Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e203134363138.roa
File: 3231372e3231372e3232332e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: Qf7jJ6HUNE3ofI0ppswma4SUmay6P7GyssTZFyCoDwE=
Subject key identifier: CF:E6:19:12:5B:E6:E8:88:E7:DD:B9:F7:B8:39:FD:4C:7F:13:18:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A78BAAB6C77C1AEFB2DB5CE00B5E3BE6A4ED851
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e203134363138.roa
Signing time: Sun 16 Aug 2026 21:36:00 +0000
ROA not before: Sun 16 Aug 2026 21:31:00 +0000
ROA not after: Sun 15 Aug 2027 21:36:00 +0000
asID: 14618
IP address blocks: 217.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:78:ba:ab:6c:77:c1:ae:fb:2d:b5:ce:00:b5:e3:be:6a:4e:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 16 21:31:00 2026 GMT
Not After : Aug 15 21:36:00 2027 GMT
Subject: CN=CFE619125BE6E888E7DDB9F7B839FD4C7F1318A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:81:03:83:6d:e0:d9:fb:e9:eb:1f:b5:2a:
35:3f:22:51:5b:e0:df:a2:b1:fa:27:ba:c7:3b:e3:
4a:f4:65:2d:14:bf:27:1f:6e:73:4c:d6:41:eb:cd:
f8:93:c3:15:43:0d:e2:45:25:f6:9d:a5:8d:b1:8a:
b6:2c:a9:af:8e:3d:a6:de:af:ab:d8:75:27:a7:86:
62:ca:59:b2:91:ff:ec:e1:21:fe:98:4e:e2:d6:6d:
ef:c4:1c:42:f6:ac:6e:d7:49:5e:a8:3a:35:71:c2:
ac:0c:4b:2f:e8:ca:d9:d2:8b:c2:ae:e3:13:19:f7:
f2:61:c7:77:89:e0:f2:81:a6:ea:be:89:de:7f:54:
21:f7:c5:ba:dd:7b:80:f1:3f:95:e8:f7:ae:fc:65:
fa:79:cd:46:ab:d0:57:13:8d:ca:bf:a7:e5:78:c3:
52:b0:73:23:8f:d3:3e:4e:ae:0a:bd:da:f3:c6:44:
5d:ae:c3:0b:7f:b3:ef:36:8d:02:f6:0e:56:93:4f:
91:ec:eb:21:d9:6b:ec:5a:24:58:91:c0:15:0e:b7:
6c:37:2a:e5:4b:ed:b2:8e:76:d3:ba:d2:47:ec:8f:
38:55:3a:75:42:a6:c4:80:e4:63:0b:3d:5f:f5:e9:
94:45:2f:df:b5:d5:66:6f:f8:ac:24:1a:9d:6c:f4:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:19:12:5B:E6:E8:88:E7:DD:B9:F7:B8:39:FD:4C:7F:13:18:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3f:c5:c8:e3:30:66:56:50:1d:07:38:f4:a8:0d:1c:5e:3c:
a5:e7:cc:78:dd:5c:98:82:14:b6:0e:b4:da:d1:b0:9e:85:ec:
f7:df:6d:7d:19:63:0e:92:44:e5:97:df:4d:c8:67:e7:1d:a6:
57:06:64:a9:3a:86:27:7a:83:fb:74:4b:c5:6c:55:c2:ba:5d:
76:50:c1:a9:fb:99:04:11:ed:50:41:53:3e:e7:a4:4e:d2:3e:
71:be:1d:ed:4d:01:76:7d:25:72:ef:d7:78:ee:2f:69:3c:ec:
f0:7b:41:4e:92:cd:86:40:72:d6:a0:bb:52:40:1d:e5:43:d4:
df:9e:a4:67:63:12:c4:1f:d2:b0:37:4c:74:ab:14:b2:fc:5a:
a1:83:61:12:48:12:22:85:eb:f6:8a:15:b5:1a:fb:49:c4:6c:
ac:ca:e0:38:4d:ee:8a:f2:45:62:58:e8:01:70:a8:06:63:7f:
a0:9c:e7:c6:ed:8a:c5:3b:6d:79:62:7a:05:d6:4e:73:39:e9:
31:3b:e3:64:0f:cf:3a:01:5a:59:48:4c:29:00:8c:ba:08:42:
f1:5c:81:65:d1:8d:63:1d:13:9c:e0:bc:5b:ec:ba:07:71:8d:
04:fd:6a:32:35:12:72:8d:be:42:31:ce:d5:e4:09:35:b7:80:
bc:93:c3:81
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUeni6q2x3wa77LbXOALXjvmpO2FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MTYyMTMxMDBaFw0yNzA4MTUyMTM2MDBaMDMxMTAvBgNV
BAMTKENGRTYxOTEyNUJFNkU4ODhFN0REQjlGN0I4MzlGRDRDN0YxMzE4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvIEDg23g2fvp6x+1KjU/IlFb
4N+isfonusc740r0ZS0UvycfbnNM1kHrzfiTwxVDDeJFJfadpY2xirYsqa+OPabe
r6vYdSenhmLKWbKR/+zhIf6YTuLWbe/EHEL2rG7XSV6oOjVxwqwMSy/oytnSi8Ku
4xMZ9/Jhx3eJ4PKBpuq+id5/VCH3xbrde4DxP5Xo9678Zfp5zUar0FcTjcq/p+V4
w1KwcyOP0z5Orgq92vPGRF2uwwt/s+82jQL2DlaTT5Hs6yHZa+xaJFiRwBUOt2w3
KuVL7bKOdtO60kfsjzhVOnVCpsSA5GMLPV/16ZRFL9+11WZv+KwkGp1s9BqvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUz+YZElvm6Ijn3bn3uDn9TH8TGKIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2d8wDQYJKoZIhvcNAQELBQADggEBACI/xcjjMGZWUB0HOPSoDRxePKXnzHjd
XJiCFLYOtNrRsJ6F7PffbX0ZYw6SROWX303IZ+cdplcGZKk6hid6g/t0S8VsVcK6
XXZQwan7mQQR7VBBUz7npE7SPnG+He1NAXZ9JXLv13juL2k87PB7QU6SzYZActag
u1JAHeVD1N+epGdjEsQf0rA3THSrFLL8WqGDYRJIEiKF6/aKFbUa+0nEbKzK4DhN
7oryRWJY6AFwqAZjf6Cc58btisU7bXliegXWTnM56TE742QPzzoBWllITCkAjLoI
QvFcgWXRjWMdE5zgvFvsugdxjQT9ajI1EnKNvkIxztXkCTW3gLyTw4E=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:11 2026 by rpki-client