:ae:73:55:
8d:b8:95:47:b8:9c:52:f1:f8:43:8c:0f:5f:16:09:de:3f:62:
f5:c9:43:a8:18:fc:2b:09:ae:5e:6d:35:1b:c4:af:db:55:54:
04:fb:8b:34
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcH2yZDO+pLbQhPCmIS2DlXyfILwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDMyMTM5MDhaFw0yNzA3MDIyMTQ0MDhaMDMxMTAvBgNV
BAMTKEI5QTMwMzA3NjYwMERCNDA5RUMyREFCQjYzOUY5MUUwQTRGRDRDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFF5ruC1BtmvvDx2fAvFXsqJmp
UsbdzI3t7Botf+TIrIco/Nhza0ierKdUCcRkp6R50hFhxg7v6kgC9uEqfsPT66ED
m8Buxz6DLr3hTfcTLxkJe7LDCYUxW2t6qNOpWJNsY8bgBTjCc5+Q8PSom7dCKgJO
2bLZchLJgOe/gE4sdKA7sXGAbxv/BI7oBc4WjCaQ5dExv/5FNt5SMu/3Sn3kUDWv
wYuJBp/uX0yjZSyM4mdIM4I1WYN/UIUgAhy4KDiDrAT7pIlYKlAt0yv19CBdwSSC
xfSI1cp0cTZ4zbnUTNwecM3EYgE3hdWhCawyrCDbNSp/0Xd/fKWG1hRCQS3zAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUuaMDB2YA20Cewtq7Y5+R4KT9TJYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMyMzUzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZbDANBgkqhkiG9w0BAQsFAAOCAQEADK/YKcEuGrHSZwrWVxSbMh1gZYaB
QpTvA/unvb6amJtchuEh4twTGnO+/JHBG52G03bXm7SJrGKh6Caj66qGs9r6VH7Y
rk1eThkB8KBmpjCqsAXGeb6qZ+ZOKy3TqaYDvMtDUv0Y1HNAR6a4okfZtW/14HVW
f6UsWShb4qy9AMHcjMaltIb0eGJHYcx1npGytD6AT6P+DTOQijnnfzyhpq24ZKbB
FGW8vtYjkcNHeTAG9OpOK2stECOyJuz4z2U+xjLFxHeqE0k0/d5FoVrXAKqlKU4z
rnNVjbiVR7icUvH4Q4wPXxYJ3j9i9clDqBj8KwmuXm01G8Sv21VUBPuLNA==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:45 2026 by rpki-client