Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e2037323839.roa
File: 3231372e3231372e3231332e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: IKqu6egbUJZ4OU33SrMyqKogFeWG3ToYmVmy8BK3mJM=
Subject key identifier: 22:B3:18:9A:61:9E:67:EA:3E:02:18:AE:92:30:E3:E7:5A:F3:F1:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A4407FE444FF7755511E6B3D65D4B67E6E5403B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e2037323839.roa
Signing time: Tue 28 Jul 2026 12:37:12 +0000
ROA not before: Tue 28 Jul 2026 12:32:12 +0000
ROA not after: Tue 27 Jul 2027 12:37:12 +0000
asID: 7289
IP address blocks: 217.217.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:44:07:fe:44:4f:f7:75:55:11:e6:b3:d6:5d:4b:67:e6:e5:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 28 12:32:12 2026 GMT
Not After : Jul 27 12:37:12 2027 GMT
Subject: CN=22B3189A619E67EA3E0218AE9230E3E75AF3F1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:33:f8:5c:eb:91:44:94:0d:d1:e3:11:cf:
74:3f:3f:f4:e1:66:74:e3:18:27:6f:dc:13:8b:1f:
ca:59:ea:71:cd:09:6a:3d:b6:74:28:3e:e1:2e:d5:
3e:64:40:91:7b:44:71:18:88:ad:4f:71:b6:1c:d1:
7f:28:0e:14:25:41:38:b8:48:48:05:6b:78:9a:d4:
66:df:7a:a5:05:29:e5:28:41:4a:6f:d8:27:86:69:
d9:60:b3:2b:79:70:d8:3c:f9:60:cf:55:83:79:08:
29:75:fc:47:f1:f9:78:ce:c9:ad:ec:09:0a:04:6b:
c2:1a:01:3d:ee:32:ce:27:fc:66:d5:cb:70:5b:c6:
d7:e2:af:a2:9b:d8:46:ea:66:e2:eb:25:64:1a:cd:
71:7c:1c:5f:f1:0a:f9:57:e3:21:01:55:43:c9:ee:
d0:7c:62:fc:05:66:ca:5b:89:e5:97:33:92:39:a0:
b1:2d:1d:8f:0c:de:81:10:a1:75:d0:72:d1:ac:e3:
d6:90:9f:7e:b6:37:cf:65:5a:28:8f:6d:ac:99:f9:
a7:0f:aa:81:11:0a:2b:35:35:9d:fd:fb:4e:b0:76:
87:44:3b:6d:f5:af:fd:a2:a3:16:14:d3:26:06:2d:
06:97:6b:23:0d:07:1e:5a:c9:42:e4:bd:b6:aa:7d:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:18:9A:61:9E:67:EA:3E:02:18:AE:92:30:E3:E7:5A:F3:F1:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231332e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.213.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a3:18:ef:35:ca:a5:20:61:69:80:d3:74:de:c2:aa:25:6f:
e0:ee:21:20:d6:ba:03:69:13:d8:54:29:bb:7a:04:8c:59:9c:
66:1f:2e:52:1b:69:5e:94:76:1a:bf:f7:a7:1f:91:f4:40:e9:
18:05:3f:0e:3a:35:20:30:2d:7d:72:cd:fe:9e:e5:3d:18:60:
bc:17:a4:25:ae:57:4b:70:0a:cd:8a:c5:e9:28:b7:d1:13:f3:
b1:19:17:e8:d9:54:9f:8e:fd:e7:3c:3d:37:26:d3:7a:a0:17:
c6:e1:f7:1e:e6:c8:5f:83:30:40:f2:57:39:3e:a9:51:e3:b5:
91:a1:6b:25:19:29:a8:50:f7:86:d1:a6:8d:09:b8:e1:4c:fb:
76:bc:a2:f6:79:29:0c:6b:46:ec:87:b5:02:37:90:25:19:d0:
90:b8:02:55:e0:68:53:70:d9:49:de:5c:33:95:f2:27:b9:d9:
47:05:62:d5:a6:19:86:45:1d:b4:c5:e4:f4:d3:a2:05:ff:d4:
02:4a:68:e3:c2:59:21:10:18:44:7b:33:16:92:7c:4e:c7:c6:
e7:ae:92:37:22:11:7a:4c:bb:b0:25:b5:70:c7:f2:9d:f9:91:
8c:d6:6a:5b:c3:7b:02:e8:65:3d:91:50:f5:16:7c:7d:50:53:
01:59:df:ab
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUekQH/kRP93VVEeaz1l1LZ+blQDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjgxMjMyMTJaFw0yNzA3MjcxMjM3MTJaMDMxMTAvBgNV
BAMTKDIyQjMxODlBNjE5RTY3RUEzRTAyMThBRTkyMzBFM0U3NUFGM0YxQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctjP4XOuRRJQN0eMRz3Q/P/Th
ZnTjGCdv3BOLH8pZ6nHNCWo9tnQoPuEu1T5kQJF7RHEYiK1PcbYc0X8oDhQlQTi4
SEgFa3ia1GbfeqUFKeUoQUpv2CeGadlgsyt5cNg8+WDPVYN5CCl1/Efx+XjOya3s
CQoEa8IaAT3uMs4n/GbVy3Bbxtfir6Kb2EbqZuLrJWQazXF8HF/xCvlX4yEBVUPJ
7tB8YvwFZspbieWXM5I5oLEtHY8M3oEQoXXQctGs49aQn362N89lWiiPbayZ+acP
qoERCis1NZ39+06wdodEO231r/2ioxYU0yYGLQaXayMNBx5ayULkvbaqfbVNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUIrMYmmGeZ+o+AhiukjDj51rz8agwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzIzODM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dnVMA0GCSqGSIb3DQEBCwUAA4IBAQAToxjvNcqlIGFpgNN03sKqJW/g7iEg1roD
aRPYVCm7egSMWZxmHy5SG2lelHYav/enH5H0QOkYBT8OOjUgMC19cs3+nuU9GGC8
F6QlrldLcArNisXpKLfRE/OxGRfo2VSfjv3nPD03JtN6oBfG4fce5shfgzBA8lc5
PqlR47WRoWslGSmoUPeG0aaNCbjhTPt2vKL2eSkMa0bsh7UCN5AlGdCQuAJV4GhT
cNlJ3lwzlfInudlHBWLVphmGRR20xeT006IF/9QCSmjjwlkhEBhEezMWknxOx8bn
rpI3IhF6TLuwJbVwx/Kd+ZGM1mpbw3sC6GU9kVD1Fnx9UFMBWd+r
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:30 2026 by rpki-client