Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e35322e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: itAttwsSQp/3IpV4KuWCruQ9B2QQhgGutRNTUe0cn8o=
Subject key identifier: B0:31:88:CB:E8:43:24:6F:2E:52:61:60:76:13:33:73:0D:15:69:67
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AA967CA6571EA9BA303678B26F0436D5576B9E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e203230313135.roa
Signing time: Fri 19 Jun 2026 19:25:31 +0000
ROA not before: Fri 19 Jun 2026 19:20:31 +0000
ROA not after: Fri 18 Jun 2027 19:25:31 +0000
asID: 20115
IP address blocks: 217.217.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a9:67:ca:65:71:ea:9b:a3:03:67:8b:26:f0:43:6d:55:76:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 19:20:31 2026 GMT
Not After : Jun 18 19:25:31 2027 GMT
Subject: CN=B03188CBE843246F2E526160761333730D156967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:57:19:4a:23:74:45:2a:31:49:85:f4:ee:25:
af:23:73:16:7b:15:1a:8f:80:3e:11:1d:1f:9f:91:
cf:9c:3b:cd:a4:d3:c4:c1:29:41:79:80:71:fb:f4:
d6:42:0f:09:19:e9:de:4a:84:26:09:a1:85:1a:60:
22:ac:a8:d4:c2:d1:f1:69:51:fc:ed:eb:14:38:ff:
4b:ca:b4:1c:d8:b0:f9:5c:2c:bc:74:17:e0:32:7a:
1f:c1:cd:05:c0:2d:04:e3:f1:65:35:5f:54:9a:28:
46:06:23:c6:0f:64:a3:41:fe:71:7e:77:37:cc:01:
8a:57:55:99:e0:99:de:c8:33:0c:f4:d1:eb:05:08:
0d:82:47:c7:42:34:d6:a8:56:d5:5a:7c:c3:ec:8c:
0d:bd:e5:4d:37:b3:4c:d3:1a:95:54:84:8a:bc:0d:
60:27:d6:fe:69:9e:93:f9:a7:03:75:66:8d:d1:06:
e3:a6:38:7a:d4:75:49:f2:15:a8:93:67:6a:89:47:
71:e0:9f:dd:3a:b4:a7:3f:19:e7:5f:10:8a:00:7d:
ca:1d:25:31:23:e9:5b:b7:31:fd:fb:1a:ef:30:71:
f4:d7:9c:b3:eb:65:10:ac:34:fa:e7:2d:f7:eb:8d:
ae:34:7b:6d:90:67:7e:b1:f5:63:bf:cf:db:bb:22:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:88:CB:E8:43:24:6F:2E:52:61:60:76:13:33:73:0D:15:69:67
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:64:8b:16:93:f2:81:1c:6e:42:9c:6b:d5:fb:5a:d9:51:f5:
82:94:1f:f7:e7:15:f9:02:f8:46:88:72:d3:be:c4:fe:8f:87:
14:58:d2:0c:2a:8e:f2:fb:5b:75:0f:75:9e:6a:de:3d:6c:ce:
36:30:eb:39:78:80:26:73:2f:5d:b3:05:54:61:78:b1:fe:89:
1d:51:2e:c4:11:a2:c7:8e:ee:17:6c:dc:17:9e:07:20:e8:a1:
ab:d7:01:cc:35:1e:fd:35:a9:91:e0:61:1d:f7:ff:73:a0:76:
a3:10:0c:7d:ff:ee:e1:7b:7d:d7:18:9b:13:e7:77:89:71:5a:
b1:46:8c:56:b1:9d:28:27:bd:10:bd:19:7b:7f:b2:fd:ec:4e:
85:0f:55:39:73:ea:21:d3:bc:a0:09:fa:69:c2:9d:6b:c9:51:
42:f2:d2:c3:fc:61:96:10:0b:8d:18:40:99:85:eb:e3:0e:5a:
fa:3b:2f:40:cc:40:d7:3b:9f:a6:07:ff:2c:27:fb:d9:77:40:
aa:f9:51:93:93:d8:3d:28:4c:44:2a:c8:4e:86:87:c5:0b:61:
71:35:09:e8:65:76:e5:bf:9f:79:67:5a:d2:74:b0:4e:3f:0c:
1a:7e:d1:9f:23:59:df:2b:55:e4:7e:38:7b:5b:52:02:bb:36:
69:e2:2f:6d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOqlnymVx6pujA2eLJvBDbVV2ueEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTkxOTIwMzFaFw0yNzA2MTgxOTI1MzFaMDMxMTAvBgNV
BAMTKEIwMzE4OENCRTg0MzI0NkYyRTUyNjE2MDc2MTMzMzczMEQxNTY5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4VxlKI3RFKjFJhfTuJa8jcxZ7
FRqPgD4RHR+fkc+cO82k08TBKUF5gHH79NZCDwkZ6d5KhCYJoYUaYCKsqNTC0fFp
Ufzt6xQ4/0vKtBzYsPlcLLx0F+Ayeh/BzQXALQTj8WU1X1SaKEYGI8YPZKNB/nF+
dzfMAYpXVZngmd7IMwz00esFCA2CR8dCNNaoVtVafMPsjA295U03s0zTGpVUhIq8
DWAn1v5pnpP5pwN1Zo3RBuOmOHrUdUnyFaiTZ2qJR3Hgn906tKc/GedfEIoAfcod
JTEj6Vu3Mf37Gu8wcfTXnLPrZRCsNPrnLffrja40e22QZ36x9WO/z9u7ItYHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsDGIy+hDJG8uUmFgdhMzcw0VaWcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM1
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzEzMTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
2dk0MA0GCSqGSIb3DQEBCwUAA4IBAQB9ZIsWk/KBHG5CnGvV+1rZUfWClB/35xX5
AvhGiHLTvsT+j4cUWNIMKo7y+1t1D3Weat49bM42MOs5eIAmcy9dswVUYXix/okd
US7EEaLHju4XbNwXngcg6KGr1wHMNR79NamR4GEd9/9zoHajEAx9/+7he33XGJsT
53eJcVqxRoxWsZ0oJ70QvRl7f7L97E6FD1U5c+oh07ygCfppwp1ryVFC8tLD/GGW
EAuNGECZhevjDlr6Oy9AzEDXO5+mB/8sJ/vZd0Cq+VGTk9g9KExEKshOhofFC2Fx
NQnoZXblv595Z1rSdLBOPwwaftGfI1nfK1Xkfjh7W1ICuzZp4i9t
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:43 2026 by rpki-client