Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: iYX83/NP3bLb8H3xF4YwbRhSIuWFzczkwcolKKF+40A=
Subject key identifier: F9:AF:C2:62:8E:B5:CB:1F:28:64:CD:27:8E:33:16:4B:B7:D9:1D:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68937D81F09E165DA44EEB0639B0FC1CEAB80D24
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
Signing time: Fri 28 Aug 2026 11:36:18 +0000
ROA not before: Fri 28 Aug 2026 11:31:18 +0000
ROA not after: Fri 27 Aug 2027 11:36:18 +0000
asID: 834
IP address blocks: 217.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:93:7d:81:f0:9e:16:5d:a4:4e:eb:06:39:b0:fc:1c:ea:b8:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:31:18 2026 GMT
Not After : Aug 27 11:36:18 2027 GMT
Subject: CN=F9AFC2628EB5CB1F2864CD278E33164BB7D91D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:f7:83:89:1d:f7:7b:f1:d5:19:5f:a3:7a:
ab:7f:03:0e:ce:af:9d:82:7b:33:79:95:3e:0e:08:
65:5d:5a:1a:b8:6e:36:38:85:3c:3a:60:0c:48:9f:
42:36:9e:6b:13:52:8d:14:cf:77:81:4d:af:82:ea:
0b:0a:55:c9:a9:ef:88:e4:a5:ff:f6:eb:62:2a:6a:
b5:69:8e:92:72:08:3d:06:03:36:a2:77:bf:2c:24:
c0:bf:4e:83:8b:cf:5a:d3:5f:90:7c:3d:f9:5f:ff:
50:47:41:22:7d:c2:72:df:73:74:23:22:f3:e4:e1:
27:52:06:81:16:6d:66:c5:be:67:ea:12:c3:6d:14:
d8:44:b1:b8:05:ff:e6:1f:9f:79:b3:9f:cc:09:76:
17:e0:ac:18:8f:20:41:b0:12:99:2f:b3:da:c5:20:
b5:4d:44:ba:4a:8c:41:2d:aa:cf:4c:66:da:ed:e4:
12:61:82:29:08:10:12:d9:1d:3a:c4:62:ff:5b:75:
87:50:04:2b:80:b4:96:04:50:0a:d4:8c:90:ca:e5:
1d:c3:d7:ba:84:97:a8:f6:12:25:1b:44:47:10:3b:
1f:fa:86:3d:99:51:f3:6b:6d:20:75:dd:c9:32:fe:
7f:95:8d:69:ea:30:8f:9e:37:87:36:49:f5:ca:0b:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:C2:62:8E:B5:CB:1F:28:64:CD:27:8E:33:16:4B:B7:D9:1D:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fd:b8:45:00:71:c6:c9:7d:9a:d2:98:e9:c1:86:e8:c6:7b:
b9:80:66:2b:ff:e7:74:76:dc:1f:ee:ed:1b:96:00:cf:5f:f9:
ad:20:a2:e3:61:8b:69:f8:3a:d9:83:4d:bf:6d:fd:dd:02:f6:
87:13:3b:3e:ec:8b:72:6d:89:fd:bd:cf:b3:c6:e1:85:9d:cd:
df:cc:b1:c6:79:61:48:90:f0:5a:1a:ad:27:cd:cd:77:0c:11:
a8:34:02:2e:35:4c:71:77:0d:e4:95:d5:a4:fa:9f:2d:15:fe:
1c:b4:6c:fe:da:46:3a:0b:57:65:c0:9f:25:45:35:83:8b:1f:
f0:8e:44:75:17:d7:d1:ba:ca:14:9d:87:f6:5c:d1:84:22:2a:
4c:99:fc:bb:08:ee:21:fc:cb:62:5c:47:2f:79:f0:6e:3b:66:
3f:54:ca:60:e8:9a:9e:71:2e:f7:4c:26:0a:ff:a0:9f:7d:85:
96:78:99:b2:f9:15:d8:7e:31:6a:d6:80:a8:65:0c:0b:b4:99:
d4:91:d8:27:2c:a6:ad:6f:5f:65:2c:3a:74:a4:ce:fe:30:0c:
41:67:d2:9e:ab:61:28:ca:a5:ed:db:bd:65:1e:b7:af:36:74:
e9:35:3a:fd:58:d0:66:a0:3c:3c:ee:7c:d9:1a:94:d9:77:2f:
d0:30:99:04
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaJN9gfCeFl2kTusGObD8HOq4DSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjgxMTMxMThaFw0yNzA4MjcxMTM2MThaMDMxMTAvBgNV
BAMTKEY5QUZDMjYyOEVCNUNCMUYyODY0Q0QyNzhFMzMxNjRCQjdEOTFEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUveDiR33e/HVGV+jeqt/Aw7O
r52CezN5lT4OCGVdWhq4bjY4hTw6YAxIn0I2nmsTUo0Uz3eBTa+C6gsKVcmp74jk
pf/262IqarVpjpJyCD0GAzaid78sJMC/ToOLz1rTX5B8Pflf/1BHQSJ9wnLfc3Qj
IvPk4SdSBoEWbWbFvmfqEsNtFNhEsbgF/+Yfn3mzn8wJdhfgrBiPIEGwEpkvs9rF
ILVNRLpKjEEtqs9MZtrt5BJhgikIEBLZHTrEYv9bdYdQBCuAtJYEUArUjJDK5R3D
17qEl6j2EiUbREcQOx/6hj2ZUfNrbSB13cky/n+VjWnqMI+eN4c2SfXKC9nPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+a/CYo61yx8oZM0njjMWS7fZHZMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
0DANBgkqhkiG9w0BAQsFAAOCAQEAPv24RQBxxsl9mtKY6cGG6MZ7uYBmK//ndHbc
H+7tG5YAz1/5rSCi42GLafg62YNNv2393QL2hxM7PuyLcm2J/b3Ps8bhhZ3N38yx
xnlhSJDwWhqtJ83NdwwRqDQCLjVMcXcN5JXVpPqfLRX+HLRs/tpGOgtXZcCfJUU1
g4sf8I5EdRfX0brKFJ2H9lzRhCIqTJn8uwjuIfzLYlxHL3nwbjtmP1TKYOiannEu
90wmCv+gn32FlniZsvkV2H4xataAqGUMC7SZ1JHYJyymrW9fZSw6dKTO/jAMQWfS
nqthKMql7du9ZR63rzZ06TU6/VjQZqA8PO582RqU2Xcv0DCZBA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:25 2026 by rpki-client