Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e203132303833.roa
File: 3231372e3231372e3134342e302f32302d3234203d3e203132303833.roa (raw, json)
Hash identifier: ChHbRp6RmLzWevr2M7+qGydjwMoFpHaNfNkMN4UCLcs=
Subject key identifier: 07:A9:05:90:A3:8C:97:58:39:EE:26:0A:17:23:8A:15:4B:7A:1C:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 04818EB3A655B78C1A571804F5CF86A9188A82A5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:49:48 +0000
ROA not before: Fri 10 Jul 2026 22:44:48 +0000
ROA not after: Fri 09 Jul 2027 22:49:48 +0000
asID: 12083
IP address blocks: 217.217.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:81:8e:b3:a6:55:b7:8c:1a:57:18:04:f5:cf:86:a9:18:8a:82:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:44:48 2026 GMT
Not After : Jul 9 22:49:48 2027 GMT
Subject: CN=07A90590A38C975839EE260A17238A154B7A1C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:7d:f0:7c:09:bc:d3:6d:97:f9:24:2b:41:
6f:5d:4e:80:39:46:e4:02:f6:a8:63:44:d6:06:14:
c2:28:c0:28:60:8d:de:27:cf:8b:94:24:43:ac:30:
f7:01:12:f8:fd:0f:30:da:49:9f:da:08:4e:c2:88:
ea:48:82:8a:41:9a:35:a7:5f:16:ea:f3:2c:e1:81:
48:a1:de:26:e4:b8:34:41:67:9c:2d:2f:e6:38:dd:
5d:8f:da:c3:52:c2:fa:65:2c:9d:62:62:f3:b3:fe:
ed:b9:07:08:3f:c0:57:34:8d:f8:0f:c9:92:ba:ed:
21:d8:44:ac:dc:29:63:81:e6:9d:e6:7c:d5:41:db:
39:4a:cf:e4:be:af:23:cd:1c:65:72:13:4f:01:a6:
56:90:82:84:8c:c2:24:b1:73:ab:72:87:56:41:26:
b0:e9:ff:ce:23:f2:7d:db:e5:97:88:3a:e8:e7:0f:
27:4b:97:9f:e1:4b:b7:dd:24:d4:6c:bd:bb:a3:85:
7f:5c:1e:69:f5:2b:83:68:21:68:b3:59:10:0d:2b:
cd:99:fc:c3:12:66:43:64:de:ab:48:a2:88:ff:fa:
fa:d6:97:f5:64:ca:41:fb:c7:f0:e6:1f:7a:4c:1f:
a6:d0:c9:23:eb:9c:97:57:56:bd:cf:81:55:83:b1:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:05:90:A3:8C:97:58:39:EE:26:0A:17:23:8A:15:4B:7A:1C:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3134342e302f32302d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.144.0/20
Signature Algorithm: sha256WithRSAEncryption
92:47:c1:87:0c:ce:4d:d8:1f:e9:2b:76:2f:de:c0:af:98:59:
51:fc:9c:1f:ee:d8:1a:1c:1a:db:74:f3:1e:bf:07:1e:5e:0c:
d0:7e:e1:22:d4:a7:9d:2b:e4:5a:23:95:f3:85:39:2e:74:f5:
2b:67:b0:37:4a:60:41:6d:c9:90:3d:08:86:92:50:29:66:b6:
7f:00:d3:ff:ff:8b:b4:33:eb:96:aa:cf:d1:fa:38:f6:81:c2:
2f:66:4c:0e:89:02:92:e3:89:a5:e6:34:2f:1a:62:8b:b0:ce:
75:46:7e:ad:2b:89:63:3b:e9:07:c4:d8:09:10:9d:da:83:76:
84:a1:f7:9c:c6:e2:ec:f2:61:e8:0b:b7:a0:6e:14:0f:18:ce:
41:54:03:f8:9c:c6:28:94:87:b9:d7:c8:05:b6:e3:a1:19:f0:
65:ca:67:99:a2:cb:7c:47:4f:67:cc:6d:0d:fe:a8:3c:12:49:
f3:49:f7:82:5a:5c:ac:c7:9b:eb:fa:fb:f4:82:81:bd:8a:a3:
52:52:de:07:c6:19:a9:e7:d5:02:38:19:86:f9:2e:d8:89:96:
1c:45:b7:8c:b0:3e:d4:a2:3a:de:10:30:77:a4:bc:90:40:da:
e7:de:87:37:b0:02:21:35:e7:ef:10:cc:bb:75:d1:9c:48:a4:
b7:2e:27:5f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBIGOs6ZVt4waVxgE9c+GqRiKgqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MTAyMjQ0NDhaFw0yNzA3MDkyMjQ5NDhaMDMxMTAvBgNV
BAMTKDA3QTkwNTkwQTM4Qzk3NTgzOUVFMjYwQTE3MjM4QTE1NEI3QTFDMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCH3wfAm8022X+SQrQW9dToA5
RuQC9qhjRNYGFMIowChgjd4nz4uUJEOsMPcBEvj9DzDaSZ/aCE7CiOpIgopBmjWn
Xxbq8yzhgUih3ibkuDRBZ5wtL+Y43V2P2sNSwvplLJ1iYvOz/u25Bwg/wFc0jfgP
yZK67SHYRKzcKWOB5p3mfNVB2zlKz+S+ryPNHGVyE08BplaQgoSMwiSxc6tyh1ZB
JrDp/84j8n3b5ZeIOujnDydLl5/hS7fdJNRsvbujhX9cHmn1K4NoIWizWRANK82Z
/MMSZkNk3qtIooj/+vrWl/VkykH7x/DmH3pMH6bQySPrnJdXVr3PgVWDsZMVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUB6kFkKOMl1g57iYKFyOKFUt6HC0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzIzMDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATZ2ZAwDQYJKoZIhvcNAQELBQADggEBAJJHwYcMzk3YH+krdi/ewK+YWVH8nB/u
2BocGtt08x6/Bx5eDNB+4SLUp50r5FojlfOFOS509StnsDdKYEFtyZA9CIaSUClm
tn8A0///i7Qz65aqz9H6OPaBwi9mTA6JApLjiaXmNC8aYouwznVGfq0riWM76QfE
2AkQndqDdoSh95zG4uzyYegLt6BuFA8YzkFUA/icxiiUh7nXyAW246EZ8GXKZ5mi
y3xHT2fMbQ3+qDwSSfNJ94JaXKzHm+v6+/SCgb2Ko1JS3gfGGann1QI4GYb5LtiJ
lhxFt4ywPtSiOt4QMHekvJBA2ufehzewAiE15+8QzLt10ZxIpLcuJ18=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client