Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32342d3234203d3e20323032393334.roa
File: 3231372e3231372e38302e302f32342d3234203d3e20323032393334.roa (raw, json)
Hash identifier: rBRye2rtXy3630cGLi3/3QuzfsJ2heShkoGqTlR6cf8=
Subject key identifier: 4A:6F:E0:C9:F5:C6:03:BF:88:6D:69:FA:4D:BB:3F:02:A3:DC:CC:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D97E7C32D0BF04FD5838117CBEE10B1BA5C46A4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32342d3234203d3e20323032393334.roa
Signing time: Thu 08 Oct 2026 11:47:48 +0000
ROA not before: Thu 08 Oct 2026 11:42:48 +0000
ROA not after: Thu 07 Oct 2027 11:47:48 +0000
asID: 202934
IP address blocks: 217.217.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:97:e7:c3:2d:0b:f0:4f:d5:83:81:17:cb:ee:10:b1:ba:5c:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 8 11:42:48 2026 GMT
Not After : Oct 7 11:47:48 2027 GMT
Subject: CN=4A6FE0C9F5C603BF886D69FA4DBB3F02A3DCCC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:a3:fc:23:b8:34:4e:12:5a:a4:f6:0d:88:
d2:57:96:0f:37:4a:0c:99:ee:db:28:c0:9e:8a:3f:
e3:27:03:6f:22:f0:e7:39:d3:14:23:49:30:43:38:
04:ce:ed:a6:65:f4:02:9d:89:a6:54:c4:52:73:a2:
c2:20:fe:af:fe:e7:d8:b7:3d:43:83:5f:e6:ce:42:
67:86:1b:dc:2c:b7:a8:5c:eb:7c:f0:5a:55:b6:ac:
cc:a8:e7:d0:2a:6b:a4:29:da:94:49:26:64:f6:c1:
43:e2:f6:d4:c1:92:a4:46:00:a9:65:2f:e9:5a:a8:
b3:4a:00:df:38:77:d7:02:64:4d:d5:da:5c:f1:a6:
3b:5e:ce:30:0f:c9:1c:62:3f:3c:a7:61:1a:5c:c8:
fd:0b:30:0d:29:c5:39:09:ac:73:b8:92:2f:34:86:
4d:54:dc:fa:15:6a:0e:10:e0:4c:9e:31:6c:c4:84:
97:96:43:08:72:c1:38:2f:e8:f6:a0:e5:cc:c2:ba:
70:e8:2d:5a:cf:57:24:dc:88:4a:2b:5e:8d:99:82:
45:5c:26:12:a5:34:37:92:9b:1b:0c:78:51:4f:d0:
b9:7c:e8:95:63:92:bb:6f:4e:3f:e1:df:31:9d:74:
f6:fe:03:c0:a1:84:22:71:ec:93:57:37:99:f2:fb:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6F:E0:C9:F5:C6:03:BF:88:6D:69:FA:4D:BB:3F:02:A3:DC:CC:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32342d3234203d3e20323032393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.80.0/24
Signature Algorithm: sha256WithRSAEncryption
18:22:55:1c:ef:49:a8:6f:12:24:dd:c9:cd:77:74:b0:4b:e3:
03:f0:b4:4c:69:8e:f2:a3:fe:97:93:81:60:8b:0d:da:be:d7:
dc:a1:44:68:25:4e:e0:5d:6c:34:af:46:78:d1:18:f3:d6:7a:
88:f5:98:51:d0:58:b1:86:1f:68:4a:bf:a1:20:ec:e9:51:0b:
69:06:16:f6:69:77:a5:3c:3f:91:51:2a:9e:62:32:5d:7e:26:
11:e9:7f:db:05:41:14:ae:a9:75:b9:22:15:1f:a1:c3:9e:f9:
8c:4e:6e:54:d1:43:86:7b:dd:6b:65:ae:37:2b:85:5f:9e:bf:
dd:b6:4a:75:1f:af:9a:51:6b:51:8b:7b:a4:b3:2a:6e:fb:7f:
da:08:59:e2:71:60:31:de:b4:64:72:c1:7d:b2:bf:3d:d0:bb:
b3:7a:c6:40:51:ff:e9:7d:49:ba:b0:e4:6d:48:9b:ea:c8:bb:
33:c7:b5:af:b3:f4:ee:61:d9:9e:a7:43:35:f4:da:7c:ba:70:
5d:e1:32:37:99:9a:87:14:69:1b:e3:a3:98:89:d8:75:b7:48:
81:87:39:e6:38:63:26:d2:4b:04:65:63:48:e5:aa:d6:64:1f:
41:76:3a:47:ff:5d:cb:f5:93:de:63:45:96:f2:3b:76:58:44:
8f:7c:f5:67
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULZfnwy0L8E/Vg4EXy+4QsbpcRqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDgxMTQyNDhaFw0yNzEwMDcxMTQ3NDhaMDMxMTAvBgNV
BAMTKDRBNkZFMEM5RjVDNjAzQkY4ODZENjlGQTREQkIzRjAyQTNEQ0NDMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrqP8I7g0ThJapPYNiNJXlg83
SgyZ7tsowJ6KP+MnA28i8Oc50xQjSTBDOATO7aZl9AKdiaZUxFJzosIg/q/+59i3
PUODX+bOQmeGG9wst6hc63zwWlW2rMyo59Aqa6Qp2pRJJmT2wUPi9tTBkqRGAKll
L+laqLNKAN84d9cCZE3V2lzxpjtezjAPyRxiPzynYRpcyP0LMA0pxTkJrHO4ki80
hk1U3PoVag4Q4EyeMWzEhJeWQwhywTgv6Pag5czCunDoLVrPVyTciEorXo2ZgkVc
JhKlNDeSmxsMeFFP0Ll86JVjkrtvTj/h3zGddPb+A8ChhCJx7JNXN5ny+yanAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSm/gyfXGA7+IbWn6Tbs/AqPczCwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzOTMzMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2VAwDQYJKoZIhvcNAQELBQADggEBABgiVRzvSahvEiTdyc13dLBL4wPwtExp
jvKj/peTgWCLDdq+19yhRGglTuBdbDSvRnjRGPPWeoj1mFHQWLGGH2hKv6Eg7OlR
C2kGFvZpd6U8P5FRKp5iMl1+JhHpf9sFQRSuqXW5IhUfocOe+YxOblTRQ4Z73Wtl
rjcrhV+ev922SnUfr5pRa1GLe6SzKm77f9oIWeJxYDHetGRywX2yvz3Qu7N6xkBR
/+l9Sbqw5G1Im+rIuzPHta+z9O5h2Z6nQzX02ny6cF3hMjeZmocUaRvjo5iJ2HW3
SIGHOeY4YybSSwRlY0jlqtZkH0F2Okf/Xcv1k95jRZbyO3ZYRI989Wc=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:18 2026 by rpki-client