Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: eOJAxL+7rfzr+cyGJcmZq+1UoPQa3gFiFkl9+GiEGbg=
Subject key identifier: 88:CF:D1:43:30:F1:39:D4:AF:FE:B8:B0:E1:8F:CD:BB:9F:B1:B3:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A2235F5F8750F3F54D719AC648AED7C584BAEF4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Aug 2026 19:34:47 +0000
ROA not before: Wed 26 Aug 2026 19:29:47 +0000
ROA not after: Wed 25 Aug 2027 19:34:47 +0000
asID: 834
IP address blocks: 217.217.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:22:35:f5:f8:75:0f:3f:54:d7:19:ac:64:8a:ed:7c:58:4b:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 19:29:47 2026 GMT
Not After : Aug 25 19:34:47 2027 GMT
Subject: CN=88CFD14330F139D4AFFEB8B0E18FCDBB9FB1B3EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:21:a3:98:33:c8:8a:cb:5e:f5:76:ff:ef:
b3:5f:22:3b:08:3e:91:92:d1:49:44:0a:e3:8f:af:
5d:4e:39:f2:14:4e:fd:6f:9d:a7:1c:1f:88:e3:2b:
b5:66:a1:93:d0:41:8e:33:ad:36:94:bd:c5:e2:39:
df:90:8f:aa:85:c9:c9:c7:a3:2a:2c:41:67:3a:1d:
cb:7b:dd:2c:50:3e:cb:b5:51:7b:83:09:f5:fa:1a:
b6:db:f2:93:a4:9b:12:de:74:97:b8:1c:32:b8:a9:
58:f6:73:50:6a:3e:78:ea:bf:ae:11:db:20:13:fe:
a5:8e:bb:2f:2a:b0:aa:a2:3d:ec:6b:83:22:9f:55:
c0:36:91:9e:81:93:23:b2:e5:cb:f7:8e:39:e5:99:
18:d0:9b:75:49:b9:cd:e3:f9:87:b5:97:ab:75:dd:
96:b1:18:a2:25:b4:3b:4c:a0:42:9b:0b:0b:f2:a8:
1d:ea:be:9a:f1:7b:9b:cb:84:58:96:0d:13:2b:e4:
d1:6f:fc:b3:d5:eb:c9:70:f5:e4:65:8e:c9:19:ac:
a8:7a:e3:b9:e9:66:e6:f6:07:77:cf:4c:24:90:f7:
58:86:b2:45:31:39:9e:a3:33:39:3d:e4:41:ca:47:
c1:7b:27:ee:12:c0:ca:be:b3:a2:1c:d3:87:16:22:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:D1:43:30:F1:39:D4:AF:FE:B8:B0:E1:8F:CD:BB:9F:B1:B3:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:26:6d:3f:d1:93:94:45:24:2b:3c:e8:29:bc:f0:cd:e3:09:
24:04:89:b9:35:6a:80:ff:99:7f:73:1e:7e:f3:08:7d:3c:f1:
b6:31:36:c1:11:d9:4f:41:e0:b1:7e:f9:62:95:f0:dc:e1:d0:
b1:55:40:b0:8c:ba:cc:cd:c5:b6:64:6f:c0:71:73:16:a8:1e:
03:a4:70:c4:b3:0f:37:82:b5:81:5e:60:9a:7c:8c:89:be:e1:
90:bb:68:7f:1f:ce:b0:be:41:c8:45:31:58:6d:03:d3:c6:92:
c6:91:99:c0:d7:c8:e9:6f:0c:3d:5d:b0:52:0a:6b:92:4b:26:
af:31:41:14:94:c2:b5:f8:5b:b0:11:bf:4d:67:36:09:6b:5e:
e2:55:87:84:62:c9:11:0e:f2:d6:c5:f6:16:cc:c0:50:72:2d:
62:f3:cd:c9:93:75:b7:46:31:40:77:57:49:76:f3:d2:50:30:
0a:bc:c2:69:ee:bb:3b:13:4b:b4:6e:b3:e0:dc:34:66:fb:ff:
75:d4:a0:26:63:1f:8f:a7:d9:b3:78:ca:af:c1:81:67:1f:ff:
e0:f1:4c:fd:65:ce:53:2d:1a:3b:18:b2:f3:bc:ea:dc:d6:c2:
50:f0:06:de:3f:cd:cb:1a:db:bd:81:33:62:ad:53:f8:d9:99:
91:ab:aa:be
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeiI19fh1Dz9U1xmsZIrtfFhLrvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjYxOTI5NDdaFw0yNzA4MjUxOTM0NDdaMDMxMTAvBgNV
BAMTKDg4Q0ZEMTQzMzBGMTM5RDRBRkZFQjhCMEUxOEZDREJCOUZCMUIzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCiGjmDPIiste9Xb/77NfIjsI
PpGS0UlECuOPr11OOfIUTv1vnaccH4jjK7VmoZPQQY4zrTaUvcXiOd+Qj6qFycnH
oyosQWc6Hct73SxQPsu1UXuDCfX6Grbb8pOkmxLedJe4HDK4qVj2c1BqPnjqv64R
2yAT/qWOuy8qsKqiPexrgyKfVcA2kZ6BkyOy5cv3jjnlmRjQm3VJuc3j+Ye1l6t1
3ZaxGKIltDtMoEKbCwvyqB3qvprxe5vLhFiWDRMr5NFv/LPV68lw9eRljskZrKh6
47npZub2B3fPTCSQ91iGskUxOZ6jMzk95EHKR8F7J+4SwMq+s6Ic04cWIoyzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUiM/RQzDxOdSv/riw4Y/Nu5+xs+4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
wzANBgkqhkiG9w0BAQsFAAOCAQEADCZtP9GTlEUkKzzoKbzwzeMJJASJuTVqgP+Z
f3MefvMIfTzxtjE2wRHZT0HgsX75YpXw3OHQsVVAsIy6zM3FtmRvwHFzFqgeA6Rw
xLMPN4K1gV5gmnyMib7hkLtofx/OsL5ByEUxWG0D08aSxpGZwNfI6W8MPV2wUgpr
kksmrzFBFJTCtfhbsBG/TWc2CWte4lWHhGLJEQ7y1sX2FszAUHItYvPNyZN1t0Yx
QHdXSXbz0lAwCrzCae67OxNLtG6z4Nw0Zvv/ddSgJmMfj6fZs3jKr8GBZx//4PFM
/WXOUy0aOxiy87zq3NbCUPAG3j/NyxrbvYEzYq1T+NmZkauqvg==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:31 2026 by rpki-client