Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e392e302f32342d3234203d3e2039333034.roa
File: 3231372e3231372e392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 66hy57fxVcfnXyn33YoWqdv3+od/MdSok6l4nolPglA=
Subject key identifier: C8:AA:91:89:54:18:8C:C7:5F:70:F4:40:0A:6A:B4:06:4B:44:AB:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22F70D0295116F61F1DADC382609FE7ECF593617
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e392e302f32342d3234203d3e2039333034.roa
Signing time: Thu 10 Sep 2026 11:26:09 +0000
ROA not before: Thu 10 Sep 2026 11:21:09 +0000
ROA not after: Thu 09 Sep 2027 11:26:09 +0000
asID: 9304
IP address blocks: 217.217.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f7:0d:02:95:11:6f:61:f1:da:dc:38:26:09:fe:7e:cf:59:36:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:09 2026 GMT
Not After : Sep 9 11:26:09 2027 GMT
Subject: CN=C8AA918954188CC75F70F4400A6AB4064B44ABC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:be:18:e1:aa:fd:dc:fb:31:b8:4a:fa:35:
3b:1f:95:ad:c9:3b:8c:d9:94:d0:0a:78:c3:93:fc:
b8:6f:54:20:ab:d8:81:50:ed:06:6c:89:66:4c:fd:
41:6c:f0:dd:b7:0e:30:e6:91:c8:3b:40:d3:71:d0:
5f:94:a7:eb:65:0e:8d:ee:c3:46:b5:8a:97:32:38:
9e:cc:28:bb:20:db:e3:6e:03:97:a8:91:31:bf:88:
ec:d8:ff:4e:5b:3e:de:ec:52:85:ea:37:75:58:c8:
83:a9:ef:65:7c:b4:ad:98:a4:b3:ce:ef:cb:b3:d6:
0d:ea:33:2f:cd:78:95:1f:b9:94:5d:ed:4b:b8:50:
5e:4e:fa:28:b1:14:1f:e7:d5:ea:9f:29:bc:df:d2:
be:43:91:b2:4e:d5:4f:96:c0:2d:c1:7f:ea:5c:bc:
a8:50:62:07:67:75:23:4f:6f:f2:51:43:00:b9:e4:
95:04:d4:42:ff:b9:34:e4:a3:a6:87:ba:2e:33:16:
07:89:cd:7e:ec:7d:69:f6:e8:2b:9d:03:f4:ee:92:
ea:6c:c7:84:a7:cf:1a:0b:5e:f9:57:98:24:6f:86:
00:d4:43:e2:57:dd:d0:ac:e9:fa:6f:91:19:2d:93:
82:69:37:73:69:5e:eb:ff:6f:49:34:77:f9:dd:ed:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:91:89:54:18:8C:C7:5F:70:F4:40:0A:6A:B4:06:4B:44:AB:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e392e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:aa:7d:70:5b:f2:80:75:df:cd:2e:38:87:44:84:47:cb:87:
77:67:46:c2:b8:bd:a8:7d:3d:c0:94:e3:89:bc:63:68:8d:4a:
ab:a0:9d:a1:e7:95:c9:e1:c3:14:c2:78:f2:7d:dc:26:7b:7e:
0a:32:f0:39:93:7f:8a:db:80:8c:e3:42:48:e6:d1:02:e2:e8:
d4:38:88:3a:57:ee:10:89:73:20:f8:fb:c1:fb:34:76:d8:a9:
8e:8f:17:f1:24:c0:08:31:7e:e8:e9:57:4b:e1:fe:13:d6:98:
15:78:dc:b8:20:e1:24:90:97:c9:1d:ff:b1:a9:bc:b9:e9:80:
e0:0e:e8:db:d5:a5:a0:ed:6e:21:c0:f1:87:f3:3e:31:d2:2f:
16:54:8a:4e:8c:50:79:94:c7:86:8c:9b:34:8e:44:d0:50:8f:
2f:11:26:0f:ac:07:1b:f6:57:0a:62:18:3d:47:c8:58:e9:9c:
bd:4b:f3:90:7a:d4:1b:1f:5f:9f:95:74:e1:cd:67:d7:1f:9f:
00:be:4c:92:a3:1a:cc:44:65:70:fc:78:ab:c3:85:ee:51:8d:
bc:bd:5c:51:62:42:c6:58:2d:40:85:b7:38:1f:b5:8d:83:bf:
f4:09:4a:ff:a0:4a:fb:95:c6:01:f2:fa:f9:ad:d8:6f:b7:9f:
5f:ec:58:63
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUIvcNApURb2Hx2tw4Jgn+fs9ZNhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMTIxMDlaFw0yNzA5MDkxMTI2MDlaMDMxMTAvBgNV
BAMTKEM4QUE5MTg5NTQxODhDQzc1RjcwRjQ0MDBBNkFCNDA2NEI0NEFCQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+74Y4ar93PsxuEr6NTsfla3J
O4zZlNAKeMOT/LhvVCCr2IFQ7QZsiWZM/UFs8N23DjDmkcg7QNNx0F+Up+tlDo3u
w0a1ipcyOJ7MKLsg2+NuA5eokTG/iOzY/05bPt7sUoXqN3VYyIOp72V8tK2YpLPO
78uz1g3qMy/NeJUfuZRd7Uu4UF5O+iixFB/n1eqfKbzf0r5DkbJO1U+WwC3Bf+pc
vKhQYgdndSNPb/JRQwC55JUE1EL/uTTko6aHui4zFgeJzX7sfWn26CudA/Tukups
x4SnzxoLXvlXmCRvhgDUQ+JX3dCs6fpvkRktk4JpN3NpXuv/b0k0d/nd7f3JAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUyKqRiVQYjMdfcPRACmq0BktEq8QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADZ2Qkw
DQYJKoZIhvcNAQELBQADggEBAAyqfXBb8oB1380uOIdEhEfLh3dnRsK4vah9PcCU
44m8Y2iNSqugnaHnlcnhwxTCePJ93CZ7fgoy8DmTf4rbgIzjQkjm0QLi6NQ4iDpX
7hCJcyD4+8H7NHbYqY6PF/EkwAgxfujpV0vh/hPWmBV43Lgg4SSQl8kd/7GpvLnp
gOAO6NvVpaDtbiHA8YfzPjHSLxZUik6MUHmUx4aMmzSORNBQjy8RJg+sBxv2Vwpi
GD1HyFjpnL1L85B61BsfX5+VdOHNZ9cfnwC+TJKjGsxEZXD8eKvDhe5Rjby9XFFi
QsZYLUCFtzgftY2Dv/QJSv+gSvuVxgHy+vmt2G+3n1/sWGM=
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:25 2026 by rpki-client