Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38342e302f32342d3234203d3e20323139303735.roa
File: 3231372e3231372e38342e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: uaUxAvbWsIYVrp1IpLKk9inP56FQ1Whg5AJFdf23Vb0=
Subject key identifier: E7:27:D0:8D:0A:7A:4F:F8:12:25:4C:2E:70:58:8A:D2:DF:AF:93:56
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4C93AC83780E9A66A6C30A8D423B25A0EF6C4CEE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38342e302f32342d3234203d3e20323139303735.roa
Signing time: Sat 10 Oct 2026 19:46:00 +0000
ROA not before: Sat 10 Oct 2026 19:41:00 +0000
ROA not after: Sat 09 Oct 2027 19:46:00 +0000
asID: 219075
IP address blocks: 217.217.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:93:ac:83:78:0e:9a:66:a6:c3:0a:8d:42:3b:25:a0:ef:6c:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 19:41:00 2026 GMT
Not After : Oct 9 19:46:00 2027 GMT
Subject: CN=E727D08D0A7A4FF812254C2E70588AD2DFAF9356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:97:61:b7:0b:3a:12:6e:0e:42:26:17:e3:
a2:b5:b3:15:aa:3b:84:63:9e:78:b1:6f:4c:03:4f:
81:68:d2:37:b5:7d:8e:c4:99:f9:1c:b4:4b:b3:c1:
c4:82:d4:2d:22:18:85:13:3c:48:9d:d5:00:39:fc:
4e:15:03:7d:18:3f:7b:57:f3:b0:f0:56:92:f9:19:
76:b2:5e:6c:66:2c:80:93:1c:d2:0a:96:f2:7b:3c:
19:b8:8a:05:2a:f5:35:0c:1d:03:a5:b3:86:b5:f8:
2c:06:7a:6d:8d:db:52:1c:f3:fd:78:01:94:ed:cb:
b9:e9:53:16:7f:a6:1f:e8:d5:b3:14:f6:d5:1d:a0:
15:18:e9:7e:38:8d:d0:35:0c:65:93:25:6a:d9:db:
6d:1f:0c:2d:96:08:ad:df:a0:a1:c7:9b:54:40:cb:
f8:fc:dd:55:c8:3e:da:c9:92:9a:dd:a2:9c:3f:83:
80:f3:f7:40:6f:f6:3f:a4:f8:81:c9:c6:8c:49:b0:
c2:22:7d:20:a3:8f:f9:8a:b1:65:3b:b1:74:e3:67:
98:f1:19:93:c1:fb:ef:52:73:28:36:90:64:4b:71:
8a:e6:a4:a3:72:7a:32:1c:f8:8b:8c:12:88:f8:23:
3d:ba:63:35:23:d5:72:7f:23:e7:e1:36:dd:d4:04:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:27:D0:8D:0A:7A:4F:F8:12:25:4C:2E:70:58:8A:D2:DF:AF:93:56
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38342e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.84.0/24
Signature Algorithm: sha256WithRSAEncryption
22:75:cc:e8:9c:c7:9e:63:cb:d3:3d:0b:8d:52:aa:61:15:d8:
78:e0:71:ce:00:9a:a6:4d:88:ba:15:74:3a:23:bd:e9:3d:d3:
7f:b0:6d:2c:26:51:a8:c6:69:5c:c0:72:28:a9:0b:77:e1:c8:
1a:bf:6d:3e:67:02:d3:af:cd:71:0f:f2:39:58:0e:4a:a1:27:
46:aa:0f:71:82:65:f9:e3:89:3e:4e:a3:98:21:7e:77:08:7c:
c3:2a:c9:48:3f:7b:c2:13:24:a3:27:b1:dd:d0:e9:af:cc:03:
40:e0:20:c7:5e:51:21:c4:88:d1:4e:14:07:54:b2:2d:d4:b6:
25:31:5a:44:6f:41:53:1e:5e:92:3c:88:01:2d:fa:06:7d:09:
21:86:c7:c4:b2:d7:cc:59:28:65:2c:22:2c:c6:ac:b4:c7:14:
ec:aa:76:3b:46:92:96:3e:9d:20:b9:64:6f:6e:c3:b0:53:1b:
41:51:0c:16:8c:f7:55:f0:c7:d9:5d:74:b9:67:db:4c:8a:63:
e8:50:ca:db:9c:99:60:d9:a0:75:c7:45:4e:45:e7:ec:5f:30:
83:76:e2:4b:39:8c:ab:ba:de:f8:1c:84:94:ce:4a:c3:88:3e:
78:ac:25:b3:06:58:ed:6c:1f:64:10:ae:a1:58:27:53:47:1c:
9d:df:37:04
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTJOsg3gOmmamwwqNQjsloO9sTO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTAxOTQxMDBaFw0yNzEwMDkxOTQ2MDBaMDMxMTAvBgNV
BAMTKEU3MjdEMDhEMEE3QTRGRjgxMjI1NEMyRTcwNTg4QUQyREZBRjkzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0Jdhtws6Em4OQiYX46K1sxWq
O4Rjnnixb0wDT4Fo0je1fY7EmfkctEuzwcSC1C0iGIUTPEid1QA5/E4VA30YP3tX
87DwVpL5GXayXmxmLICTHNIKlvJ7PBm4igUq9TUMHQOls4a1+CwGem2N21Ic8/14
AZTty7npUxZ/ph/o1bMU9tUdoBUY6X44jdA1DGWTJWrZ220fDC2WCK3foKHHm1RA
y/j83VXIPtrJkprdopw/g4Dz90Bv9j+k+IHJxoxJsMIifSCjj/mKsWU7sXTjZ5jx
GZPB++9Scyg2kGRLcYrmpKNyejIc+IuMEoj4Iz26YzUj1XJ/I+fhNt3UBNS5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU5yfQjQp6T/gSJUwucFiK0t+vk1YwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzkzMDM3MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2VQwDQYJKoZIhvcNAQELBQADggEBACJ1zOicx55jy9M9C41SqmEV2Hjgcc4A
mqZNiLoVdDojvek903+wbSwmUajGaVzAciipC3fhyBq/bT5nAtOvzXEP8jlYDkqh
J0aqD3GCZfnjiT5Oo5ghfncIfMMqyUg/e8ITJKMnsd3Q6a/MA0DgIMdeUSHEiNFO
FAdUsi3UtiUxWkRvQVMeXpI8iAEt+gZ9CSGGx8Sy18xZKGUsIizGrLTHFOyqdjtG
kpY+nSC5ZG9uw7BTG0FRDBaM91Xwx9lddLln20yKY+hQytucmWDZoHXHRU5F5+xf
MIN24ks5jKu63vgchJTOSsOIPnisJbMGWO1sH2QQrqFYJ1NHHJ3fNwQ=
-----END CERTIFICATE-----
Generated at Tue Oct 13 15:01:29 2026 by rpki-client