Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234362e302f32342d3234203d3e20323136323533.roa
File: 3231372e3231372e3234362e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 4nvgg1H8BWb2xGsIhHMbzMg+QWRQUFezOJUdSraI7rE=
Subject key identifier: ED:33:8F:13:55:83:DD:A9:52:1A:AE:71:4F:C6:A6:77:B2:DB:E3:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70E43436F01C5AF72FDB11374099A1667EEA7DCD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234362e302f32342d3234203d3e20323136323533.roa
Signing time: Tue 18 Aug 2026 19:28:05 +0000
ROA not before: Tue 18 Aug 2026 19:23:05 +0000
ROA not after: Tue 17 Aug 2027 19:28:05 +0000
asID: 216253
IP address blocks: 217.217.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e4:34:36:f0:1c:5a:f7:2f:db:11:37:40:99:a1:66:7e:ea:7d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 18 19:23:05 2026 GMT
Not After : Aug 17 19:28:05 2027 GMT
Subject: CN=ED338F135583DDA9521AAE714FC6A677B2DBE36B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:f5:d7:3d:5d:3e:cf:1f:a8:1f:c0:31:11:
39:75:38:6c:1f:cb:02:12:ce:08:8d:86:8d:78:cf:
f2:e5:27:8b:82:ca:1b:18:25:e1:56:89:17:34:6b:
59:2d:e4:6f:ed:f5:9d:31:5a:6c:15:90:e4:ed:42:
59:14:a0:e8:84:b7:da:55:37:17:df:d6:75:44:e5:
24:f9:46:ee:aa:81:ec:7b:26:1c:dd:79:df:3c:a1:
01:07:05:5d:fa:a3:5d:2e:73:cf:08:13:53:af:33:
6e:f8:6f:b6:fb:4a:03:f9:80:68:cf:42:d5:4c:b2:
4b:69:04:18:13:80:8e:90:6e:ef:4e:1c:1c:1e:03:
15:c4:99:6c:e0:44:2e:94:0c:fc:f3:e3:71:e5:5a:
b6:9a:39:40:ad:fe:c0:5b:27:ce:94:e9:6b:66:91:
34:44:69:33:d4:cd:48:18:1e:aa:0f:27:85:97:a5:
d0:39:05:19:8b:62:5e:59:33:1a:77:98:30:1f:18:
2d:f9:00:3f:92:71:3a:5e:23:9f:7f:80:05:52:61:
d0:99:24:b4:cb:11:55:0d:96:f8:80:24:11:0c:1f:
1a:66:7c:92:0f:37:0e:a2:20:fc:ec:b1:77:cb:18:
14:fb:da:3f:a0:53:48:2d:e1:9c:01:97:c8:5e:c2:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:8F:13:55:83:DD:A9:52:1A:AE:71:4F:C6:A6:77:B2:DB:E3:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234362e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.246.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e3:ea:a5:0f:03:07:ff:69:31:81:d0:df:32:12:a1:06:3b:
a8:54:b7:82:24:b4:2e:00:47:39:15:a0:17:ab:0e:65:73:65:
61:90:f4:0e:c2:52:b8:9e:97:0e:31:5e:c3:94:29:41:a9:a4:
34:2e:fe:14:ce:a9:4c:95:cc:69:6b:bc:3e:d7:1f:e2:6b:1b:
f5:a7:0c:a2:1a:fb:b7:65:2a:b5:7e:b9:e6:c4:1a:31:e0:75:
2b:04:5f:2c:19:b5:7c:c8:e0:1a:7d:f4:7a:b4:16:62:0b:eb:
9c:dd:cc:e1:46:dd:90:86:4a:5e:6d:04:ec:d5:78:ea:be:18:
d1:22:13:fa:31:9a:64:bd:65:d4:da:4a:67:4c:f6:a2:a3:ac:
87:36:14:7a:65:b4:23:60:a7:18:43:62:6c:06:a2:cc:a8:26:
08:fe:4e:72:7b:1b:72:b0:86:b5:d5:22:6c:43:57:2e:50:da:
cd:80:52:d3:e4:8a:8c:87:67:e3:10:a2:f6:c4:dd:80:3c:29:
b9:83:41:6b:72:0c:0e:06:88:d9:2e:b6:2a:b0:fd:54:f0:99:
89:17:4f:65:6f:a3:d6:5d:78:20:e4:f7:98:ad:bf:d5:38:b0:
46:d8:da:55:ef:e2:8f:3e:87:6b:cd:f4:d6:6a:fe:76:0a:82:
28:3a:6a:65
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcOQ0NvAcWvcv2xE3QJmhZn7qfc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MTgxOTIzMDVaFw0yNzA4MTcxOTI4MDVaMDMxMTAvBgNV
BAMTKEVEMzM4RjEzNTU4M0REQTk1MjFBQUU3MTRGQzZBNjc3QjJEQkUzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiT/XXPV0+zx+oH8AxETl1OGwf
ywISzgiNho14z/LlJ4uCyhsYJeFWiRc0a1kt5G/t9Z0xWmwVkOTtQlkUoOiEt9pV
Nxff1nVE5ST5Ru6qgex7Jhzded88oQEHBV36o10uc88IE1OvM274b7b7SgP5gGjP
QtVMsktpBBgTgI6Qbu9OHBweAxXEmWzgRC6UDPzz43HlWraaOUCt/sBbJ86U6Wtm
kTREaTPUzUgYHqoPJ4WXpdA5BRmLYl5ZMxp3mDAfGC35AD+ScTpeI59/gAVSYdCZ
JLTLEVUNlviAJBEMHxpmfJIPNw6iIPzssXfLGBT72j+gU0gt4ZwBl8hewkTRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU7TOPE1WD3alSGq5xT8amd7Lb42swHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMyMzUzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZ9jANBgkqhkiG9w0BAQsFAAOCAQEAJ+PqpQ8DB/9pMYHQ3zISoQY7qFS3
giS0LgBHORWgF6sOZXNlYZD0DsJSuJ6XDjFew5QpQamkNC7+FM6pTJXMaWu8Ptcf
4msb9acMohr7t2UqtX655sQaMeB1KwRfLBm1fMjgGn30erQWYgvrnN3M4UbdkIZK
Xm0E7NV46r4Y0SIT+jGaZL1l1NpKZ0z2oqOshzYUemW0I2CnGENibAaizKgmCP5O
cnsbcrCGtdUibENXLlDazYBS0+SKjIdn4xCi9sTdgDwpuYNBa3IMDgaI2S62KrD9
VPCZiRdPZW+j1l14IOT3mK2/1TiwRtjaVe/ijz6Ha8301mr+dgqCKDpqZQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:21:47 2026 by rpki-client