Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: AyQ8hIGualPZSYC1PN363PPbfiFU/jE/VPx8mhxjnhw=
Subject key identifier: E3:E3:09:A5:D1:CC:38:BE:07:5D:DB:8B:26:E8:CB:1D:06:48:94:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A152EA00F3C03BFE5F54391C798C74FF6DC70E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa
Signing time: Thu 06 Aug 2026 07:27:42 +0000
ROA not before: Thu 06 Aug 2026 07:22:42 +0000
ROA not after: Thu 05 Aug 2027 07:27:42 +0000
asID: 3257
IP address blocks: 217.217.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:15:2e:a0:0f:3c:03:bf:e5:f5:43:91:c7:98:c7:4f:f6:dc:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 07:22:42 2026 GMT
Not After : Aug 5 07:27:42 2027 GMT
Subject: CN=E3E309A5D1CC38BE075DDB8B26E8CB1D064894AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c1:6d:1c:b3:70:9b:a9:bf:69:27:1c:56:a2:
28:22:9c:5b:82:d4:a4:9a:69:4c:e4:c1:ff:28:c0:
61:1f:ae:19:54:2c:54:5b:0b:f9:dd:fa:ba:cd:5c:
d0:2b:39:bd:d9:2f:b1:05:1b:cd:c5:aa:a9:74:d4:
ac:50:94:fa:a2:76:a5:a6:0c:71:b6:bb:62:81:f4:
44:b3:96:11:f3:f7:b0:1e:cc:45:76:52:87:cb:9b:
56:07:b8:ca:d8:28:b0:30:ff:05:db:be:c5:ba:a6:
0f:4e:ee:a9:e7:91:e3:72:e4:15:ae:5a:b5:34:36:
10:08:75:65:01:71:77:82:72:8c:18:5b:d8:59:e8:
04:ab:b8:8b:34:4d:22:ea:15:44:b5:8a:41:e9:fe:
07:a5:3d:f0:db:14:f6:76:6c:e4:8c:7e:8d:1e:d4:
22:22:0a:f7:58:fe:ed:33:2a:72:f5:5d:c9:03:ff:
b0:bf:77:e2:f1:28:8d:70:f6:4d:a9:f6:c9:91:78:
0f:ef:7b:1d:6b:dd:61:2b:4f:26:c5:2e:73:7a:b2:
67:72:eb:ba:21:ed:1a:75:7c:8b:cf:de:9c:78:cf:
1f:4d:09:ea:56:19:ef:11:d8:a7:b4:f8:91:6a:58:
54:5d:51:dc:00:a9:67:70:fa:c4:ea:99:d4:c5:05:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:09:A5:D1:CC:38:BE:07:5D:DB:8B:26:E8:CB:1D:06:48:94:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232322e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c2:68:2b:b7:6c:3f:df:e7:2d:e9:08:e4:16:fd:74:1b:48:
3a:ea:c9:a3:8d:ef:8f:5b:c0:eb:81:f4:f0:43:d7:54:cc:bc:
e3:64:51:f0:b7:42:33:96:69:80:8f:04:39:fd:e2:de:a2:23:
7b:f8:cb:ee:48:97:9c:72:a1:71:28:6f:8b:49:90:4a:d4:e4:
c3:01:1b:ca:53:b8:c9:4b:b0:96:01:a0:68:67:1b:ce:ff:cd:
a0:19:95:76:4b:08:29:9c:99:7b:4d:12:24:ba:af:dc:99:58:
ab:c3:c1:24:64:e5:79:8c:d5:cf:1f:eb:05:b4:9f:4f:18:ab:
57:72:ae:68:be:6e:89:ab:a8:41:28:55:96:0d:d7:b7:54:e2:
b8:86:14:2d:06:2d:50:bd:af:5b:52:6a:41:b1:dd:e3:76:b4:
69:0f:be:b6:1d:8c:da:e6:28:c2:76:40:01:15:00:ca:9d:24:
d6:c9:13:f6:10:e0:d5:83:be:27:9b:3e:2b:8e:5c:2a:3e:f2:
20:79:74:f3:b5:e5:11:c2:9d:81:a1:e0:1a:70:76:6c:5c:71:
49:f6:c3:64:54:e8:7d:1d:7e:29:e6:3f:e4:6c:0b:68:ee:ca:
c8:ad:c1:f2:47:40:8f:ae:6a:29:6a:d0:a2:a4:38:1e:90:05:
c1:8b:c8:10
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWhUuoA88A7/l9UORx5jHT/bccOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDYwNzIyNDJaFw0yNzA4MDUwNzI3NDJaMDMxMTAvBgNV
BAMTKEUzRTMwOUE1RDFDQzM4QkUwNzVEREI4QjI2RThDQjFEMDY0ODk0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDswW0cs3Cbqb9pJxxWoiginFuC
1KSaaUzkwf8owGEfrhlULFRbC/nd+rrNXNArOb3ZL7EFG83Fqql01KxQlPqidqWm
DHG2u2KB9ESzlhHz97AezEV2UofLm1YHuMrYKLAw/wXbvsW6pg9O7qnnkeNy5BWu
WrU0NhAIdWUBcXeCcowYW9hZ6ASruIs0TSLqFUS1ikHp/gelPfDbFPZ2bOSMfo0e
1CIiCvdY/u0zKnL1XckD/7C/d+LxKI1w9k2p9smReA/vex1r3WErTybFLnN6smdy
67oh7Rp1fIvP3px4zx9NCepWGe8R2Ke0+JFqWFRdUdwAqWdw+sTqmdTFBbjXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU4+MJpdHMOL4HXduLJujLHQZIlK4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dneMA0GCSqGSIb3DQEBCwUAA4IBAQB+wmgrt2w/3+ct6QjkFv10G0g66smjje+P
W8DrgfTwQ9dUzLzjZFHwt0IzlmmAjwQ5/eLeoiN7+MvuSJeccqFxKG+LSZBK1OTD
ARvKU7jJS7CWAaBoZxvO/82gGZV2SwgpnJl7TRIkuq/cmVirw8EkZOV5jNXPH+sF
tJ9PGKtXcq5ovm6Jq6hBKFWWDde3VOK4hhQtBi1Qva9bUmpBsd3jdrRpD762HYza
5ijCdkABFQDKnSTWyRP2EODVg74nmz4rjlwqPvIgeXTzteURwp2BoeAacHZsXHFJ
9sNkVOh9HX4p5j/kbAto7srIrcHyR0CPrmopatCipDgekAXBi8gQ
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:39 2026 by rpki-client