Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3235322e302f32322d3332203d3e20313431393935.roa
File: 3231372e3231372e3235322e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: ggf9PqnmtpRytCkPpLm06FfgV/TBqsIUwNcwhFkwF4I=
Subject key identifier: FE:5B:6A:CB:45:47:25:E7:66:D9:44:96:54:F3:99:86:C3:DE:91:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F583D2B3BC778F6FDF10C8C8F376600B4E48235
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3235322e302f32322d3332203d3e20313431393935.roa
Signing time: Tue 16 Jun 2026 19:25:18 +0000
ROA not before: Tue 16 Jun 2026 19:20:18 +0000
ROA not after: Tue 15 Jun 2027 19:25:18 +0000
asID: 141995
IP address blocks: 217.217.252.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:58:3d:2b:3b:c7:78:f6:fd:f1:0c:8c:8f:37:66:00:b4:e4:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 16 19:20:18 2026 GMT
Not After : Jun 15 19:25:18 2027 GMT
Subject: CN=FE5B6ACB454725E766D9449654F39986C3DE9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:e5:25:a8:de:80:23:ba:73:a5:9f:11:04:
e5:c8:6f:98:75:66:f8:95:0f:a6:e7:61:f6:31:34:
1f:dd:54:66:65:50:43:aa:10:ab:04:18:9e:63:9e:
1c:0c:c8:f0:27:73:2c:61:20:fd:91:79:7d:e4:c1:
b3:7e:65:a5:5b:22:aa:9f:aa:6f:65:03:c9:93:fb:
af:61:9d:d4:62:04:38:82:16:07:42:68:08:03:4e:
1a:42:b4:15:32:a0:a5:f8:56:d1:e0:d5:86:2e:b6:
d4:4a:65:e1:91:e0:e2:13:0f:48:0e:2b:fa:7e:eb:
90:73:db:20:78:96:ba:d0:a5:2c:a0:67:a5:ae:f3:
fa:ef:0c:b9:1d:2e:35:3d:3c:b7:40:7d:f6:5a:a0:
e9:cb:99:5f:c8:34:c4:28:3f:ff:fe:c6:23:cf:b6:
6f:ab:af:fa:dd:07:63:d4:53:c3:f3:f3:bf:1c:81:
24:bf:fa:82:87:4c:59:7d:80:8d:71:2f:ca:53:84:
ff:81:ea:9f:1a:df:7a:5b:ad:89:8c:95:67:31:8f:
e9:26:ab:ab:c1:5c:68:a6:47:34:e5:64:f0:4e:ee:
1e:09:9c:55:c2:e6:22:e8:e3:01:f2:1f:2a:d4:21:
3f:3f:cf:6a:41:70:08:c9:73:fe:05:59:15:68:03:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:6A:CB:45:47:25:E7:66:D9:44:96:54:F3:99:86:C3:DE:91:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3235322e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.252.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c4:5d:1c:e8:ad:d2:c6:b2:76:eb:a1:95:ed:99:53:82:7c:
10:3c:9e:5d:a9:3c:5b:ed:3c:71:1b:0e:ea:af:6f:d1:30:ba:
b5:c5:2f:b9:a3:e4:e2:36:e9:59:8d:d9:21:94:f1:32:57:e6:
d5:2b:a3:e6:83:7c:c7:ef:b4:e3:a7:37:c7:0f:08:6c:38:33:
c9:2e:f1:71:1c:6e:2c:78:2b:ac:e9:0a:9b:13:7f:be:34:d6:
e5:38:53:b5:3a:19:0d:30:cd:08:61:a0:c3:07:1e:c0:94:63:
b2:d4:fd:c0:73:0d:c7:3e:f7:28:00:10:f0:8d:ab:8d:dd:58:
b3:ea:80:c8:40:0a:e5:7c:8e:33:fb:da:11:aa:58:76:0b:68:
fe:14:c0:88:97:19:17:91:c7:ee:31:6d:5f:08:61:ba:14:ea:
45:0e:c6:aa:4c:82:bb:1c:c3:60:c1:2f:55:e1:a2:e4:30:7b:
52:17:ab:7a:99:c7:55:15:bd:29:88:6f:ac:73:34:39:a5:4c:
de:1b:d3:99:93:72:51:c8:9f:ef:32:0e:68:cd:74:4c:97:0a:
73:70:e4:da:74:c8:7b:fb:8e:e8:19:51:56:b9:f2:fb:fb:e8:
6a:5d:3e:3b:e6:d8:e3:98:03:10:0c:e4:8d:35:dd:3a:a5:ba:
22:3b:b3:bb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUL1g9KzvHePb98QyMjzdmALTkgjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTYxOTIwMThaFw0yNzA2MTUxOTI1MThaMDMxMTAvBgNV
BAMTKEZFNUI2QUNCNDU0NzI1RTc2NkQ5NDQ5NjU0RjM5OTg2QzNERTkxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F+UlqN6AI7pzpZ8RBOXIb5h1
ZviVD6bnYfYxNB/dVGZlUEOqEKsEGJ5jnhwMyPAncyxhIP2ReX3kwbN+ZaVbIqqf
qm9lA8mT+69hndRiBDiCFgdCaAgDThpCtBUyoKX4VtHg1YYuttRKZeGR4OITD0gO
K/p+65Bz2yB4lrrQpSygZ6Wu8/rvDLkdLjU9PLdAffZaoOnLmV/INMQoP//+xiPP
tm+rr/rdB2PUU8Pz878cgSS/+oKHTFl9gI1xL8pThP+B6p8a33pbrYmMlWcxj+km
q6vBXGimRzTlZPBO7h4JnFXC5iLo4wHyHyrUIT8/z2pBcAjJc/4FWRVoA+/nAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU/ltqy0VHJedm2USWVPOZhsPekRYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtnZ/DANBgkqhkiG9w0BAQsFAAOCAQEANcRdHOit0sayduuhle2ZU4J8EDye
Xak8W+08cRsO6q9v0TC6tcUvuaPk4jbpWY3ZIZTxMlfm1Suj5oN8x++046c3xw8I
bDgzyS7xcRxuLHgrrOkKmxN/vjTW5ThTtToZDTDNCGGgwwcewJRjstT9wHMNxz73
KAAQ8I2rjd1Ys+qAyEAK5XyOM/vaEapYdgto/hTAiJcZF5HH7jFtXwhhuhTqRQ7G
qkyCuxzDYMEvVeGi5DB7UherepnHVRW9KYhvrHM0OaVM3hvTmZNyUcif7zIOaM10
TJcKc3Dk2nTIe/uO6BlRVrny+/voal0+O+bY45gDEAzkjTXdOqW6Ijuzuw==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:37 2026 by rpki-client