Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231332e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3231332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: df3K8UIJwKTXA6gErdL0Y3SlHPqvGSxHvP5PsTaNld0=
Subject key identifier: 78:7C:80:EA:1F:AA:25:23:F9:DF:60:F0:BC:6A:48:7B:C1:1F:B9:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1026C62B4B520FCE9A26004227A78AD99F94E15B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231332e302f32342d3234203d3e20383334.roa
Signing time: Tue 10 Mar 2026 07:12:30 +0000
ROA not before: Tue 10 Mar 2026 07:07:30 +0000
ROA not after: Tue 09 Mar 2027 07:12:30 +0000
asID: 834
IP address blocks: 217.216.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:26:c6:2b:4b:52:0f:ce:9a:26:00:42:27:a7:8a:d9:9f:94:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 10 07:07:30 2026 GMT
Not After : Mar 9 07:12:30 2027 GMT
Subject: CN=787C80EA1FAA2523F9DF60F0BC6A487BC11FB93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:e5:74:3e:e7:02:8f:8f:06:56:fe:18:29:
7a:c3:27:de:80:4e:14:47:71:2c:30:6c:0e:23:3c:
8b:d7:a8:11:8e:67:60:4c:59:78:c6:0c:d2:df:fe:
d8:4c:03:ea:0d:71:60:37:5a:dc:b2:84:86:08:c2:
aa:87:d2:fb:52:78:55:39:e8:60:16:d8:5a:f2:3b:
33:27:f9:77:f8:c6:21:5a:7b:13:dd:56:91:4c:e8:
96:03:90:27:36:83:d9:1b:90:64:3b:03:90:83:19:
12:2e:c3:61:b5:70:34:e9:e5:1b:c1:90:bd:88:37:
b8:82:a5:30:af:a8:eb:7b:87:6b:f5:13:ad:03:68:
fc:2a:36:13:d5:9e:54:a1:31:70:7a:b3:51:99:41:
fa:6f:06:c1:cf:2e:cf:dc:36:29:8d:15:fa:64:66:
ef:d0:78:b2:7d:8a:56:69:b4:36:b3:ed:69:5d:f9:
f0:43:36:89:64:c9:74:12:0d:94:c9:8c:85:00:78:
c8:f1:8f:ac:af:b0:b5:f4:dc:e7:2d:25:40:3b:c2:
8d:6f:31:a4:68:52:1d:43:53:23:a8:8f:7b:d9:46:
d7:92:55:d3:21:2d:fb:9c:ae:51:12:26:a6:30:db:
ef:b3:50:88:a0:f0:7f:2f:aa:a1:0a:5b:8a:cd:0c:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:80:EA:1F:AA:25:23:F9:DF:60:F0:BC:6A:48:7B:C1:1F:B9:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.213.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6a:73:ac:3d:aa:fb:ef:2d:e2:7a:d2:1b:fb:14:1a:45:12:
a1:d1:e2:58:21:a8:50:c8:70:01:2b:20:28:21:e2:25:7f:6f:
c4:a8:d2:03:5b:5f:03:17:2b:a3:43:21:94:ca:94:05:b8:51:
55:4c:31:4a:77:52:a5:3c:06:e4:b0:e0:e7:98:29:c2:f2:96:
ed:6c:4b:e1:5e:24:c5:87:1b:7d:7e:80:a6:fa:6f:ec:62:b8:
32:b1:9b:8a:6e:ac:70:8c:f1:7d:67:1d:90:22:18:a7:47:06:
22:a3:2b:fc:d0:a3:25:e1:b7:2e:13:1f:16:9b:6e:95:84:f7:
12:e5:94:62:d6:36:31:a7:31:60:e3:9e:8c:f0:7b:5c:0b:50:
de:d0:79:4b:f5:9e:37:43:b0:a9:af:3a:d5:b4:0a:d1:b2:c7:
b5:9d:af:0c:88:cc:93:14:fd:bc:88:8b:e3:a5:b8:21:15:34:
bb:c3:3e:72:57:e2:bd:d5:fc:9c:f7:9b:e5:05:49:f2:16:9f:
17:7a:9a:d0:58:ff:1a:55:89:81:34:7b:b3:bb:e4:5e:3c:4c:
0b:05:60:f0:91:48:6b:56:f0:b9:98:3f:ce:12:c1:03:fb:ee:
1a:4d:8b:85:37:8f:3e:f5:2c:a8:63:05:46:af:de:0c:bc:db:
38:7e:28:ea
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUECbGK0tSD86aJgBCJ6eK2Z+U4VswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTAwNzA3MzBaFw0yNzAzMDkwNzEyMzBaMDMxMTAvBgNV
BAMTKDc4N0M4MEVBMUZBQTI1MjNGOURGNjBGMEJDNkE0ODdCQzExRkI5M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCuV0PucCj48GVv4YKXrDJ96A
ThRHcSwwbA4jPIvXqBGOZ2BMWXjGDNLf/thMA+oNcWA3WtyyhIYIwqqH0vtSeFU5
6GAW2FryOzMn+Xf4xiFaexPdVpFM6JYDkCc2g9kbkGQ7A5CDGRIuw2G1cDTp5RvB
kL2IN7iCpTCvqOt7h2v1E60DaPwqNhPVnlShMXB6s1GZQfpvBsHPLs/cNimNFfpk
Zu/QeLJ9ilZptDaz7Wld+fBDNolkyXQSDZTJjIUAeMjxj6yvsLX03OctJUA7wo1v
MaRoUh1DUyOoj3vZRteSVdMhLfucrlESJqYw2++zUIig8H8vqqEKW4rNDEAPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUeHyA6h+qJSP532DwvGpIe8EfuTswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnY
1TANBgkqhkiG9w0BAQsFAAOCAQEAQmpzrD2q++8t4nrSG/sUGkUSodHiWCGoUMhw
ASsgKCHiJX9vxKjSA1tfAxcro0MhlMqUBbhRVUwxSndSpTwG5LDg55gpwvKW7WxL
4V4kxYcbfX6Apvpv7GK4MrGbim6scIzxfWcdkCIYp0cGIqMr/NCjJeG3LhMfFptu
lYT3EuWUYtY2MacxYOOejPB7XAtQ3tB5S/WeN0Owqa861bQK0bLHtZ2vDIjMkxT9
vIiL46W4IRU0u8M+clfivdX8nPeb5QVJ8hafF3qa0Fj/GlWJgTR7s7vkXjxMCwVg
8JFIa1bwuZg/zhLBA/vuGk2LhTePPvUsqGMFRq/eDLzbOH4o6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:15 2026 by rpki-client