Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39382e302f32342d3234203d3e20313938373533.roa
File: 3231372e3231372e39382e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: oQYvmpfB0vjkv7p8mNJS4CJjkqWpZXvoQNG0i3o0uU0=
Subject key identifier: 1F:70:1D:AA:30:85:12:06:3F:65:5C:11:01:7F:BD:58:DE:3F:00:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 677536DE99D2352741680D90399473B580BFF451
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39382e302f32342d3234203d3e20313938373533.roa
Signing time: Wed 02 Sep 2026 14:19:28 +0000
ROA not before: Wed 02 Sep 2026 14:14:28 +0000
ROA not after: Wed 01 Sep 2027 14:19:28 +0000
asID: 198753
IP address blocks: 217.217.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:75:36:de:99:d2:35:27:41:68:0d:90:39:94:73:b5:80:bf:f4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:28 2026 GMT
Not After : Sep 1 14:19:28 2027 GMT
Subject: CN=1F701DAA308512063F655C11017FBD58DE3F005C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:30:80:7f:0e:a2:69:6f:0a:43:07:63:bc:
c5:b2:8f:66:13:7e:dd:db:3d:19:d3:fa:e5:64:a0:
0b:85:97:39:32:37:a5:80:36:45:b5:92:59:e4:7f:
f0:d1:80:17:1d:ca:74:51:c6:4c:c6:a6:b6:4c:ca:
b0:45:9c:3a:f8:0f:94:bc:59:bd:68:7c:9f:9c:aa:
a5:66:36:ad:c2:2e:c7:c0:7d:58:7c:96:ba:cb:94:
72:b5:eb:7c:44:f4:09:bd:12:62:52:a3:0d:d3:2e:
d5:55:05:14:89:b9:8e:30:1f:76:15:10:31:3c:2e:
fb:4b:35:b1:9f:81:11:1f:0f:56:da:3e:bb:56:55:
d2:5b:5b:9b:c2:c5:44:0d:52:56:e3:06:73:39:14:
9f:05:e4:90:fe:a1:ae:20:1b:31:4a:90:ba:8c:03:
27:5a:19:c4:b6:66:f0:25:ad:93:94:ed:31:a5:01:
96:7b:15:da:7c:bd:08:2e:e3:19:bd:a2:2d:94:f6:
5e:a6:20:6b:f8:0b:4b:a8:20:b6:19:0d:31:d0:9f:
7d:14:83:a2:47:5c:e3:4a:e5:3d:27:9e:9d:6e:7e:
b0:1f:5e:30:df:d2:0c:25:92:31:24:06:0b:f7:b8:
bc:2d:55:de:78:8d:39:1c:ab:37:82:d2:ae:e4:a9:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:1D:AA:30:85:12:06:3F:65:5C:11:01:7F:BD:58:DE:3F:00:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39382e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.98.0/24
Signature Algorithm: sha256WithRSAEncryption
62:44:dc:7b:21:db:a8:73:cf:00:0d:d6:31:35:af:da:93:a4:
c0:2f:0c:01:f8:7a:8f:fb:b3:64:a5:32:98:b2:64:ef:4a:c2:
e0:6a:a9:5e:7f:8a:19:5b:16:c3:62:f8:79:3a:c0:35:c5:f0:
77:5b:44:f8:25:d4:48:eb:42:aa:32:77:fc:b4:f9:71:e0:00:
72:88:16:36:c9:63:1d:85:9e:12:a7:2c:a4:e2:48:5e:04:66:
4c:de:1d:94:61:a9:ee:27:cd:de:82:b9:d7:88:5c:7b:ea:df:
e6:dc:7f:39:c8:a4:41:75:de:9d:c7:31:0d:4d:85:ff:c5:da:
1e:b6:62:ba:de:7a:6e:55:e5:31:a5:05:38:ba:90:65:d9:74:
fc:ec:02:72:64:55:ae:09:79:ee:25:2c:7e:ea:ba:1a:02:83:
1d:17:32:76:bf:f7:dc:71:35:65:8c:fe:07:9d:2e:b5:34:83:
3c:90:7c:af:3f:f8:c9:ba:99:eb:7f:56:3d:85:13:43:0e:5c:
0f:bd:6b:4c:e8:94:81:53:9e:0b:ba:24:2f:d8:4b:23:d0:51:
63:69:4b:2b:d4:c7:4d:7e:3c:fc:e6:39:a0:4f:9d:13:3b:e3:
bc:82:48:ff:c8:cb:e9:8e:0e:f9:0a:d6:bb:2f:55:6c:a4:86:
48:cc:8b:49
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZ3U23pnSNSdBaA2QOZRztYC/9FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDIxNDE0MjhaFw0yNzA5MDExNDE5MjhaMDMxMTAvBgNV
BAMTKDFGNzAxREFBMzA4NTEyMDYzRjY1NUMxMTAxN0ZCRDU4REUzRjAwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLDzCAfw6iaW8KQwdjvMWyj2YT
ft3bPRnT+uVkoAuFlzkyN6WANkW1klnkf/DRgBcdynRRxkzGprZMyrBFnDr4D5S8
Wb1ofJ+cqqVmNq3CLsfAfVh8lrrLlHK163xE9Am9EmJSow3TLtVVBRSJuY4wH3YV
EDE8LvtLNbGfgREfD1baPrtWVdJbW5vCxUQNUlbjBnM5FJ8F5JD+oa4gGzFKkLqM
AydaGcS2ZvAlrZOU7TGlAZZ7Fdp8vQgu4xm9oi2U9l6mIGv4C0uoILYZDTHQn30U
g6JHXONK5T0nnp1ufrAfXjDf0gwlkjEkBgv3uLwtVd54jTkcqzeC0q7kqcBBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUH3AdqjCFEgY/ZVwRAX+9WN4/AFwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM5
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzNzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2WIwDQYJKoZIhvcNAQELBQADggEBAGJE3Hsh26hzzwAN1jE1r9qTpMAvDAH4
eo/7s2SlMpiyZO9KwuBqqV5/ihlbFsNi+Hk6wDXF8HdbRPgl1EjrQqoyd/y0+XHg
AHKIFjbJYx2FnhKnLKTiSF4EZkzeHZRhqe4nzd6CudeIXHvq3+bcfznIpEF13p3H
MQ1Nhf/F2h62Yrreem5V5TGlBTi6kGXZdPzsAnJkVa4Jee4lLH7quhoCgx0XMna/
99xxNWWM/gedLrU0gzyQfK8/+Mm6met/Vj2FE0MOXA+9a0zolIFTngu6JC/YSyPQ
UWNpSyvUx01+PPzmOaBPnRM747yCSP/Iy+mODvkK1rsvVWykhkjMi0k=
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:40 2026 by rpki-client