Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Lf7CgW+9G6Y+h8+TeYtDmVEHQ1XpzIs9OATmKPUf8DU=
Subject key identifier: E4:E6:26:CB:99:A7:B2:61:78:68:79:B0:A5:F9:B6:3F:E2:32:EE:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7073C059A4D801387EBB86C497E08776E5ED3D94
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Aug 2026 19:34:57 +0000
ROA not before: Wed 26 Aug 2026 19:29:57 +0000
ROA not after: Wed 25 Aug 2027 19:34:57 +0000
asID: 834
IP address blocks: 217.217.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:73:c0:59:a4:d8:01:38:7e:bb:86:c4:97:e0:87:76:e5:ed:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 19:29:57 2026 GMT
Not After : Aug 25 19:34:57 2027 GMT
Subject: CN=E4E626CB99A7B261786879B0A5F9B63FE232EEF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:b6:ff:eb:4b:23:22:83:70:b7:95:aa:68:
52:76:06:87:7f:d0:d5:23:dc:44:dc:42:3e:ac:a3:
f5:45:c6:f9:16:69:4a:9b:5d:4d:81:5c:a4:75:72:
91:4c:c2:74:6c:c7:55:32:e3:7c:7c:8e:43:0f:a9:
12:b2:8f:cb:ea:f5:10:75:02:06:dc:97:3d:31:01:
a2:ef:ba:05:ee:60:53:42:f5:36:91:17:b4:f3:56:
78:70:f2:1e:52:fa:29:35:b4:61:d2:57:b3:64:1f:
73:14:20:f6:5f:1f:4a:5c:a2:eb:3e:14:5a:bd:53:
18:e6:19:4b:e7:ee:6b:e5:fe:37:e1:91:e7:ce:f0:
f0:e1:40:2b:ce:b6:24:a3:0e:a5:0b:45:1e:c2:bf:
c2:69:99:7a:d0:ae:38:34:89:5f:60:f3:87:cf:67:
a8:51:76:3d:ac:31:d2:51:b0:23:4b:a6:dd:ba:d0:
d2:d9:81:81:0a:cd:45:5d:2d:7f:59:b1:f9:1f:14:
b3:74:3d:0a:05:2b:54:6e:f0:25:0f:84:9d:0d:c2:
71:5a:2d:61:c2:57:52:b9:6f:32:93:54:f6:a1:48:
31:d2:a6:a5:04:52:dc:96:1b:fe:0c:89:ec:4d:f7:
f0:75:b3:ae:4c:43:f8:db:45:71:8b:9a:5e:bc:f6:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:26:CB:99:A7:B2:61:78:68:79:B0:A5:F9:B6:3F:E2:32:EE:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.207.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ce:df:7e:09:77:a1:c5:93:cb:fb:0f:5e:fa:e1:e3:3a:cf:
da:67:b5:5a:e3:39:bf:4e:fa:21:cb:93:69:9e:58:a3:1f:20:
41:da:90:3e:4a:c1:b2:b4:07:fb:22:d7:d3:5c:9c:6c:e1:56:
73:8f:41:5d:88:33:3f:d4:3d:72:a6:0b:24:1b:3b:23:4c:52:
7d:5a:f7:18:f6:c8:0d:aa:8a:3a:37:b3:6d:ba:e3:4c:29:4e:
74:9c:38:be:5a:85:3c:67:87:bb:49:6e:2b:d4:a3:3b:ef:6c:
41:51:d2:da:be:3f:d9:cf:07:48:3b:f6:9c:9f:14:74:cb:aa:
44:39:d0:50:99:e0:b6:94:02:52:99:f9:84:6e:d5:53:47:a4:
ae:1c:58:0e:02:eb:03:59:c7:d5:8e:47:d6:5b:c8:7c:fa:7c:
83:a9:57:1a:ac:df:b1:78:15:27:04:08:fd:3c:f9:0c:a7:3a:
a0:38:2b:98:ce:d5:d5:bd:a4:6e:f6:5e:e5:e3:14:62:ac:5c:
b7:72:77:db:c7:ee:61:1b:4c:c9:a4:60:2b:41:1a:63:a9:37:
14:11:be:fd:ec:2e:60:17:5a:3d:15:da:e6:19:b2:e5:27:37:
e8:77:dc:cc:b6:dc:8f:4c:55:cf:84:6c:77:82:92:a7:35:5f:
b5:50:b2:25
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcHPAWaTYATh+u4bEl+CHduXtPZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjYxOTI5NTdaFw0yNzA4MjUxOTM0NTdaMDMxMTAvBgNV
BAMTKEU0RTYyNkNCOTlBN0IyNjE3ODY4NzlCMEE1RjlCNjNGRTIzMkVFRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5D7b/60sjIoNwt5WqaFJ2Bod/
0NUj3ETcQj6so/VFxvkWaUqbXU2BXKR1cpFMwnRsx1Uy43x8jkMPqRKyj8vq9RB1
Agbclz0xAaLvugXuYFNC9TaRF7TzVnhw8h5S+ik1tGHSV7NkH3MUIPZfH0pcous+
FFq9UxjmGUvn7mvl/jfhkefO8PDhQCvOtiSjDqULRR7Cv8JpmXrQrjg0iV9g84fP
Z6hRdj2sMdJRsCNLpt260NLZgYEKzUVdLX9ZsfkfFLN0PQoFK1Ru8CUPhJ0NwnFa
LWHCV1K5bzKTVPahSDHSpqUEUtyWG/4MiexN9/B1s65MQ/jbRXGLml689n+dAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU5OYmy5mnsmF4aHmwpfm2P+Iy7vkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
zzANBgkqhkiG9w0BAQsFAAOCAQEAYs7ffgl3ocWTy/sPXvrh4zrP2me1WuM5v076
IcuTaZ5Yox8gQdqQPkrBsrQH+yLX01ycbOFWc49BXYgzP9Q9cqYLJBs7I0xSfVr3
GPbIDaqKOjezbbrjTClOdJw4vlqFPGeHu0luK9SjO+9sQVHS2r4/2c8HSDv2nJ8U
dMuqRDnQUJngtpQCUpn5hG7VU0ekrhxYDgLrA1nH1Y5H1lvIfPp8g6lXGqzfsXgV
JwQI/Tz5DKc6oDgrmM7V1b2kbvZe5eMUYqxct3J328fuYRtMyaRgK0EaY6k3FBG+
/ewuYBdaPRXa5hmy5Sc36HfczLbcj0xVz4Rsd4KSpzVftVCyJQ==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:04 2026 by rpki-client