Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132322e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3132322e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 3Wh6/n+XzHyoV6C3HkJM9L8tKlf5rOnYdueAaeE+c7c=
Subject key identifier: DB:4D:4C:6B:0F:BA:23:E4:4A:02:1A:98:B4:5E:88:C1:CB:A7:CB:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7DE2D9EC13D395D5AA00575E4576D63EF5CA3BDB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132322e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 12 Jun 2026 20:25:15 +0000
ROA not before: Fri 12 Jun 2026 20:20:15 +0000
ROA not after: Fri 11 Jun 2027 20:25:15 +0000
asID: 137409
IP address blocks: 217.217.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e2:d9:ec:13:d3:95:d5:aa:00:57:5e:45:76:d6:3e:f5:ca:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 12 20:20:15 2026 GMT
Not After : Jun 11 20:25:15 2027 GMT
Subject: CN=DB4D4C6B0FBA23E44A021A98B45E88C1CBA7CBA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:42:6d:2b:d0:61:2b:4a:55:b9:84:dd:9c:
dd:ec:91:e7:0c:64:35:15:29:af:e1:59:b6:05:5a:
ed:82:79:76:90:b0:9d:a1:6b:4f:3d:fa:8b:71:32:
80:43:91:2b:a7:ea:b3:c2:7a:69:b5:f5:47:86:8c:
d0:e5:2f:31:82:46:76:76:68:d2:ce:6c:f6:7b:d5:
af:e8:36:47:fc:ec:0b:6b:fe:94:b7:ed:71:dd:84:
b3:00:28:6a:0e:f7:04:0e:bb:29:07:54:e9:7e:2c:
4c:aa:3a:52:a3:c5:77:b0:69:80:de:55:fd:ba:ca:
f5:a2:9a:ff:b7:7b:5e:ff:84:58:e0:aa:ed:6a:c5:
2f:b9:2b:bf:79:13:53:9d:70:a0:07:35:7a:c5:94:
e7:0a:22:e5:97:82:d1:46:49:b8:67:c9:db:17:16:
52:14:d4:5f:51:40:a4:79:48:c9:da:d3:1d:89:a6:
e9:93:d5:66:0f:d2:ee:a1:7b:0f:d0:cd:21:8d:1b:
c5:67:f6:71:c4:e8:ef:4a:9a:45:7b:eb:f8:06:3b:
41:c9:5d:e4:1a:b4:01:64:15:7a:73:69:2a:49:1e:
24:6c:46:95:88:40:21:33:a8:c6:ae:a6:47:8d:0e:
c0:90:9d:3e:d3:b9:c0:af:06:ab:5d:2b:05:69:f9:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:4C:6B:0F:BA:23:E4:4A:02:1A:98:B4:5E:88:C1:CB:A7:CB:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132322e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.122.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cd:a8:d3:fe:04:5f:5e:bc:87:7c:53:55:76:8b:fa:31:65:
c8:92:e4:52:d2:16:3b:49:aa:59:e7:e5:b3:38:24:98:bc:7d:
c9:44:fc:ef:46:0a:28:fa:51:54:08:f8:1c:5f:69:af:ab:07:
5a:81:cd:a3:32:c7:c0:45:32:16:50:1e:73:b1:d1:ac:05:0d:
6a:8c:29:0c:90:b9:89:8f:c6:6f:db:d5:29:88:2e:24:55:67:
37:7c:34:41:e2:56:47:f8:39:94:1d:a6:c0:88:c6:07:c2:f1:
84:28:8d:c9:a5:33:26:03:9c:6c:d5:40:ee:3c:a7:c2:03:2f:
a5:fd:5c:04:3b:46:eb:a6:49:95:1d:0e:df:93:09:e2:68:ed:
25:0e:4d:72:45:05:34:0f:0d:2d:0d:3e:34:3d:d1:3b:98:d3:
a6:5b:5a:d1:00:d5:9b:3d:f6:57:f1:56:db:47:31:e2:79:43:
a4:4e:82:84:5c:17:2e:5b:9b:52:8d:15:e2:47:4c:a1:1d:2c:
85:6f:06:07:f5:29:db:50:81:e3:35:77:7c:a4:b7:6b:4a:b8:
61:1f:9a:17:dc:10:d9:4b:0c:af:34:06:6d:9c:65:83:fb:37:
85:93:6e:0b:ab:a7:f0:92:df:04:ad:45:a2:66:5b:59:2d:86:
cc:85:41:df
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfeLZ7BPTldWqAFdeRXbWPvXKO9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTIyMDIwMTVaFw0yNzA2MTEyMDI1MTVaMDMxMTAvBgNV
BAMTKERCNEQ0QzZCMEZCQTIzRTQ0QTAyMUE5OEI0NUU4OEMxQ0JBN0NCQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIEJtK9BhK0pVuYTdnN3skecM
ZDUVKa/hWbYFWu2CeXaQsJ2ha089+otxMoBDkSun6rPCemm19UeGjNDlLzGCRnZ2
aNLObPZ71a/oNkf87Atr/pS37XHdhLMAKGoO9wQOuykHVOl+LEyqOlKjxXewaYDe
Vf26yvWimv+3e17/hFjgqu1qxS+5K795E1OdcKAHNXrFlOcKIuWXgtFGSbhnydsX
FlIU1F9RQKR5SMna0x2JpumT1WYP0u6hew/QzSGNG8Vn9nHE6O9KmkV76/gGO0HJ
XeQatAFkFXpzaSpJHiRsRpWIQCEzqMaupkeNDsCQnT7TucCvBqtdKwVp+bZlAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU201Maw+6I+RKAhqYtF6Iwcuny6AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZejANBgkqhkiG9w0BAQsFAAOCAQEARc2o0/4EX168h3xTVXaL+jFlyJLk
UtIWO0mqWeflszgkmLx9yUT870YKKPpRVAj4HF9pr6sHWoHNozLHwEUyFlAec7HR
rAUNaowpDJC5iY/Gb9vVKYguJFVnN3w0QeJWR/g5lB2mwIjGB8LxhCiNyaUzJgOc
bNVA7jynwgMvpf1cBDtG66ZJlR0O35MJ4mjtJQ5NckUFNA8NLQ0+ND3RO5jTplta
0QDVmz32V/FW20cx4nlDpE6ChFwXLlubUo0V4kdMoR0shW8GB/Up21CB4zV3fKS3
a0q4YR+aF9wQ2UsMrzQGbZxlg/s3hZNuC6un8JLfBK1FomZbWS2GzIVB3w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:04:43 2026 by rpki-client