Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132302e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3132302e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: qYU1zm1qpBVCcxdbnzAgoHKfRj+gQKgA1rat+ubTNow=
Subject key identifier: C2:A6:58:78:3C:01:46:57:5B:30:AB:DD:64:35:F9:16:61:80:FA:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E1CA1716ED698E86D2AAD67F0118A573A497321
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132302e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 12 Jun 2026 20:25:14 +0000
ROA not before: Fri 12 Jun 2026 20:20:14 +0000
ROA not after: Fri 11 Jun 2027 20:25:14 +0000
asID: 137409
IP address blocks: 217.217.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:1c:a1:71:6e:d6:98:e8:6d:2a:ad:67:f0:11:8a:57:3a:49:73:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 20:20:14 2026 GMT
Not After : Jun 11 20:25:14 2027 GMT
Subject: CN=C2A658783C0146575B30ABDD6435F9166180FA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:6c:ba:86:10:09:4c:a4:70:65:31:5c:af:
8d:a3:ce:fa:9f:8b:51:33:bf:6e:85:8b:37:84:62:
86:67:fa:bf:e3:e0:6c:ec:4a:85:ae:0d:3c:3e:18:
5e:0e:24:cf:6b:7e:77:ef:1b:88:c6:78:00:6a:62:
19:e0:37:a6:3e:e8:cf:77:b8:08:fe:f2:dd:6a:e3:
57:e2:c7:d5:60:6e:2a:a1:3d:fa:d7:9f:c1:44:4a:
19:ed:f7:78:a3:55:f9:92:53:45:22:55:1e:76:b8:
80:53:8d:fd:85:7a:b5:93:cf:db:a1:08:d0:a8:af:
7c:c9:a3:a1:ef:4b:7a:01:96:25:77:18:05:df:e5:
c2:41:1c:cf:57:b0:1c:9e:1c:db:82:58:3c:c6:f9:
0c:eb:bb:18:e1:b3:18:2f:46:5f:42:e1:29:a8:29:
02:a7:09:d2:c8:3d:2a:f1:1b:93:1e:b5:87:00:39:
e4:be:ec:ed:70:06:13:e9:4f:78:c0:a5:91:c5:45:
b7:f5:29:4d:de:39:de:23:05:90:ae:3d:32:ca:26:
3f:ec:31:b0:9e:de:58:05:96:21:bb:ac:dd:cf:1d:
2f:5b:ac:bb:4c:7e:74:8a:cd:bd:b4:32:00:2f:ec:
aa:67:12:4b:9e:ec:fc:41:e7:ac:d3:77:56:49:40:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:58:78:3C:01:46:57:5B:30:AB:DD:64:35:F9:16:61:80:FA:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132302e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:08:de:9d:98:2a:61:af:3f:95:3b:c3:0a:6c:87:b1:24:12:
50:e2:41:1d:8c:ce:58:cd:54:d7:99:4c:40:a9:95:68:c6:ba:
08:e7:5b:ac:8e:06:52:58:75:dd:b2:0a:ea:66:1b:dd:21:c9:
c6:b8:dd:82:01:61:1d:69:dd:64:e1:15:cb:17:17:a1:ae:dc:
64:8a:97:f0:e2:54:55:84:4a:c0:f8:79:bf:f8:ad:1c:77:81:
e4:c3:df:97:93:ea:84:88:fd:f8:a1:dc:5f:55:ad:75:5b:6c:
30:85:fc:9b:39:8b:22:44:34:43:36:34:b6:05:36:c0:56:33:
7f:bc:92:a8:07:79:d9:4b:33:c6:5e:eb:d7:f5:ec:1f:f6:83:
94:78:72:97:f9:33:09:e5:bc:f5:dd:19:ee:2f:a3:ba:62:16:
17:d7:15:1c:6c:e4:07:9a:9b:32:6a:d0:d3:7e:ef:b5:a4:2a:
4c:80:28:53:47:d3:56:f6:97:4c:a8:ec:73:5c:d2:02:73:3e:
f1:bf:6e:92:66:e0:dc:b8:72:02:cc:d5:31:75:ed:fa:3c:d1:
4d:68:da:f8:c2:ce:53:28:18:08:2d:ab:6b:4e:a3:7f:a5:e6:
db:85:cf:9e:30:5d:5f:2f:c1:1e:1f:10:90:c2:24:c1:b2:67:
11:dd:64:a4
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUPhyhcW7WmOhtKq1n8BGKVzpJcyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTIyMDIwMTRaFw0yNzA2MTEyMDI1MTRaMDMxMTAvBgNV
BAMTKEMyQTY1ODc4M0MwMTQ2NTc1QjMwQUJERDY0MzVGOTE2NjE4MEZBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnWy6hhAJTKRwZTFcr42jzvqf
i1Ezv26FizeEYoZn+r/j4GzsSoWuDTw+GF4OJM9rfnfvG4jGeABqYhngN6Y+6M93
uAj+8t1q41fix9VgbiqhPfrXn8FEShnt93ijVfmSU0UiVR52uIBTjf2FerWTz9uh
CNCor3zJo6HvS3oBliV3GAXf5cJBHM9XsByeHNuCWDzG+QzruxjhsxgvRl9C4Smo
KQKnCdLIPSrxG5MetYcAOeS+7O1wBhPpT3jApZHFRbf1KU3eOd4jBZCuPTLKJj/s
MbCe3lgFliG7rN3PHS9brLtMfnSKzb20MgAv7KpnEkue7PxB56zTd1ZJQLwPAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUwqZYeDwBRldbMKvdZDX5FmGA+hMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZeDANBgkqhkiG9w0BAQsFAAOCAQEASQjenZgqYa8/lTvDCmyHsSQSUOJB
HYzOWM1U15lMQKmVaMa6COdbrI4GUlh13bIK6mYb3SHJxrjdggFhHWndZOEVyxcX
oa7cZIqX8OJUVYRKwPh5v/itHHeB5MPfl5PqhIj9+KHcX1WtdVtsMIX8mzmLIkQ0
QzY0tgU2wFYzf7ySqAd52Uszxl7r1/XsH/aDlHhyl/kzCeW89d0Z7i+jumIWF9cV
HGzkB5qbMmrQ037vtaQqTIAoU0fTVvaXTKjsc1zSAnM+8b9ukmbg3LhyAszVMXXt
+jzRTWja+MLOUygYCC2ra06jf6Xm24XPnjBdXy/BHh8QkMIkwbJnEd1kpA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:21 2026 by rpki-client