Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e36382e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: tPmn99wJDaqd1TJV5WW0pQGa1QaOATbQ93bArnS0ps0=
Subject key identifier: 84:53:C0:AE:5F:89:42:05:7E:45:53:45:B1:DC:25:A2:F7:54:B1:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 59EC8F5346F2187928FBB865568CEE7084DD26C7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037303239.roa
Signing time: Wed 24 Jun 2026 18:25:44 +0000
ROA not before: Wed 24 Jun 2026 18:20:44 +0000
ROA not after: Wed 23 Jun 2027 18:25:44 +0000
asID: 7029
IP address blocks: 217.217.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ec:8f:53:46:f2:18:79:28:fb:b8:65:56:8c:ee:70:84:dd:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:44 2026 GMT
Not After : Jun 23 18:25:44 2027 GMT
Subject: CN=8453C0AE5F8942057E455345B1DC25A2F754B138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:88:59:be:14:fa:14:47:59:b9:27:ab:f2:
31:8f:77:af:5c:af:fa:3d:0c:fd:12:2c:75:95:3b:
f9:1d:43:65:75:58:cc:24:2d:7e:bd:3c:7c:97:13:
2d:9f:ed:60:27:f2:64:d4:3f:ea:9a:4a:cb:bb:db:
23:2a:5b:ce:b3:52:3f:e8:2b:46:da:4e:89:86:df:
33:d4:88:4d:11:bf:b1:f6:98:38:83:49:d2:81:ed:
20:14:cd:af:5a:85:df:c4:05:66:3d:79:c7:cd:1c:
12:6a:3b:17:f8:61:c7:a0:c0:92:cf:fc:26:21:9d:
88:38:2b:53:ca:c1:4d:b4:a7:9d:ae:e9:34:f4:83:
c0:cf:d8:af:75:cf:46:a0:f5:a3:13:5d:54:9d:46:
4c:9c:5d:7a:7e:91:22:32:d8:b0:cf:91:82:4c:11:
68:2c:70:a7:ef:f8:77:4b:96:de:16:a5:4d:4b:41:
c5:87:07:2a:74:26:89:7d:0f:75:c1:ac:7f:2c:54:
b3:8e:c7:e0:81:a5:d6:99:d6:57:91:47:e8:98:ba:
f2:c0:73:9c:79:a9:20:fd:4d:8c:17:fb:f9:a0:e3:
1d:e3:d2:32:f6:89:25:2a:51:e4:4a:68:6e:32:61:
8f:2b:fb:3f:09:60:95:bc:18:95:9a:00:80:d3:79:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:53:C0:AE:5F:89:42:05:7E:45:53:45:B1:DC:25:A2:F7:54:B1:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:7c:38:ee:96:44:d2:f7:7b:59:21:15:28:48:70:ec:e7:0d:
55:cf:ae:8e:17:4c:03:27:27:38:e6:1b:08:6c:68:cd:de:cc:
65:4b:18:36:9e:28:29:39:fc:0c:57:2e:e8:8d:08:1e:63:7b:
ef:e4:41:8a:84:ef:51:37:1f:b5:fb:54:53:46:87:fe:84:81:
60:ca:5a:39:d4:d3:ad:ef:5b:62:ae:fb:28:2d:c2:24:e5:5c:
e1:64:5f:d1:43:fa:8d:00:4f:d9:67:8b:fc:f1:57:bd:c8:14:
bf:fc:94:50:5f:87:f7:a5:4e:bd:53:4c:d9:ef:2e:3e:28:d1:
fc:11:20:91:11:2c:5c:67:59:61:c5:d9:6a:59:41:ba:18:02:
79:28:2a:7d:ca:aa:fa:06:ba:01:dc:89:9f:88:1e:c7:10:d7:
cc:ca:37:4b:d1:d0:29:b4:fe:07:bd:be:45:c7:b0:9f:77:af:
79:b0:e2:47:f6:4c:7a:fb:e0:e9:4d:68:2c:6d:07:d3:f2:91:
98:2f:0c:9c:fa:5b:8e:02:d1:1c:dc:39:c2:ca:74:71:2d:07:
ea:12:df:9b:3c:55:05:bc:19:06:b2:dd:c0:d7:13:ed:26:37:
4a:b3:30:87:9a:e7:2b:f8:f8:d2:26:3d:4b:7f:4f:f5:47:97:
3d:aa:c9:23
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUWeyPU0byGHko+7hlVozucITdJscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MjQxODIwNDRaFw0yNzA2MjMxODI1NDRaMDMxMTAvBgNV
BAMTKDg0NTNDMEFFNUY4OTQyMDU3RTQ1NTM0NUIxREMyNUEyRjc1NEIxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjIhZvhT6FEdZuSer8jGPd69c
r/o9DP0SLHWVO/kdQ2V1WMwkLX69PHyXEy2f7WAn8mTUP+qaSsu72yMqW86zUj/o
K0baTomG3zPUiE0Rv7H2mDiDSdKB7SAUza9ahd/EBWY9ecfNHBJqOxf4YcegwJLP
/CYhnYg4K1PKwU20p52u6TT0g8DP2K91z0ag9aMTXVSdRkycXXp+kSIy2LDPkYJM
EWgscKfv+HdLlt4WpU1LQcWHByp0Jol9D3XBrH8sVLOOx+CBpdaZ1leRR+iYuvLA
c5x5qSD9TYwX+/mg4x3j0jL2iSUqUeRKaG4yYY8r+z8JYJW8GJWaAIDTeQQPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhFPArl+JQgV+RVNFsdwlovdUsTgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM2
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
RDANBgkqhkiG9w0BAQsFAAOCAQEAHXw47pZE0vd7WSEVKEhw7OcNVc+ujhdMAycn
OOYbCGxozd7MZUsYNp4oKTn8DFcu6I0IHmN77+RBioTvUTcftftUU0aH/oSBYMpa
OdTTre9bYq77KC3CJOVc4WRf0UP6jQBP2WeL/PFXvcgUv/yUUF+H96VOvVNM2e8u
PijR/BEgkREsXGdZYcXZallBuhgCeSgqfcqq+ga6AdyJn4gexxDXzMo3S9HQKbT+
B72+Rcewn3evebDiR/ZMevvg6U1oLG0H0/KRmC8MnPpbjgLRHNw5wsp0cS0H6hLf
mzxVBbwZBrLdwNcT7SY3SrMwh5rnK/j40iY9S39P9UeXParJIw==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:29 2026 by rpki-client