Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS979.roa
File: AS979.roa (raw, json)
Hash identifier: FZzJe2WIOW2H+2QQXXeyLNaDLIbIRMw30pYDhaF+Xg0=
Subject key identifier: 4D:DA:92:7D:BB:22:63:79:6E:4F:80:A6:F5:AF:2C:B2:F4:C9:DE:41
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 26F0B9A7F51E5454B526F19BCB5DC469CBD9EC5A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS979.roa
Signing time: Mon 27 Jul 2026 11:03:11 +0000
ROA not before: Mon 27 Jul 2026 10:58:11 +0000
ROA not after: Mon 26 Jul 2027 11:03:11 +0000
asID: 979
IP address blocks: 212.17.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f0:b9:a7:f5:1e:54:54:b5:26:f1:9b:cb:5d:c4:69:cb:d9:ec:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 27 10:58:11 2026 GMT
Not After : Jul 26 11:03:11 2027 GMT
Subject: CN=4DDA927DBB2263796E4F80A6F5AF2CB2F4C9DE41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:7e:5a:b5:72:5c:d1:24:2b:1a:e9:82:56:
22:89:51:9f:d2:bf:2b:cb:0a:e4:12:44:49:85:4c:
03:23:57:57:c1:ef:f1:8d:01:62:3d:ec:3f:cb:03:
d5:67:3b:ce:91:24:33:58:0e:62:24:6a:2f:ad:8c:
60:54:0a:ef:78:4a:1f:5d:27:52:3e:eb:cd:80:e3:
bd:5c:55:bc:d3:03:fc:54:2e:41:7b:d2:37:48:ad:
bf:c6:32:2c:2d:d7:f7:f0:d9:86:6e:d7:de:02:0e:
0d:ce:e7:53:62:47:18:87:4d:08:59:63:72:f8:56:
a9:ab:c3:ca:bc:44:e1:86:46:1c:2a:f4:55:73:35:
fb:7f:51:3b:dd:c8:2e:ce:13:7f:6f:26:1e:f8:67:
40:04:48:1a:4a:4a:6b:2e:80:98:4c:c5:6f:57:83:
3f:dc:35:bf:33:aa:b2:26:a9:a7:39:15:13:49:a0:
34:74:25:41:b9:e0:94:d2:83:76:75:28:28:5b:ff:
21:57:f2:3b:ca:43:42:ad:c4:dd:db:ff:67:f5:a1:
e7:4d:13:04:76:0a:9b:ff:06:e8:db:39:01:30:1e:
23:b5:83:3a:88:70:09:9d:e6:82:5c:ff:b9:be:3a:
a0:b2:02:bb:fb:a8:64:4d:26:f2:c2:cf:d6:c8:4f:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:92:7D:BB:22:63:79:6E:4F:80:A6:F5:AF:2C:B2:F4:C9:DE:41
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.236.0/22
Signature Algorithm: sha256WithRSAEncryption
93:da:28:00:0c:6e:b4:06:b3:e0:1a:ab:4c:fa:a2:13:9d:b7:
8a:46:1b:b4:00:c2:12:74:b6:e8:ec:b9:7b:c3:20:4b:54:9b:
54:99:20:e5:f2:d4:41:28:c7:13:69:b7:9a:71:7e:ff:78:25:
8a:a8:bd:6a:4e:6f:9e:8d:d7:fc:ba:c5:be:6d:a2:7a:2d:94:
27:56:bb:c8:74:c5:20:4f:6a:c8:d0:5c:ca:cd:06:19:3c:51:
de:91:af:ae:ec:70:7c:a7:cc:37:ed:9f:00:b0:bd:50:b5:14:
fa:ad:69:c6:40:21:c2:c9:4e:37:bb:ad:f6:0e:23:20:cb:ab:
57:40:f7:d8:51:65:e1:8a:93:bf:99:28:22:52:57:0a:44:bd:
08:04:31:05:3b:82:a0:94:0d:2e:77:68:f1:0f:29:c8:0e:53:
cb:75:f3:3e:60:7d:c0:b8:10:f0:14:2d:44:86:84:8c:ba:c9:
c2:c8:f9:57:0d:02:00:6f:75:1d:37:34:fb:17:ef:e9:1d:9e:
c7:5e:dd:25:54:b7:9d:8b:db:80:9d:27:69:9f:0c:13:fd:84:
89:53:0a:01:c1:9c:5e:28:a8:7a:38:c9:81:a8:dd:42:0d:bf:
68:b5:21:c3:e8:87:5e:7b:83:96:90:26:b9:a2:b2:05:8e:ff:
69:76:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:13 2026 by rpki-client