Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: k7XIZ6VY7jiqq2YIb9yyRfMIMMwfJMXOgUHC0AAG7z4=
Subject key identifier: 2F:64:45:B8:A5:14:A2:90:EA:07:16:C2:10:47:D0:C0:68:25:7E:CA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A7620C5B37358F1CF437B760952B31874F9D291
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:16 +0000
ROA not before: Fri 28 Aug 2026 11:31:16 +0000
ROA not after: Fri 27 Aug 2027 11:36:16 +0000
asID: 834
IP address blocks: 217.217.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:76:20:c5:b3:73:58:f1:cf:43:7b:76:09:52:b3:18:74:f9:d2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:16 2026 GMT
Not After : Aug 27 11:36:16 2027 GMT
Subject: CN=2F6445B8A514A290EA0716C21047D0C068257ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:56:52:40:27:5d:7c:48:51:74:45:5d:c0:
50:1f:e7:51:be:d7:36:68:25:cc:4a:7b:f5:73:7a:
39:b8:0f:bf:a4:d1:81:ea:d3:14:9f:f3:ac:bb:d9:
ac:cf:e3:0e:df:38:2d:d0:94:e7:ff:76:55:2e:e7:
e1:6b:6a:a1:f2:70:e6:5c:cb:a0:16:21:2b:d7:1e:
2c:6e:28:4b:75:c2:88:71:25:aa:71:ea:11:80:b4:
ce:6f:a8:72:d3:9e:e8:d4:8e:78:03:41:6d:7b:6c:
07:78:cf:a7:db:4e:32:03:82:a3:04:59:e1:53:5b:
5c:c4:8b:ec:5c:56:7b:b9:2c:d8:f4:5a:10:ac:2a:
69:5a:e7:bf:32:74:b4:35:5c:21:03:86:67:70:2a:
41:81:3d:96:44:23:26:6e:3d:77:38:d6:0d:87:bb:
0b:52:ed:33:cc:b7:8e:2e:ee:e2:60:75:35:a1:cb:
26:de:7f:ac:65:77:8c:23:50:a3:e4:0d:db:32:07:
d9:58:64:8c:f8:bb:10:c6:a7:c8:2c:75:c7:f3:5a:
0b:f7:4d:36:36:cb:50:04:58:d6:5a:5f:ce:cd:22:
cb:42:70:2a:29:ba:af:82:8b:49:f6:ab:66:d2:b3:
c6:30:2b:ad:9e:e6:f0:c6:e5:26:fb:b0:03:f5:d6:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:45:B8:A5:14:A2:90:EA:07:16:C2:10:47:D0:C0:68:25:7E:CA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.206.0/24
Signature Algorithm: sha256WithRSAEncryption
02:92:c2:b3:c2:7c:92:08:91:f2:80:99:e0:20:2a:ff:eb:fd:
84:ff:a2:7b:6f:46:8d:52:a2:83:32:79:a4:d0:f3:aa:d5:b6:
a1:27:91:f5:3e:7c:73:bd:3b:7a:e3:b6:ac:c6:95:5f:b7:a4:
51:5b:52:da:24:97:d3:96:a5:5d:54:9f:c0:d4:af:08:c9:26:
32:e6:7a:8c:cc:50:f6:c3:08:66:4b:86:e8:b0:81:8b:fd:06:
ad:7f:f8:d4:c7:6c:e1:26:7f:01:b3:75:b3:cb:ec:d7:dd:3f:
db:cd:36:e0:c5:47:dd:25:ae:40:b6:43:ed:e6:98:36:30:0a:
f3:3b:43:4b:6e:35:7c:1c:88:49:cc:17:24:c5:e7:a5:1e:8c:
8b:f3:49:67:53:ce:e2:0b:6a:0d:67:88:82:b5:93:22:b0:6b:
2c:65:06:e0:88:18:67:82:68:ce:65:0e:8d:11:13:81:d6:1c:
93:11:bc:ef:f0:91:cc:91:5f:69:ce:a1:9f:24:08:6c:45:0c:
66:52:db:17:79:4c:55:d4:95:65:da:56:b7:1c:45:74:a8:f8:
fc:15:39:29:ec:4d:4c:56:07:18:bf:c5:8b:52:f0:00:46:2d:
b8:c0:f7:ee:6c:3c:27:ce:72:1d:64:cc:ce:e7:f0:7d:21:40:
7b:af:4f:66
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUanYgxbNzWPHPQ3t2CVKzGHT50pEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjgxMTMxMTZaFw0yNzA4MjcxMTM2MTZaMDMxMTAvBgNV
BAMTKDJGNjQ0NUI4QTUxNEEyOTBFQTA3MTZDMjEwNDdEMEMwNjgyNTdFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJlZSQCddfEhRdEVdwFAf51G+
1zZoJcxKe/Vzejm4D7+k0YHq0xSf86y72azP4w7fOC3QlOf/dlUu5+FraqHycOZc
y6AWISvXHixuKEt1wohxJapx6hGAtM5vqHLTnujUjngDQW17bAd4z6fbTjIDgqME
WeFTW1zEi+xcVnu5LNj0WhCsKmla578ydLQ1XCEDhmdwKkGBPZZEIyZuPXc41g2H
uwtS7TPMt44u7uJgdTWhyybef6xld4wjUKPkDdsyB9lYZIz4uxDGp8gsdcfzWgv3
TTY2y1AEWNZaX87NIstCcCopuq+Ci0n2q2bSs8YwK62e5vDG5Sb7sAP11hV5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUL2RFuKUUopDqBxbCEEfQwGglfsowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
zjANBgkqhkiG9w0BAQsFAAOCAQEAApLCs8J8kgiR8oCZ4CAq/+v9hP+ie29GjVKi
gzJ5pNDzqtW2oSeR9T58c707euO2rMaVX7ekUVtS2iSX05alXVSfwNSvCMkmMuZ6
jMxQ9sMIZkuG6LCBi/0GrX/41Mds4SZ/AbN1s8vs190/28024MVH3SWuQLZD7eaY
NjAK8ztDS241fByIScwXJMXnpR6Mi/NJZ1PO4gtqDWeIgrWTIrBrLGUG4IgYZ4Jo
zmUOjRETgdYckxG87/CRzJFfac6hnyQIbEUMZlLbF3lMVdSVZdpWtxxFdKj4/BU5
KexNTFYHGL/Fi1LwAEYtuMD37mw8J85yHWTMzufwfSFAe69PZg==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:23 2026 by rpki-client