Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20343031333632.roa
File: 3231372e3231372e3230382e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: YwD16d3vBdgujkfZcnYJUl7JrBe+ANoMN2FqAUab3RU=
Subject key identifier: 36:20:D6:74:E7:77:80:01:A5:D2:A8:E6:BB:A2:15:F4:9A:9F:1C:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21AEB2B90D708A9AAC0180E1D1BFF6558CB33006
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20343031333632.roa
Signing time: Sat 05 Sep 2026 19:46:45 +0000
ROA not before: Sat 05 Sep 2026 19:41:45 +0000
ROA not after: Sat 04 Sep 2027 19:46:45 +0000
asID: 401362
IP address blocks: 217.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ae:b2:b9:0d:70:8a:9a:ac:01:80:e1:d1:bf:f6:55:8c:b3:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 5 19:41:45 2026 GMT
Not After : Sep 4 19:46:45 2027 GMT
Subject: CN=3620D674E7778001A5D2A8E6BBA215F49A9F1C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:22:72:d0:b9:cd:a2:73:b0:89:8d:24:15:
c5:c1:1e:9e:3f:80:8f:e2:6c:5e:10:32:8d:d8:95:
71:5a:39:53:4f:d0:ae:29:01:6c:4c:a0:28:35:30:
1b:c9:68:e2:54:98:37:93:db:3e:e9:5e:bb:37:b3:
a3:fa:e2:9f:ed:b1:21:fb:65:98:73:84:08:77:a4:
b4:4d:c2:92:16:24:6a:1b:24:6b:94:6c:1c:3f:df:
7f:ec:5c:b8:e3:f8:49:af:0f:6c:a5:0a:b4:30:51:
95:75:83:58:b1:08:82:5a:53:88:77:d3:21:26:f2:
03:de:92:96:d3:fb:e3:6c:71:36:fd:e0:90:ae:3b:
29:2d:d6:98:ff:98:b4:b0:7c:ff:64:60:d8:f8:cb:
6c:a4:d0:73:be:4c:44:af:17:d2:94:e1:7a:5d:87:
ba:59:25:30:84:52:96:65:db:c2:c9:3a:4b:c0:7d:
22:b6:42:9f:84:9e:87:16:51:1c:e7:20:ea:f5:78:
07:c3:a9:39:26:16:a4:5c:52:47:18:07:ae:9e:ce:
da:8a:03:21:c0:6f:d0:49:cc:20:c9:7b:e9:5c:2d:
77:21:a5:0d:e6:22:d4:ed:e4:7d:75:20:01:3e:43:
75:16:3c:95:bd:9c:ac:16:04:ff:ca:73:fc:cb:91:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:D6:74:E7:77:80:01:A5:D2:A8:E6:BB:A2:15:F4:9A:9F:1C:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ce:07:35:f1:d2:f7:3f:44:48:ef:57:73:b5:cd:ce:79:62:
4e:23:50:11:9b:51:51:1c:53:a2:e5:8f:71:a7:33:af:9d:64:
c1:17:34:6f:ae:4f:65:8a:83:5a:cc:ac:98:7a:48:de:96:c1:
4c:ca:94:66:43:3e:cf:d1:1a:89:dd:24:01:ab:5f:24:f1:d2:
08:07:29:91:d6:ef:80:b6:71:c7:8e:76:a0:12:99:f4:01:2c:
3e:9c:8c:7b:79:ea:97:81:c2:4f:5d:c5:46:cd:d6:2c:ea:eb:
c4:9c:3f:4f:79:54:66:d4:0e:19:2a:30:60:89:a1:ca:1b:0b:
ad:4a:40:2e:2b:1f:68:14:bc:62:b0:56:53:a4:95:c4:52:4e:
e0:4d:56:8b:19:d3:41:f5:0a:22:fa:ba:a9:b9:56:f9:dc:d1:
6a:3a:73:6b:15:a9:da:0f:2a:48:e2:85:4f:98:74:9b:bd:1b:
df:8f:34:0a:f1:4b:05:49:fc:ce:d4:cc:3f:33:12:50:32:d8:
6f:f0:49:2e:29:a7:98:7d:1e:bc:35:34:64:c8:67:29:66:05:
ef:5e:c6:73:ef:56:fa:16:8a:ab:7e:81:17:4a:da:c0:ac:5f:
f3:09:b2:b7:23:4b:d7:c3:2c:71:fb:42:37:69:51:2f:18:4e:
2a:4b:44:09
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUIa6yuQ1wipqsAYDh0b/2VYyzMAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDUxOTQxNDVaFw0yNzA5MDQxOTQ2NDVaMDMxMTAvBgNV
BAMTKDM2MjBENjc0RTc3NzgwMDFBNUQyQThFNkJCQTIxNUY0OUE5RjFDNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmCJy0LnNonOwiY0kFcXBHp4/
gI/ibF4QMo3YlXFaOVNP0K4pAWxMoCg1MBvJaOJUmDeT2z7pXrs3s6P64p/tsSH7
ZZhzhAh3pLRNwpIWJGobJGuUbBw/33/sXLjj+EmvD2ylCrQwUZV1g1ixCIJaU4h3
0yEm8gPekpbT++NscTb94JCuOykt1pj/mLSwfP9kYNj4y2yk0HO+TESvF9KU4Xpd
h7pZJTCEUpZl28LJOkvAfSK2Qp+EnocWURznIOr1eAfDqTkmFqRcUkcYB66eztqK
AyHAb9BJzCDJe+lcLXchpQ3mItTt5H11IAE+Q3UWPJW9nKwWBP/Kc/zLkbZtAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUNiDWdOd3gAGl0qjmu6IV9JqfHEkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTMzMzYzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZ0DANBgkqhkiG9w0BAQsFAAOCAQEAgs4HNfHS9z9ESO9Xc7XNznliTiNQ
EZtRURxTouWPcaczr51kwRc0b65PZYqDWsysmHpI3pbBTMqUZkM+z9Eaid0kAatf
JPHSCAcpkdbvgLZxx452oBKZ9AEsPpyMe3nql4HCT13FRs3WLOrrxJw/T3lUZtQO
GSowYImhyhsLrUpALisfaBS8YrBWU6SVxFJO4E1WixnTQfUKIvq6qblW+dzRajpz
axWp2g8qSOKFT5h0m70b3480CvFLBUn8ztTMPzMSUDLYb/BJLimnmH0evDU0ZMhn
KWYF717Gc+9W+haKq36BF0rawKxf8wmytyNL18MscftCN2lRLxhOKktECQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:11 2026 by rpki-client