Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e2032383536.roa
File: 3231372e3231372e35362e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: 62zgmSc1nKKBBsbMOUnaoBfAv2TzIePADT7IFDwgdwY=
Subject key identifier: 98:19:D2:87:8F:59:7F:2F:F7:79:B2:ED:64:9B:08:DE:BF:32:E7:26
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 371FA06169DFD32991538244F84E976B12878A70
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e2032383536.roa
Signing time: Thu 18 Jun 2026 18:25:23 +0000
ROA not before: Thu 18 Jun 2026 18:20:23 +0000
ROA not after: Thu 17 Jun 2027 18:25:23 +0000
asID: 2856
IP address blocks: 217.217.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1f:a0:61:69:df:d3:29:91:53:82:44:f8:4e:97:6b:12:87:8a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 18:20:23 2026 GMT
Not After : Jun 17 18:25:23 2027 GMT
Subject: CN=9819D2878F597F2FF779B2ED649B08DEBF32E726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:6b:02:08:4d:b3:29:f8:d1:a1:da:67:af:
eb:fa:42:bf:e4:a1:51:07:63:8e:4c:c3:ef:0f:b5:
9f:7a:ba:3c:19:02:8c:48:25:db:7b:6a:e9:81:7d:
e8:f5:57:76:85:26:df:90:d9:30:23:ed:70:96:0a:
0f:69:3b:f6:73:f6:68:53:58:18:34:4d:6b:14:eb:
e4:d0:43:0d:c3:55:b4:b9:e3:19:33:35:21:43:11:
55:52:87:a0:b1:87:f5:14:2f:76:22:a5:94:4f:75:
a6:c9:53:34:44:73:f1:e2:fc:db:f3:ac:92:90:c6:
0b:d4:d0:83:b6:2a:e6:9a:41:f2:bf:ca:91:5b:0c:
a3:bc:21:c7:11:8b:8c:7f:e0:f6:29:3c:fb:e4:0b:
d3:28:cc:91:f4:59:83:26:fc:e9:1e:77:fe:59:85:
03:bc:1e:f9:52:76:ed:d6:a1:da:d1:d7:80:01:f3:
99:bc:ae:f4:4d:55:e6:d9:24:e3:af:45:de:a6:40:
bd:9e:d4:fc:9c:c1:1b:86:df:bf:b4:8c:84:bb:00:
ec:33:ac:23:0b:ad:05:00:cd:7e:fc:bf:d0:a9:d2:
23:b9:ad:e9:aa:35:e7:59:94:40:84:ce:93:4d:81:
04:36:6d:a3:3c:12:94:50:6f:d6:65:36:4e:e0:59:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:D2:87:8F:59:7F:2F:F7:79:B2:ED:64:9B:08:DE:BF:32:E7:26
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35362e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.56.0/22
Signature Algorithm: sha256WithRSAEncryption
29:c9:10:fb:1f:7a:65:b3:c2:92:7a:1e:01:c4:6e:a3:83:97:
6b:a4:ba:41:94:e5:72:1f:52:f9:65:66:8e:54:d7:2f:7b:47:
7e:42:9e:f5:64:d5:de:ca:d3:0c:91:38:75:b3:d6:04:83:ec:
42:7c:e7:e3:1f:c6:5f:04:53:b6:6c:62:05:21:98:30:a1:86:
67:27:5f:c7:1e:f4:9d:73:87:d3:a5:e2:bd:c4:d5:35:d0:3c:
35:85:20:9f:75:e1:0f:0b:de:c1:0d:d2:f0:d1:9b:12:28:34:
8c:42:d4:88:5c:4d:f3:ed:52:3a:01:0d:a0:66:d2:7c:91:19:
a9:bd:fd:0a:30:ee:e7:7d:8b:ed:ca:b5:cc:e5:88:77:38:e8:
c5:44:56:e6:7f:51:36:9f:46:f7:69:5d:32:15:ec:71:30:a0:
ad:8a:ab:eb:ea:44:91:ea:f8:7f:06:02:b6:e5:cb:1b:22:32:
b5:12:47:d7:f7:77:23:9f:99:af:7a:63:d9:fa:f0:76:68:65:
59:f1:66:40:1f:9a:a2:c8:32:cf:a4:f7:91:d9:e6:c6:54:f0:
42:85:8a:30:2c:10:ee:e4:c5:a1:5e:4e:9b:cd:2b:e7:11:a4:
02:c8:75:0e:78:e5:ab:f1:49:6a:91:3d:d9:a2:b9:ab:b4:c0:
6e:68:f0:4a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNx+gYWnf0ymRU4JE+E6XaxKHinAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTgxODIwMjNaFw0yNzA2MTcxODI1MjNaMDMxMTAvBgNV
BAMTKDk4MTlEMjg3OEY1OTdGMkZGNzc5QjJFRDY0OUIwOERFQkYzMkU3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3WsCCE2zKfjRodpnr+v6Qr/k
oVEHY45Mw+8PtZ96ujwZAoxIJdt7aumBfej1V3aFJt+Q2TAj7XCWCg9pO/Zz9mhT
WBg0TWsU6+TQQw3DVbS54xkzNSFDEVVSh6Cxh/UUL3YipZRPdabJUzREc/Hi/Nvz
rJKQxgvU0IO2KuaaQfK/ypFbDKO8IccRi4x/4PYpPPvkC9MozJH0WYMm/Oked/5Z
hQO8HvlSdu3WodrR14AB85m8rvRNVebZJOOvRd6mQL2e1PycwRuG37+0jIS7AOwz
rCMLrQUAzX78v9Cp0iO5remqNedZlECEzpNNgQQ2baM8EpRQb9ZlNk7gWf4ZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUmBnSh49Zfy/3ebLtZJsI3r8y5yYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM1
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzUzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
ODANBgkqhkiG9w0BAQsFAAOCAQEAKckQ+x96ZbPCknoeAcRuo4OXa6S6QZTlch9S
+WVmjlTXL3tHfkKe9WTV3srTDJE4dbPWBIPsQnzn4x/GXwRTtmxiBSGYMKGGZydf
xx70nXOH06XivcTVNdA8NYUgn3XhDwvewQ3S8NGbEig0jELUiFxN8+1SOgENoGbS
fJEZqb39CjDu532L7cq1zOWIdzjoxURW5n9RNp9G92ldMhXscTCgrYqr6+pEker4
fwYCtuXLGyIytRJH1/d3I5+Zr3pj2frwdmhlWfFmQB+aosgyz6T3kdnmxlTwQoWK
MCwQ7uTFoV5Om80r5xGkAsh1Dnjlq/FJapE92aK5q7TAbmjwSg==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:30 2026 by rpki-client