Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20333936353236.roa
File: 3231372e3231372e3230362e302f32342d3234203d3e20333936353236.roa (raw, json)
Hash identifier: 14xnwQHRph5aN+aT1+2SHMKMKU0dP1eT6pJl+488HAA=
Subject key identifier: 1A:95:95:2C:17:AE:BA:9B:F1:54:CA:41:86:C2:A2:4B:25:78:2B:78
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72C225F052A3853B5782E6B9AA718B03C16271AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20333936353236.roa
Signing time: Sat 05 Sep 2026 19:46:42 +0000
ROA not before: Sat 05 Sep 2026 19:41:42 +0000
ROA not after: Sat 04 Sep 2027 19:46:42 +0000
asID: 396526
IP address blocks: 217.217.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c2:25:f0:52:a3:85:3b:57:82:e6:b9:aa:71:8b:03:c1:62:71:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 5 19:41:42 2026 GMT
Not After : Sep 4 19:46:42 2027 GMT
Subject: CN=1A95952C17AEBA9BF154CA4186C2A24B25782B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:b9:cc:0c:d7:15:51:84:bf:da:cd:8d:23:
9f:72:0f:f2:fb:b2:98:c0:a2:e5:e6:84:23:c2:a0:
fe:b7:dd:35:ca:3c:96:8b:b6:fa:cd:27:c8:98:76:
c0:74:3e:c6:18:57:07:9d:07:54:c7:4f:6f:d2:e9:
4f:40:9f:8b:36:35:ae:f7:2a:b2:b2:97:90:ae:57:
11:d8:5e:70:a0:b9:1b:06:fa:4a:6d:19:bd:f8:1e:
af:fd:cb:6d:a4:49:41:50:b8:84:92:37:86:21:c7:
f0:b3:41:52:ed:92:b3:1b:a3:50:0a:aa:07:9f:f3:
48:3e:9a:46:4d:57:fb:3b:cf:83:a6:27:3a:9f:1b:
8c:85:a2:33:7a:66:3a:9c:fa:81:79:c0:f9:71:87:
a8:f3:56:7a:59:2f:2d:8d:22:ec:c8:94:fc:77:ad:
10:8a:11:79:80:d5:89:93:10:ba:ee:ad:e3:74:de:
2e:f5:4c:d3:82:d7:63:22:6f:67:1a:31:54:f0:ff:
f6:5b:10:f7:16:ae:0a:1e:85:ae:9b:3c:05:90:cd:
22:7c:5a:51:8b:4a:2d:49:a0:bb:0c:b7:de:f6:e3:
b8:08:f6:52:b6:bd:ff:c1:26:89:94:52:e8:32:92:
56:4e:78:e3:13:90:cc:1a:79:a0:03:a0:8a:2e:fb:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:95:2C:17:AE:BA:9B:F1:54:CA:41:86:C2:A2:4B:25:78:2B:78
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230362e302f32342d3234203d3e20333936353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.206.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f2:e8:59:9f:23:31:95:9b:38:a3:5f:52:7e:25:4c:ff:e9:
54:99:f2:9d:81:43:2f:50:99:92:3f:34:a5:e5:4e:db:1b:b0:
46:ba:9d:51:fd:b3:10:ef:0c:d6:88:87:ac:f4:e4:83:22:55:
32:a2:b1:66:fb:ef:20:e8:d9:30:38:b7:07:14:62:17:1f:76:
33:15:cf:6e:98:b2:70:f7:d0:f0:f6:89:f7:92:df:83:b7:3a:
84:0a:10:8d:28:12:a7:91:e0:ce:27:03:13:62:07:cd:d3:52:
ca:f6:91:ca:0f:62:c8:f7:36:e5:e2:56:4d:70:10:ee:2b:1f:
eb:6e:62:ab:2b:ab:9f:e0:97:5e:bf:1f:5d:61:e0:ef:71:fa:
df:9c:02:31:b6:c8:e0:c3:d2:52:39:2e:8b:3f:95:05:0e:91:
1d:6f:d0:6b:a5:94:a8:29:ff:15:db:c6:42:8c:80:b9:32:ec:
0e:dc:d3:7a:9f:cc:57:91:a2:5e:c1:7c:84:f0:4c:8d:12:35:
e2:70:e7:4f:de:d8:d1:ce:b1:16:71:23:25:9e:1c:b8:0a:9f:
57:94:de:5f:bb:92:91:73:9e:53:6c:45:10:b5:f1:94:f2:70:
7b:89:13:51:31:91:a0:6d:a9:70:63:31:dc:43:0a:23:e3:48:
a2:cc:64:d2
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcsIl8FKjhTtXgua5qnGLA8Fica8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDUxOTQxNDJaFw0yNzA5MDQxOTQ2NDJaMDMxMTAvBgNV
BAMTKDFBOTU5NTJDMTdBRUJBOUJGMTU0Q0E0MTg2QzJBMjRCMjU3ODJCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6LnMDNcVUYS/2s2NI59yD/L7
spjAouXmhCPCoP633TXKPJaLtvrNJ8iYdsB0PsYYVwedB1THT2/S6U9An4s2Na73
KrKyl5CuVxHYXnCguRsG+kptGb34Hq/9y22kSUFQuISSN4Yhx/CzQVLtkrMbo1AK
qgef80g+mkZNV/s7z4OmJzqfG4yFojN6Zjqc+oF5wPlxh6jzVnpZLy2NIuzIlPx3
rRCKEXmA1YmTELrureN03i71TNOC12Mib2caMVTw//ZbEPcWrgoeha6bPAWQzSJ8
WlGLSi1JoLsMt97247gI9lK2vf/BJomUUugyklZOeOMTkMwaeaADoIou+yGBAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUGpWVLBeuupvxVMpBhsKiSyV4K3gwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNjM1MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZzjANBgkqhkiG9w0BAQsFAAOCAQEAkfLoWZ8jMZWbOKNfUn4lTP/pVJny
nYFDL1CZkj80peVO2xuwRrqdUf2zEO8M1oiHrPTkgyJVMqKxZvvvIOjZMDi3BxRi
Fx92MxXPbpiycPfQ8PaJ95Lfg7c6hAoQjSgSp5HgzicDE2IHzdNSyvaRyg9iyPc2
5eJWTXAQ7isf625iqyurn+CXXr8fXWHg73H635wCMbbI4MPSUjkuiz+VBQ6RHW/Q
a6WUqCn/FdvGQoyAuTLsDtzTep/MV5GiXsF8hPBMjRI14nDnT97Y0c6xFnEjJZ4c
uAqfV5TeX7uSkXOeU2xFELXxlPJwe4kTUTGRoG2pcGMx3EMKI+NIosxk0g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:05 2026 by rpki-client