Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37362e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e37362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 87Qa7jqE4szMsYYzyaUfIgifCnTAQS+ob5oU7TwzQv8=
Subject key identifier: 08:A5:42:EE:50:24:57:C3:F0:DF:AD:98:F0:8C:2E:69:46:D6:37:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70FE432DF452187270131F47214B2F10B00B301A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37362e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:41:08 +0000
ROA not before: Sat 14 Nov 2026 18:36:08 +0000
ROA not after: Sat 13 Nov 2027 18:41:08 +0000
asID: 834
IP address blocks: 217.217.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fe:43:2d:f4:52:18:72:70:13:1f:47:21:4b:2f:10:b0:0b:30:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 18:36:08 2026 GMT
Not After : Nov 13 18:41:08 2027 GMT
Subject: CN=08A542EE502457C3F0DFAD98F08C2E6946D637CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:da:89:23:a4:a6:38:fd:0b:f2:55:f8:d5:
5a:ea:83:85:73:e3:39:1b:1a:01:71:4b:3b:78:5b:
44:06:e0:4a:5c:f2:61:45:a9:f1:25:2b:e0:91:29:
78:4c:65:d4:3b:d6:e6:de:1b:8b:97:b9:12:1c:4e:
77:79:96:47:20:0f:1a:ee:46:da:f0:4d:5a:55:76:
8b:b2:45:4a:97:20:68:95:43:dd:e0:1f:7c:d0:00:
7d:bc:67:e6:14:63:07:43:c3:96:50:44:54:40:51:
c3:3c:a5:56:90:34:ea:56:83:ed:22:b9:ac:13:2e:
15:5f:8c:ee:90:bf:a7:37:ed:d6:49:c5:22:46:ad:
0f:2d:6e:20:aa:28:39:de:92:75:1a:e3:13:81:f7:
59:cd:b7:b9:85:b9:4e:06:46:9d:47:6d:95:1b:8e:
22:ed:76:20:24:1b:61:d6:2b:43:ad:b7:3c:fe:84:
02:84:8a:45:2f:4d:94:1e:49:ac:d2:da:e3:68:1a:
47:df:b2:90:f1:6d:f4:05:db:aa:4d:98:35:27:d7:
6d:f8:cf:95:51:f8:b1:2e:0e:a2:33:9f:18:fc:6e:
99:09:6f:f2:3f:7c:66:5a:43:d1:51:3c:32:26:0b:
e3:7d:5f:99:2e:f0:ad:2d:0f:fb:6e:71:dc:0c:98:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:42:EE:50:24:57:C3:F0:DF:AD:98:F0:8C:2E:69:46:D6:37:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.76.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7b:fa:79:b8:10:d4:7a:87:99:18:4f:34:13:f4:0d:22:42:
f3:38:81:dc:39:3f:70:ae:42:50:56:81:72:02:e6:9e:ba:79:
9d:90:e4:c7:0d:98:e5:ef:92:b5:a6:f2:cd:1b:b9:69:4f:c5:
c5:ea:85:86:4e:2c:51:07:24:05:01:91:93:84:44:64:aa:3d:
78:fb:dd:42:ff:11:10:de:78:40:93:83:d6:3b:14:a8:eb:cc:
dd:43:81:43:67:b3:e1:c1:95:23:0b:f9:f4:e9:eb:ac:48:2e:
f2:f7:c9:f9:45:8e:27:11:07:81:c5:3a:c5:52:89:e1:25:b5:
4f:4a:74:bd:0b:b6:7c:72:1e:5b:44:64:ec:d9:50:23:5e:f7:
de:9d:c9:fd:33:04:44:44:c9:f8:95:b9:32:4e:ce:ab:6b:c7:
85:28:34:36:66:6b:e5:f2:c4:8c:39:04:ba:54:85:64:ef:71:
b9:f6:4c:70:02:7a:54:48:d6:bd:48:19:18:8e:40:f4:e0:4a:
ab:44:17:8e:67:21:3f:04:dc:be:82:2a:d6:b5:8c:5a:dd:83:
e4:1f:32:2a:4a:25:b3:26:37:51:7c:33:c5:9e:bf:e5:0b:3a:
1d:dd:5e:3f:9e:25:2a:d2:d2:4d:7e:21:b3:f3:16:04:69:53:
47:8d:6c:db
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUcP5DLfRSGHJwEx9HIUsvELALMBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjExMTQxODM2MDhaFw0yNzExMTMxODQxMDhaMDMxMTAvBgNV
BAMTKDA4QTU0MkVFNTAyNDU3QzNGMERGQUQ5OEYwOEMyRTY5NDZENjM3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQtqJI6SmOP0L8lX41Vrqg4Vz
4zkbGgFxSzt4W0QG4Epc8mFFqfElK+CRKXhMZdQ71ubeG4uXuRIcTnd5lkcgDxru
RtrwTVpVdouyRUqXIGiVQ93gH3zQAH28Z+YUYwdDw5ZQRFRAUcM8pVaQNOpWg+0i
uawTLhVfjO6Qv6c37dZJxSJGrQ8tbiCqKDneknUa4xOB91nNt7mFuU4GRp1HbZUb
jiLtdiAkG2HWK0Ottzz+hAKEikUvTZQeSazS2uNoGkffspDxbfQF26pNmDUn1234
z5VR+LEuDqIznxj8bpkJb/I/fGZaQ9FRPDImC+N9X5ku8K0tD/tucdwMmOUFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUCKVC7lAkV8Pw362Y8IwuaUbWN8swHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADZ2Uww
DQYJKoZIhvcNAQELBQADggEBAAh7+nm4ENR6h5kYTzQT9A0iQvM4gdw5P3CuQlBW
gXIC5p66eZ2Q5McNmOXvkrWm8s0buWlPxcXqhYZOLFEHJAUBkZOERGSqPXj73UL/
ERDeeECTg9Y7FKjrzN1DgUNns+HBlSML+fTp66xILvL3yflFjicRB4HFOsVSieEl
tU9KdL0LtnxyHltEZOzZUCNe996dyf0zBEREyfiVuTJOzqtrx4UoNDZma+XyxIw5
BLpUhWTvcbn2THACelRI1r1IGRiOQPTgSqtEF45nIT8E3L6CKta1jFrdg+QfMipK
JbMmN1F8M8Wev+ULOh3dXj+eJSrS0k1+IbPzFgRpU0eNbNs=
-----END CERTIFICATE-----
Generated at Sun Nov 15 05:48:33 2026 by rpki-client