Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132372e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3132372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: y/BxOLUrgUcd4YfErEnOTTA9tK9eXoU524mLQDco8Yo=
Subject key identifier: CB:D1:CB:C5:16:75:EE:40:C0:E1:6F:A7:D3:5E:96:6F:A1:BE:7F:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F1DBE540624ECAA317C5C14A64778AC0DE86832
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Jul 2026 08:26:10 +0000
ROA not before: Thu 09 Jul 2026 08:21:10 +0000
ROA not after: Thu 08 Jul 2027 08:26:10 +0000
asID: 212238
IP address blocks: 217.217.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1d:be:54:06:24:ec:aa:31:7c:5c:14:a6:47:78:ac:0d:e8:68:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 08:21:10 2026 GMT
Not After : Jul 8 08:26:10 2027 GMT
Subject: CN=CBD1CBC51675EE40C0E16FA7D35E966FA1BE7F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:c5:79:18:7d:d3:4c:26:76:11:d3:2a:5b:
77:33:9c:20:1b:f4:b3:43:a8:b1:55:ec:e0:5f:f5:
48:7c:1b:b6:36:91:2a:f4:6d:ee:08:a4:44:6e:59:
6b:fa:7a:c4:68:fa:cf:07:6e:52:c6:87:1b:53:3b:
35:62:6c:b9:02:46:1f:29:19:ac:46:6f:84:9c:e4:
a4:ca:97:2b:44:cd:fd:57:28:33:37:e3:b6:49:f8:
18:ed:a8:4d:80:b4:c3:ef:12:a2:d7:1f:0b:f4:67:
ec:e6:42:47:c2:3f:cd:f5:83:a8:c2:1d:0f:ca:61:
a9:9e:e6:b6:a9:ce:26:fa:1e:6b:bd:46:ea:6b:47:
98:7c:51:95:c0:58:ba:a8:a0:6a:1a:52:d4:bf:8a:
f3:f6:92:30:6c:bc:94:08:c9:96:76:71:25:a7:0a:
a6:3e:e6:76:41:80:0f:7d:cf:1f:fb:c5:d1:87:ff:
8e:de:00:2d:db:5c:b4:fe:fc:f1:b0:f3:36:3a:9e:
a9:39:7f:30:57:f4:69:23:50:16:90:f2:61:d8:01:
48:c1:5d:ca:1d:16:b2:ed:15:ef:89:5e:3f:63:61:
49:ad:2c:85:35:a6:eb:4c:4b:94:67:2c:f8:61:da:
42:82:d7:a4:61:fe:44:eb:19:0f:f3:64:b1:b4:9c:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:CB:C5:16:75:EE:40:C0:E1:6F:A7:D3:5E:96:6F:A1:BE:7F:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:07:1e:67:3d:ab:64:54:78:0f:e7:71:78:f8:59:ea:6f:5a:
67:71:a2:b6:c6:dc:9d:2a:01:f3:c7:38:32:f8:d1:50:2d:be:
2f:a7:79:e7:4b:7d:4c:98:14:ef:19:a6:66:e3:45:f3:f2:c0:
eb:cb:99:b5:c0:b6:0e:ae:ed:f6:95:96:c0:61:3c:6d:d2:c0:
04:0c:f1:90:29:af:ff:93:28:51:f1:57:30:c1:b2:9d:5d:ff:
86:57:b9:49:96:0c:05:16:bf:3a:32:41:54:ff:34:f3:d9:58:
6a:93:90:39:ce:a8:9c:10:17:3b:9d:08:c0:4b:9a:4c:11:ce:
53:80:2b:24:1a:e3:3d:40:53:da:e8:97:b9:16:17:7d:6b:90:
59:b5:59:02:77:cd:a2:9a:e2:09:d3:cb:6a:64:2c:29:01:9e:
9f:cd:ed:bf:2b:23:7e:a4:1e:3b:d2:b6:09:47:27:bc:68:cd:
13:e9:ce:7d:50:d1:69:9b:c7:1b:af:22:af:04:44:3a:40:07:
f3:e7:0f:6d:d4:fe:e9:00:ee:88:35:53:5a:56:5a:0f:b6:9f:
40:b0:15:43:70:9d:b5:29:e7:39:57:dc:c3:5a:ae:52:35:18:
f1:d9:5d:4c:fd:43:db:ec:62:ea:30:ab:1d:10:69:2d:97:58:
ad:df:8c:f6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUXx2+VAYk7KoxfFwUpkd4rA3oaDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDkwODIxMTBaFw0yNzA3MDgwODI2MTBaMDMxMTAvBgNV
BAMTKENCRDFDQkM1MTY3NUVFNDBDMEUxNkZBN0QzNUU5NjZGQTFCRTdGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdcV5GH3TTCZ2EdMqW3cznCAb
9LNDqLFV7OBf9Uh8G7Y2kSr0be4IpERuWWv6esRo+s8HblLGhxtTOzVibLkCRh8p
GaxGb4Sc5KTKlytEzf1XKDM347ZJ+BjtqE2AtMPvEqLXHwv0Z+zmQkfCP831g6jC
HQ/KYame5rapzib6Hmu9RuprR5h8UZXAWLqooGoaUtS/ivP2kjBsvJQIyZZ2cSWn
CqY+5nZBgA99zx/7xdGH/47eAC3bXLT+/PGw8zY6nqk5fzBX9GkjUBaQ8mHYAUjB
XcodFrLtFe+JXj9jYUmtLIU1putMS5RnLPhh2kKC16Rh/kTrGQ/zZLG0nObrAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUy9HLxRZ17kDA4W+n016Wb6G+f4AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZfzANBgkqhkiG9w0BAQsFAAOCAQEAewceZz2rZFR4D+dxePhZ6m9aZ3Gi
tsbcnSoB88c4MvjRUC2+L6d550t9TJgU7xmmZuNF8/LA68uZtcC2Dq7t9pWWwGE8
bdLABAzxkCmv/5MoUfFXMMGynV3/hle5SZYMBRa/OjJBVP8089lYapOQOc6onBAX
O50IwEuaTBHOU4ArJBrjPUBT2uiXuRYXfWuQWbVZAnfNopriCdPLamQsKQGen83t
vysjfqQeO9K2CUcnvGjNE+nOfVDRaZvHG68irwREOkAH8+cPbdT+6QDuiDVTWlZa
D7afQLAVQ3CdtSnnOVfcw1quUjUY8dldTP1D2+xi6jCrHRBpLZdYrd+M9g==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:23 2026 by rpki-client