Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31352e302f32342d3234203d3e2039333034.roa
File: 3231372e3231372e31352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: IP8e0FJHxW31FIiA55o6YkSlM2ikQw8X5qXP/Xk9euE=
Subject key identifier: FA:7D:E5:72:F6:C9:71:BA:B9:00:CA:81:CA:71:6B:71:53:7F:D9:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73C9CB22595866054D1716DA5CB9FE89DDCAEE71
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31352e302f32342d3234203d3e2039333034.roa
Signing time: Thu 10 Sep 2026 11:26:14 +0000
ROA not before: Thu 10 Sep 2026 11:21:14 +0000
ROA not after: Thu 09 Sep 2027 11:26:14 +0000
asID: 9304
IP address blocks: 217.217.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c9:cb:22:59:58:66:05:4d:17:16:da:5c:b9:fe:89:dd:ca:ee:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:14 2026 GMT
Not After : Sep 9 11:26:14 2027 GMT
Subject: CN=FA7DE572F6C971BAB900CA81CA716B71537FD9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:a6:41:53:1e:0f:87:3f:7e:7b:65:12:8d:
ae:93:5c:da:4e:3f:f5:31:8d:12:25:01:9e:82:6f:
01:e0:3e:6e:67:86:22:f7:3f:f2:c3:2d:91:20:05:
c1:74:eb:9a:f4:fe:1b:2c:7c:0b:37:40:bb:4b:ca:
f9:a9:0a:bf:58:4a:19:7b:86:6a:b8:b7:00:56:d8:
3c:bc:54:11:5a:58:2c:11:f6:98:0f:05:cd:73:05:
4d:26:53:c7:46:b6:b6:71:51:fe:29:bd:45:48:40:
85:f5:ff:51:2a:ef:e7:bc:68:7d:37:3d:1a:40:c1:
96:89:d3:32:a5:9d:06:cf:ff:5d:bf:67:3b:aa:6e:
01:9c:62:d9:df:68:e8:f5:37:84:c6:3c:2d:a6:b5:
7e:fe:43:94:de:cc:dc:42:57:a0:21:13:81:09:60:
d9:d3:66:50:7f:22:05:b4:34:38:ef:29:93:ba:1c:
25:ea:62:bd:b4:89:0b:fa:e8:bc:7e:bc:23:61:fc:
d9:89:84:b4:e9:66:5e:fd:99:4e:e0:96:42:6f:c7:
b4:47:d3:57:ba:9f:0e:82:d3:25:de:96:f0:bd:a8:
5f:a0:8e:a8:8a:70:7a:1b:60:be:90:e7:44:2e:d9:
a4:a7:07:b2:d4:a8:2d:d2:e0:1a:e6:f9:57:c4:14:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:E5:72:F6:C9:71:BA:B9:00:CA:81:CA:71:6B:71:53:7F:D9:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31352e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.15.0/24
Signature Algorithm: sha256WithRSAEncryption
51:00:72:9b:2e:3a:f4:ea:6a:99:d6:5c:b1:cb:8f:35:e2:52:
36:25:7c:f3:40:30:37:b2:6c:37:63:4a:cc:45:6b:4a:92:b5:
1f:ea:81:3a:08:4c:07:0d:db:59:48:a6:0e:82:c5:c7:df:2d:
67:df:4b:10:aa:07:43:fa:6c:33:da:98:f4:4c:7c:99:69:59:
50:87:52:55:50:b5:40:ad:94:db:50:f1:a8:ea:0a:6f:ed:59:
43:cc:42:18:fe:bf:0d:c4:26:4d:78:6c:b6:51:ab:a1:2e:9c:
72:04:a8:95:e8:f8:b3:8a:52:4c:33:89:d6:80:f4:cd:d4:45:
bc:12:b1:11:12:39:cb:c9:c5:ca:c8:eb:32:57:c1:d2:2e:6d:
fe:f6:61:71:d8:aa:1b:cb:a9:da:47:6f:82:21:91:f3:18:10:
52:04:2d:1c:7d:ea:5c:c8:ef:57:2e:41:bb:d5:0d:35:bc:8b:
eb:05:85:ab:b1:98:7a:d1:ff:bd:59:69:0d:08:6f:ef:47:18:
bc:fd:01:46:dc:b4:4b:ec:64:47:65:ba:23:08:72:f1:ba:e4:
02:59:db:b0:d2:d5:19:eb:9e:d4:c6:af:55:e6:3c:21:03:72:
1d:00:e2:11:84:ab:80:7f:d4:21:da:ea:d8:95:05:1b:31:2c:
26:31:39:fd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUc8nLIllYZgVNFxbaXLn+id3K7nEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMTIxMTRaFw0yNzA5MDkxMTI2MTRaMDMxMTAvBgNV
BAMTKEZBN0RFNTcyRjZDOTcxQkFCOTAwQ0E4MUNBNzE2QjcxNTM3RkQ5QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QqZBUx4Phz9+e2USja6TXNpO
P/UxjRIlAZ6CbwHgPm5nhiL3P/LDLZEgBcF065r0/hssfAs3QLtLyvmpCr9YShl7
hmq4twBW2Dy8VBFaWCwR9pgPBc1zBU0mU8dGtrZxUf4pvUVIQIX1/1Eq7+e8aH03
PRpAwZaJ0zKlnQbP/12/ZzuqbgGcYtnfaOj1N4TGPC2mtX7+Q5TezNxCV6AhE4EJ
YNnTZlB/IgW0NDjvKZO6HCXqYr20iQv66Lx+vCNh/NmJhLTpZl79mU7glkJvx7RH
01e6nw6C0yXelvC9qF+gjqiKcHobYL6Q50Qu2aSnB7LUqC3S4Brm+VfEFK6lAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+n3lcvbJcbq5AMqBynFrcVN/2aswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
DzANBgkqhkiG9w0BAQsFAAOCAQEAUQBymy469OpqmdZcscuPNeJSNiV880AwN7Js
N2NKzEVrSpK1H+qBOghMBw3bWUimDoLFx98tZ99LEKoHQ/psM9qY9Ex8mWlZUIdS
VVC1QK2U21DxqOoKb+1ZQ8xCGP6/DcQmTXhstlGroS6ccgSolej4s4pSTDOJ1oD0
zdRFvBKxERI5y8nFysjrMlfB0i5t/vZhcdiqG8up2kdvgiGR8xgQUgQtHH3qXMjv
Vy5Bu9UNNbyL6wWFq7GYetH/vVlpDQhv70cYvP0BRty0S+xkR2W6Iwhy8brkAlnb
sNLVGeue1MavVeY8IQNyHQDiEYSrgH/UIdrq2JUFGzEsJjE5/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:52 2026 by rpki-client