Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34342e302f32322d3234203d3e2039333034.roa
File: 3231372e3231372e34342e302f32322d3234203d3e2039333034.roa (raw, json)
Hash identifier: 65XSOejHrkK+4uuAsAISY+spVS+DcvTJv7SxunvlYlo=
Subject key identifier: B7:41:A7:4F:29:54:FC:0A:23:2E:16:17:84:95:B6:7B:EE:F6:20:39
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 726B6CDC11BCAA35ED1ED1AE804FDEAA7377D6B4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34342e302f32322d3234203d3e2039333034.roa
Signing time: Mon 24 Aug 2026 09:38:07 +0000
ROA not before: Mon 24 Aug 2026 09:33:07 +0000
ROA not after: Mon 23 Aug 2027 09:38:07 +0000
asID: 9304
IP address blocks: 217.217.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6b:6c:dc:11:bc:aa:35:ed:1e:d1:ae:80:4f:de:aa:73:77:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:33:07 2026 GMT
Not After : Aug 23 09:38:07 2027 GMT
Subject: CN=B741A74F2954FC0A232E16178495B67BEEF62039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:6b:30:db:c0:92:0b:8d:4c:83:88:8a:cf:
b8:87:eb:3f:75:24:2a:c2:d7:e9:53:b7:19:81:93:
2e:53:20:0d:59:7c:37:02:6a:1d:7e:b0:87:b8:90:
50:dc:00:d3:4f:8a:d0:92:8c:13:2a:ae:20:23:4b:
d6:50:f8:93:1d:5b:29:d5:51:5a:96:7f:c7:89:8d:
74:84:e1:03:25:0f:b1:eb:81:89:67:5e:4a:7e:dd:
d5:1a:a6:6a:c4:f0:d9:f8:da:ad:e8:b2:0d:76:23:
51:3e:f7:f6:78:53:3e:45:bf:f0:ee:35:64:3a:e2:
68:52:30:48:67:4c:bd:82:43:b1:63:fc:12:57:93:
74:c7:65:23:ee:f6:44:bf:24:d3:b4:a2:9a:d7:73:
d4:36:1c:81:2a:b1:07:88:dc:df:72:98:a7:08:10:
7a:91:08:c5:04:e1:f8:8c:78:bf:96:ba:ae:da:6f:
b9:79:90:f9:9f:b2:96:29:be:2f:a2:83:b5:5d:41:
e7:11:e5:9f:02:27:a7:d2:33:95:f7:c8:82:bc:1f:
c0:34:52:55:4c:68:cd:ed:cb:b3:88:a3:df:ff:10:
67:d8:0c:ab:66:e6:6b:60:3d:51:dc:bb:e8:7b:9c:
46:4b:9f:a8:c3:43:1f:2a:7f:ca:06:6e:7f:28:91:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:A7:4F:29:54:FC:0A:23:2E:16:17:84:95:B6:7B:EE:F6:20:39
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34342e302f32322d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.44.0/22
Signature Algorithm: sha256WithRSAEncryption
82:27:91:50:50:ed:f8:08:a6:37:22:21:f6:fa:1b:ca:5f:63:
f3:1f:ff:7b:4c:ba:53:1e:61:d6:c0:86:7d:4e:39:d4:6a:00:
0b:9f:a7:b2:13:4a:6e:bf:19:fe:c5:d4:47:ca:a3:2a:03:a9:
40:ff:73:f8:a2:16:54:4f:5b:9b:8e:ec:10:34:bc:63:7f:fc:
d7:82:a6:bc:dc:4f:ae:79:f8:80:93:52:86:ed:81:ac:cc:e9:
94:04:ff:f3:8b:46:c4:7b:4c:5d:13:fe:cd:e1:f2:6f:af:22:
2b:57:64:4f:6a:97:7f:7a:3d:e4:ef:60:a5:17:7a:0e:29:b9:
b5:fb:28:35:e7:9f:fb:54:c5:f3:e8:dc:21:a8:39:d0:fc:49:
60:79:1d:13:7b:cf:de:00:17:70:7f:16:65:ae:20:6d:76:2c:
71:f2:95:9f:cc:9d:37:14:b0:0a:0c:80:4d:8a:f2:01:07:75:
ea:96:b5:c6:cd:5a:52:02:47:d5:84:38:df:60:3c:f0:09:4a:
db:af:5d:07:ca:9a:32:e6:ac:58:b5:87:7c:77:cc:eb:f0:1d:
29:1d:99:8e:f9:07:e3:ab:b9:54:4f:5f:03:41:fc:3b:fc:f2:
b7:a8:75:38:54:cb:9a:6f:40:99:63:24:e1:4e:28:fe:d2:93:
ed:77:b4:12
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcmts3BG8qjXtHtGugE/eqnN31rQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjQwOTMzMDdaFw0yNzA4MjMwOTM4MDdaMDMxMTAvBgNV
BAMTKEI3NDFBNzRGMjk1NEZDMEEyMzJFMTYxNzg0OTVCNjdCRUVGNjIwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEmsw28CSC41Mg4iKz7iH6z91
JCrC1+lTtxmBky5TIA1ZfDcCah1+sIe4kFDcANNPitCSjBMqriAjS9ZQ+JMdWynV
UVqWf8eJjXSE4QMlD7HrgYlnXkp+3dUapmrE8Nn42q3osg12I1E+9/Z4Uz5Fv/Du
NWQ64mhSMEhnTL2CQ7Fj/BJXk3THZSPu9kS/JNO0oprXc9Q2HIEqsQeI3N9ymKcI
EHqRCMUE4fiMeL+Wuq7ab7l5kPmfspYpvi+ig7VdQecR5Z8CJ6fSM5X3yIK8H8A0
UlVMaM3ty7OIo9//EGfYDKtm5mtgPVHcu+h7nEZLn6jDQx8qf8oGbn8okTgNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUt0GnTylU/AojLhYXhJW2e+72IDkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM0
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
LDANBgkqhkiG9w0BAQsFAAOCAQEAgieRUFDt+AimNyIh9vobyl9j8x//e0y6Ux5h
1sCGfU451GoAC5+nshNKbr8Z/sXUR8qjKgOpQP9z+KIWVE9bm47sEDS8Y3/814Km
vNxPrnn4gJNShu2BrMzplAT/84tGxHtMXRP+zeHyb68iK1dkT2qXf3o95O9gpRd6
Dim5tfsoNeef+1TF8+jcIag50PxJYHkdE3vP3gAXcH8WZa4gbXYscfKVn8ydNxSw
CgyATYryAQd16pa1xs1aUgJH1YQ432A88AlK269dB8qaMuasWLWHfHfM6/AdKR2Z
jvkH46u5VE9fA0H8O/zyt6h1OFTLmm9AmWMk4U4o/tKT7Xe0Eg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:34 2026 by rpki-client