Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31332e302f32342d3234203d3e2039333034.roa
File: 3231372e3231372e31332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: EuNjAC4tGH60sDCbqlox0Rfk/LdACMWde8j4xpkFRS8=
Subject key identifier: 88:3E:34:D3:7E:C0:F4:40:29:B0:D6:3A:D4:40:79:02:38:A0:A9:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 38F54B73BFA39CC85E05C3DDC679692845A182E7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31332e302f32342d3234203d3e2039333034.roa
Signing time: Thu 10 Sep 2026 11:26:12 +0000
ROA not before: Thu 10 Sep 2026 11:21:12 +0000
ROA not after: Thu 09 Sep 2027 11:26:12 +0000
asID: 9304
IP address blocks: 217.217.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f5:4b:73:bf:a3:9c:c8:5e:05:c3:dd:c6:79:69:28:45:a1:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:12 2026 GMT
Not After : Sep 9 11:26:12 2027 GMT
Subject: CN=883E34D37EC0F44029B0D63AD440790238A0A963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:d1:6e:f7:c6:9e:86:6f:93:37:be:9b:a7:
88:67:6e:f1:21:11:52:2b:d0:47:45:04:a8:b2:83:
ef:bf:70:63:32:8a:1d:ac:08:f5:94:5c:4a:32:75:
ae:b8:6b:6d:dc:cd:ea:de:f0:24:63:51:85:b1:f6:
43:9f:9b:1d:a7:ac:05:b7:2f:fd:41:1e:e1:ff:5b:
7e:04:9b:1a:1a:6c:92:b0:0d:69:34:61:5f:2a:15:
f1:27:d0:d4:ae:b3:f2:74:1d:c4:75:27:df:ec:11:
c6:9a:dd:70:24:20:b7:0f:62:34:74:d9:c3:f8:41:
74:a7:09:58:f8:95:26:d0:b3:77:8e:22:d3:b7:5e:
92:b8:be:db:30:cb:3c:a1:75:1f:ce:b4:de:5c:37:
a8:45:40:9b:2b:5b:63:4f:ab:c5:3d:e1:0b:ae:f9:
73:a0:2d:88:b5:ff:92:ee:50:10:b2:5d:ab:21:c9:
d5:ff:b0:b0:79:be:61:28:17:df:34:c6:e8:cd:7f:
2e:af:cf:a9:4e:7d:f6:09:c4:bb:68:6e:e0:1d:67:
80:08:0d:00:e3:1a:a1:9f:a1:25:82:bd:38:99:43:
28:91:dd:bc:67:82:5b:8c:e4:19:86:e9:c5:c0:82:
14:9a:ec:0a:c7:71:b8:23:ef:00:db:ee:60:e7:68:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3E:34:D3:7E:C0:F4:40:29:B0:D6:3A:D4:40:79:02:38:A0:A9:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.13.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e6:c0:db:24:49:4f:12:07:21:d2:8d:82:c7:85:7c:0a:7a:
7a:16:b5:bf:cb:54:c6:92:dc:cb:23:50:ad:f1:e3:73:74:f8:
26:07:6d:63:2b:89:a4:aa:37:65:ae:59:dd:77:5c:7f:18:40:
13:e8:83:1e:94:2d:53:f2:3a:20:83:40:0c:84:de:5f:e0:6c:
28:cb:13:ff:f6:f0:83:03:8b:44:5a:dd:20:76:bf:df:29:fc:
ad:8a:6c:4a:e8:d7:d5:a1:3c:69:2c:a3:32:c2:77:64:a7:f9:
1a:eb:27:60:b0:93:d6:82:20:18:d4:06:c0:93:bf:64:77:8c:
cb:ba:89:25:28:dc:de:70:fc:f5:d9:26:cf:55:6c:5f:1b:d4:
19:4b:4e:08:6a:ef:38:0a:27:23:f5:5b:5f:a1:05:45:95:dc:
bf:8c:03:0d:b0:c2:58:1a:b6:f2:7f:da:3f:8a:c7:8d:d0:1a:
92:b6:92:a9:e1:da:9d:05:28:be:02:86:d9:1a:63:57:e6:4b:
5f:68:9e:db:b9:ed:72:59:41:6a:20:53:e7:a7:4e:b9:e4:a5:
70:3f:17:f0:82:9b:95:72:56:71:2c:b2:76:f6:e6:82:ee:49:
e3:d6:1b:03:9a:58:bb:41:6f:f0:e9:a8:7b:2b:52:fc:60:e3:
41:44:93:46
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOPVLc7+jnMheBcPdxnlpKEWhgucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMTIxMTJaFw0yNzA5MDkxMTI2MTJaMDMxMTAvBgNV
BAMTKDg4M0UzNEQzN0VDMEY0NDAyOUIwRDYzQUQ0NDA3OTAyMzhBMEE5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOr9Fu98aehm+TN76bp4hnbvEh
EVIr0EdFBKiyg++/cGMyih2sCPWUXEoyda64a23czere8CRjUYWx9kOfmx2nrAW3
L/1BHuH/W34EmxoabJKwDWk0YV8qFfEn0NSus/J0HcR1J9/sEcaa3XAkILcPYjR0
2cP4QXSnCVj4lSbQs3eOItO3XpK4vtswyzyhdR/OtN5cN6hFQJsrW2NPq8U94Quu
+XOgLYi1/5LuUBCyXashydX/sLB5vmEoF980xujNfy6vz6lOffYJxLtobuAdZ4AI
DQDjGqGfoSWCvTiZQyiR3bxngluM5BmG6cXAghSa7ArHcbgj7wDb7mDnaH0zAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUiD40037A9EApsNY61EB5AjigqWMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
DTANBgkqhkiG9w0BAQsFAAOCAQEAFubA2yRJTxIHIdKNgseFfAp6eha1v8tUxpLc
yyNQrfHjc3T4JgdtYyuJpKo3Za5Z3XdcfxhAE+iDHpQtU/I6IINADITeX+BsKMsT
//bwgwOLRFrdIHa/3yn8rYpsSujX1aE8aSyjMsJ3ZKf5GusnYLCT1oIgGNQGwJO/
ZHeMy7qJJSjc3nD89dkmz1VsXxvUGUtOCGrvOAonI/VbX6EFRZXcv4wDDbDCWBq2
8n/aP4rHjdAakraSqeHanQUovgKG2RpjV+ZLX2ie27ntcllBaiBT56dOueSlcD8X
8IKblXJWcSyydvbmgu5J49YbA5pYu0Fv8OmoeytS/GDjQUSTRg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:22:43 2026 by rpki-client