Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130342e302f32312d3234203d3e20383334.roa
File: 3231372e3231372e3130342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: J99XFXW7GKKn0rwjIUV/DpgMkIIOVfaS0cOeqVgQsWU=
Subject key identifier: 73:FB:12:8A:B0:CA:B2:F0:83:1A:E4:58:7D:34:35:FD:28:0C:5A:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03C1318735F86FE35FA0625BF3AF88E58E75FADD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130342e302f32312d3234203d3e20383334.roa
Signing time: Thu 23 Apr 2026 10:10:56 +0000
ROA not before: Thu 23 Apr 2026 10:05:56 +0000
ROA not after: Thu 22 Apr 2027 10:10:56 +0000
asID: 834
IP address blocks: 217.217.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c1:31:87:35:f8:6f:e3:5f:a0:62:5b:f3:af:88:e5:8e:75:fa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 23 10:05:56 2026 GMT
Not After : Apr 22 10:10:56 2027 GMT
Subject: CN=73FB128AB0CAB2F0831AE4587D3435FD280C5AB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:c1:83:ee:97:16:1c:be:6a:a0:1e:51:97:
f9:32:2a:5f:30:4b:79:1f:be:35:fd:a3:18:20:2a:
2e:86:8b:f9:86:8a:a0:e4:49:2e:16:6f:99:cf:b7:
57:76:b3:27:50:ad:3b:4c:bd:4e:5e:9f:60:50:54:
dc:dc:f3:9e:fe:bd:b1:ce:f5:d0:a3:a1:64:c9:cd:
25:32:f5:a0:d9:bb:e6:23:5f:a0:5b:8b:3b:9d:00:
c8:d5:fb:2f:c2:36:cc:5d:da:2d:d2:85:2b:0b:90:
d5:69:88:45:41:a1:89:69:36:5d:a1:20:da:b6:49:
08:d9:79:e0:44:c5:0e:a3:c3:5e:cd:07:12:d2:f2:
2b:6b:1f:be:76:72:b3:16:1c:6d:4e:c4:d3:36:6a:
c2:20:5b:a7:f5:1a:71:49:97:1a:82:64:51:d9:76:
ac:fb:97:49:56:35:1c:ef:06:8c:93:f6:84:ab:cc:
bc:8f:1d:12:17:a7:a6:de:a3:0b:d7:43:44:d5:d4:
3d:a2:1d:28:05:57:1d:0b:3c:90:8f:70:c4:59:0e:
2b:e7:15:f5:22:56:0c:a7:71:72:d3:32:55:68:3c:
1f:f2:12:57:30:64:76:fd:f7:50:0f:72:b8:8f:fc:
fc:87:7e:98:8f:63:a7:32:94:be:80:0f:5a:c2:38:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:12:8A:B0:CA:B2:F0:83:1A:E4:58:7D:34:35:FD:28:0C:5A:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3130342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.104.0/21
Signature Algorithm: sha256WithRSAEncryption
86:a8:bb:e8:9e:74:dd:86:00:da:83:ed:bf:7d:3c:b1:3e:fa:
63:cc:09:2d:ec:65:08:ef:c5:92:60:6f:9f:0f:64:74:30:04:
e5:56:51:97:bc:26:6a:8f:17:cf:02:9f:35:02:45:e6:cf:d5:
80:25:71:d2:68:a9:69:ae:b6:6f:40:91:cd:9e:c2:f0:34:1f:
b7:40:22:2e:d7:49:7e:00:f7:e9:54:f9:08:d3:ac:c4:b4:df:
4d:30:c5:57:e1:ba:1b:18:ae:fa:ac:bc:a2:03:67:ad:08:09:
84:e2:a5:0b:1c:af:e2:c9:8b:74:cb:79:ab:94:2f:91:0c:0c:
b6:9d:b6:05:53:91:4a:4d:d8:f1:0e:3c:60:ec:72:ce:ee:ae:
ce:2a:f9:14:cc:90:75:ed:b8:8b:55:ce:39:e4:c2:fb:3d:7c:
99:19:ff:2e:de:c5:c0:0e:b7:85:20:48:a4:fb:1c:b4:9f:c9:
ab:f7:c6:59:e8:5e:d5:16:a6:5b:b9:cb:35:3e:3f:db:f2:a5:
85:e1:ec:96:13:6e:22:15:7b:f9:e8:2d:09:2f:db:59:1b:2d:
14:e6:cf:a9:4d:d5:f8:65:70:1c:b7:62:5c:68:ac:b4:bb:7e:
22:bc:e6:70:f6:42:35:e9:87:7f:ed:87:d4:57:d0:bb:5c:07:
f9:1b:d7:9a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUA8ExhzX4b+NfoGJb86+I5Y51+t0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MjMxMDA1NTZaFw0yNzA0MjIxMDEwNTZaMDMxMTAvBgNV
BAMTKDczRkIxMjhBQjBDQUIyRjA4MzFBRTQ1ODdEMzQzNUZEMjgwQzVBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yMGD7pcWHL5qoB5Rl/kyKl8w
S3kfvjX9oxggKi6Gi/mGiqDkSS4Wb5nPt1d2sydQrTtMvU5en2BQVNzc857+vbHO
9dCjoWTJzSUy9aDZu+YjX6BbizudAMjV+y/CNsxd2i3ShSsLkNVpiEVBoYlpNl2h
INq2SQjZeeBExQ6jw17NBxLS8itrH752crMWHG1OxNM2asIgW6f1GnFJlxqCZFHZ
dqz7l0lWNRzvBoyT9oSrzLyPHRIXp6beowvXQ0TV1D2iHSgFVx0LPJCPcMRZDivn
FfUiVgyncXLTMlVoPB/yElcwZHb991APcriP/PyHfpiPY6cylL6AD1rCOC03AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUc/sSirDKsvCDGuRYfTQ1/SgMWrUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9nZ
aDANBgkqhkiG9w0BAQsFAAOCAQEAhqi76J503YYA2oPtv308sT76Y8wJLexlCO/F
kmBvnw9kdDAE5VZRl7wmao8XzwKfNQJF5s/VgCVx0mipaa62b0CRzZ7C8DQft0Ai
LtdJfgD36VT5CNOsxLTfTTDFV+G6Gxiu+qy8ogNnrQgJhOKlCxyv4smLdMt5q5Qv
kQwMtp22BVORSk3Y8Q48YOxyzu6uzir5FMyQde24i1XOOeTC+z18mRn/Lt7FwA63
hSBIpPsctJ/Jq/fGWehe1RamW7nLNT4/2/KlheHslhNuIhV7+egtCS/bWRstFObP
qU3V+GVwHLdiXGistLt+IrzmcPZCNemHf+2H1FfQu1wH+RvXmg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:11 2026 by rpki-client