Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33362e302f32322d3234203d3e2039333034.roa
File: 3231372e3231372e33362e302f32322d3234203d3e2039333034.roa (raw, json)
Hash identifier: m7TD4eTVz3AQmAInvAklgFv2cFXb9xM0cQaggfkDaso=
Subject key identifier: 7D:D8:B1:0E:F5:0B:D0:CD:20:A5:DB:0D:5E:61:36:34:3F:84:7D:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2544324F06A9842572882182601774195A345693
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33362e302f32322d3234203d3e2039333034.roa
Signing time: Wed 17 Jun 2026 10:25:21 +0000
ROA not before: Wed 17 Jun 2026 10:20:21 +0000
ROA not after: Wed 16 Jun 2027 10:25:21 +0000
asID: 9304
IP address blocks: 217.217.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:44:32:4f:06:a9:84:25:72:88:21:82:60:17:74:19:5a:34:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 17 10:20:21 2026 GMT
Not After : Jun 16 10:25:21 2027 GMT
Subject: CN=7DD8B10EF50BD0CD20A5DB0D5E6136343F847D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:df:b6:c7:07:24:1a:2b:d0:7b:ad:c2:d3:
64:46:d8:36:64:40:f2:4b:e1:c6:33:42:89:17:b7:
9b:f7:6a:22:ce:74:3e:6c:ee:35:03:32:e8:9f:09:
6c:bc:58:30:74:5f:77:78:00:2c:e4:6b:ea:c9:2e:
82:22:3f:4b:04:1e:97:c2:c7:3d:e1:9b:4b:ea:6e:
b8:1e:50:48:eb:af:b4:d2:fb:ef:42:3a:c9:2a:fb:
c0:32:78:37:a7:a9:28:ef:ff:6b:76:5d:21:1e:fe:
5b:c3:3f:e1:9b:27:90:41:36:99:f2:5e:60:0b:1b:
ab:35:1d:51:33:e8:84:02:16:63:ec:23:5b:1d:66:
11:06:ad:78:e9:a7:2a:96:5b:a3:01:ff:9c:41:3e:
db:93:60:a5:ef:a5:a8:03:dd:61:51:11:56:96:36:
9b:ed:5f:a4:0b:6c:fa:5b:d3:a8:32:66:e3:37:6a:
af:4c:4e:bc:d1:21:41:28:dd:ef:5f:ab:4f:f2:ad:
4b:ea:fd:73:a9:9e:9f:1b:bf:f0:b0:45:2b:91:89:
bb:46:4e:7f:9e:c4:ea:18:2e:49:42:95:cc:57:da:
82:bb:2a:22:ff:8f:eb:4e:9c:e0:7d:f2:c7:01:99:
16:16:e3:f4:96:ca:f7:ec:73:03:f3:cb:77:ad:22:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:B1:0E:F5:0B:D0:CD:20:A5:DB:0D:5E:61:36:34:3F:84:7D:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33362e302f32322d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:cb:ea:d7:44:90:b3:e9:06:20:57:f7:63:eb:ce:46:7b:f6:
83:57:53:cb:bf:19:e5:f9:e9:24:bd:81:68:0b:39:ca:20:5c:
81:35:88:34:14:23:15:4a:71:f1:ef:c8:9a:3f:ec:5e:ed:cc:
79:7e:b0:e8:f3:f8:50:54:74:13:09:12:df:40:52:4b:1f:97:
66:89:a8:86:ea:db:4b:9c:8d:4c:17:54:2c:f1:20:0e:71:ce:
89:b4:4b:fc:b7:91:a0:16:0d:c3:ba:dc:56:c4:b1:6c:44:11:
c7:7a:37:34:2e:ce:b6:7b:2b:6a:c5:f7:cd:84:ea:aa:69:e7:
bf:0d:c7:62:fd:c1:b0:4e:76:ca:85:51:56:4e:ab:7c:d7:ad:
81:e1:33:92:9d:57:e1:64:61:69:0c:62:33:06:cf:4d:59:e0:
fb:68:d2:65:53:b3:b6:3c:ca:ba:34:2f:46:10:fc:df:7e:2c:
e0:a0:b6:4c:fc:37:5f:0f:81:34:ae:38:1b:0a:bf:f6:78:c3:
2e:f4:ec:32:08:60:2b:ee:9f:07:b3:e8:dc:84:ba:b8:a1:8d:
30:eb:6b:9a:0f:61:a7:2d:e3:6c:0e:2b:1f:b2:f8:cb:73:1b:
a9:92:12:01:56:cb:c7:20:a8:57:3e:6c:5c:90:e7:a8:45:7e:
45:fa:9a:b8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJUQyTwaphCVyiCGCYBd0GVo0VpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTcxMDIwMjFaFw0yNzA2MTYxMDI1MjFaMDMxMTAvBgNV
BAMTKDdERDhCMTBFRjUwQkQwQ0QyMEE1REIwRDVFNjEzNjM0M0Y4NDdENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryN+2xwckGivQe63C02RG2DZk
QPJL4cYzQokXt5v3aiLOdD5s7jUDMuifCWy8WDB0X3d4ACzka+rJLoIiP0sEHpfC
xz3hm0vqbrgeUEjrr7TS++9COskq+8AyeDenqSjv/2t2XSEe/lvDP+GbJ5BBNpny
XmALG6s1HVEz6IQCFmPsI1sdZhEGrXjppyqWW6MB/5xBPtuTYKXvpagD3WFREVaW
NpvtX6QLbPpb06gyZuM3aq9MTrzRIUEo3e9fq0/yrUvq/XOpnp8bv/CwRSuRibtG
Tn+exOoYLklClcxX2oK7KiL/j+tOnOB98scBmRYW4/SWyvfscwPzy3etIi2tAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfdixDvUL0M0gpdsNXmE2ND+EfWAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMz
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
JDANBgkqhkiG9w0BAQsFAAOCAQEAjMvq10SQs+kGIFf3Y+vORnv2g1dTy78Z5fnp
JL2BaAs5yiBcgTWINBQjFUpx8e/Imj/sXu3MeX6w6PP4UFR0EwkS30BSSx+XZomo
hurbS5yNTBdULPEgDnHOibRL/LeRoBYNw7rcVsSxbEQRx3o3NC7OtnsrasX3zYTq
qmnnvw3HYv3BsE52yoVRVk6rfNetgeEzkp1X4WRhaQxiMwbPTVng+2jSZVOztjzK
ujQvRhD8334s4KC2TPw3Xw+BNK44Gwq/9njDLvTsMghgK+6fB7Po3IS6uKGNMOtr
mg9hpy3jbA4rH7L4y3MbqZISAVbLxyCoVz5sXJDnqEV+RfqauA==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:56 2026 by rpki-client