Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231392e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3231392e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: x5SUQngu8CFFAW06RaYL/am6HqWGX2ujgWXvQ+LN/bU=
Subject key identifier: DC:AF:6A:F7:A4:0F:F5:A9:0C:55:A1:A2:1D:DD:31:75:25:A3:55:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5ED1AD8CBDA8E7D6FABB9313A153972E6162D590
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231392e302f32342d3234203d3e2033323537.roa
Signing time: Thu 06 Aug 2026 07:27:41 +0000
ROA not before: Thu 06 Aug 2026 07:22:41 +0000
ROA not after: Thu 05 Aug 2027 07:27:41 +0000
asID: 3257
IP address blocks: 217.217.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d1:ad:8c:bd:a8:e7:d6:fa:bb:93:13:a1:53:97:2e:61:62:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 07:22:41 2026 GMT
Not After : Aug 5 07:27:41 2027 GMT
Subject: CN=DCAF6AF7A40FF5A90C55A1A21DDD317525A3557F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:3a:de:f2:f2:31:5d:bd:1b:1a:1c:d0:f6:
96:e0:f9:3f:bb:b3:40:00:f5:9f:ce:b8:7b:59:4a:
7b:86:cd:a7:0c:b0:18:be:97:5b:56:e7:47:bf:3c:
6e:98:aa:3c:23:ee:b5:34:2a:e1:33:af:66:1a:5b:
ad:bf:42:21:81:01:ba:05:ea:d0:6d:50:9e:d6:a8:
da:0e:34:40:1e:f5:e8:aa:ab:9b:1d:a8:d4:d8:64:
7e:91:05:97:91:15:8d:e3:f3:48:a2:31:e3:a8:0c:
3e:5c:67:fd:2d:51:a3:8c:e3:01:4c:5b:1c:ed:1e:
7b:1e:d8:d7:6f:82:52:54:fe:36:09:85:cb:d6:ed:
2f:9f:9c:2d:fb:2a:a8:6a:e0:b3:bd:31:49:d5:f3:
82:ae:dd:12:4f:60:4d:31:97:83:6e:ad:37:54:c5:
70:69:ce:e8:35:28:d3:73:8c:cb:71:6d:0a:ac:e4:
03:96:ae:40:0f:1f:14:d8:5a:3e:ac:bd:bb:16:20:
8f:40:11:3c:f7:fa:31:3e:91:f2:18:a7:d2:5e:e7:
82:4a:69:ad:7f:04:9a:ca:b1:bf:e3:9c:c5:77:fe:
c4:5d:5a:ea:6e:8f:93:76:8a:db:c0:f3:fd:c4:00:
48:4e:23:ab:2e:fa:d7:7c:76:40:4d:8e:c6:2c:78:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:6A:F7:A4:0F:F5:A9:0C:55:A1:A2:1D:DD:31:75:25:A3:55:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231392e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bc:c0:43:5b:fa:e7:a5:f3:60:42:0d:15:4b:3f:0b:67:a9:
5a:33:53:b7:d9:3a:25:89:01:1f:e3:7a:59:58:1c:c1:ea:02:
d2:b4:e1:e7:2b:b7:60:5d:61:06:42:3b:0a:22:2c:44:21:98:
e1:e7:c6:a2:b7:2d:be:bf:1e:43:e8:af:96:0e:f5:23:bd:10:
2c:ca:2f:8b:3b:5f:ad:9c:45:82:d3:2b:b1:78:94:1e:92:b6:
d7:63:0c:42:e2:54:16:2d:51:44:49:d5:be:aa:d4:e9:12:88:
70:a1:a3:2c:8f:9c:9d:5c:0e:36:03:ce:bd:17:1f:0b:60:65:
b4:2c:0d:6c:79:a6:b7:6a:66:a9:3c:7e:92:ce:75:d4:d8:cf:
f1:0c:62:55:9a:7c:94:c7:2a:ca:f0:97:af:fd:ac:e9:9a:a4:
24:64:75:9b:17:7e:c9:78:73:46:45:0b:fd:13:f9:82:ed:c3:
b6:42:e9:f8:b1:1f:97:5c:ce:5e:7a:99:2d:ce:c7:05:d1:07:
14:ac:bb:38:59:15:0e:57:33:80:a6:16:b5:f6:04:00:76:d8:
93:2b:ea:d8:01:8d:bc:88:42:f3:bf:dc:95:01:37:c2:96:8d:
8d:cc:04:e5:17:69:13:11:f9:ae:e0:ca:24:cb:e9:c6:f4:88:
f6:bb:c0:57
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXtGtjL2o59b6u5MToVOXLmFi1ZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDYwNzIyNDFaFw0yNzA4MDUwNzI3NDFaMDMxMTAvBgNV
BAMTKERDQUY2QUY3QTQwRkY1QTkwQzU1QTFBMjFEREQzMTc1MjVBMzU1N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBTre8vIxXb0bGhzQ9pbg+T+7
s0AA9Z/OuHtZSnuGzacMsBi+l1tW50e/PG6Yqjwj7rU0KuEzr2YaW62/QiGBAboF
6tBtUJ7WqNoONEAe9eiqq5sdqNTYZH6RBZeRFY3j80iiMeOoDD5cZ/0tUaOM4wFM
WxztHnse2NdvglJU/jYJhcvW7S+fnC37Kqhq4LO9MUnV84Ku3RJPYE0xl4NurTdU
xXBpzug1KNNzjMtxbQqs5AOWrkAPHxTYWj6svbsWII9AETz3+jE+kfIYp9Je54JK
aa1/BJrKsb/jnMV3/sRdWupuj5N2itvA8/3EAEhOI6su+td8dkBNjsYsePYbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3K9q96QP9akMVaGiHd0xdSWjVX8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dnbMA0GCSqGSIb3DQEBCwUAA4IBAQAuvMBDW/rnpfNgQg0VSz8LZ6laM1O32Tol
iQEf43pZWBzB6gLStOHnK7dgXWEGQjsKIixEIZjh58aity2+vx5D6K+WDvUjvRAs
yi+LO1+tnEWC0yuxeJQekrbXYwxC4lQWLVFESdW+qtTpEohwoaMsj5ydXA42A869
Fx8LYGW0LA1seaa3amapPH6SznXU2M/xDGJVmnyUxyrK8Jev/azpmqQkZHWbF37J
eHNGRQv9E/mC7cO2Qun4sR+XXM5eepktzscF0QcUrLs4WRUOVzOApha19gQAdtiT
K+rYAY28iELzv9yVATfClo2NzATlF2kTEfmu4Moky+nG9Ij2u8BX
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:15:27 2026 by rpki-client