Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2037383433.roa
File: 3231372e3231372e32302e302f32322d3234203d3e2037383433.roa (raw, json)
Hash identifier: p3E/GWYsj08RWYg4QRl7rcGT7A9quFYd3dPYed77x3A=
Subject key identifier: 3E:69:1C:60:53:36:DB:64:68:0B:F5:57:1F:6F:82:F6:7D:9F:F6:0B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7EC610D9F8F7F47D8361C395167473EF388C1B13
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2037383433.roa
Signing time: Wed 24 Jun 2026 18:25:44 +0000
ROA not before: Wed 24 Jun 2026 18:20:44 +0000
ROA not after: Wed 23 Jun 2027 18:25:44 +0000
asID: 7843
IP address blocks: 217.217.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c6:10:d9:f8:f7:f4:7d:83:61:c3:95:16:74:73:ef:38:8c:1b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 18:20:44 2026 GMT
Not After : Jun 23 18:25:44 2027 GMT
Subject: CN=3E691C605336DB64680BF5571F6F82F67D9FF60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:fe:73:fb:45:37:a5:8a:4d:98:f7:08:06:
3a:45:35:15:6e:e4:f6:cc:69:db:56:d9:59:a4:43:
af:b5:1a:10:e7:3a:62:e6:85:2d:87:bd:1d:fd:01:
b5:b8:5d:c1:f6:7a:8f:77:80:13:39:e6:cd:ec:99:
bc:3f:4d:b0:4a:3b:db:24:ff:18:f6:a1:9b:0a:41:
72:94:31:c3:23:21:52:d9:76:f9:64:2a:4c:e8:2e:
2e:22:b0:fd:f1:54:8d:cb:b7:49:27:43:92:83:bc:
83:2b:99:08:1c:42:21:c2:a2:e9:43:a2:bf:cb:c9:
76:72:27:07:af:d0:9d:7e:a7:bc:c2:2b:4b:73:bc:
f2:38:95:4b:2d:dc:40:d6:4e:f2:68:bd:88:35:eb:
17:8f:39:85:42:07:6a:62:fb:74:7e:5e:83:8b:72:
07:4a:59:14:ab:0f:13:9c:86:0a:31:a2:c2:48:51:
30:41:b1:b8:b6:2a:e2:6a:89:ca:d9:45:4d:a2:74:
28:89:4c:de:0c:72:d1:32:4c:a4:4f:9f:6e:df:9e:
5b:59:ac:4a:f1:f9:16:78:af:db:7b:07:8c:ae:a1:
7f:5c:df:29:87:04:db:75:f5:d3:cf:1c:94:fa:2a:
4b:12:8d:dd:39:37:23:98:2d:63:66:d1:20:f1:27:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:1C:60:53:36:DB:64:68:0B:F5:57:1F:6F:82:F6:7D:9F:F6:0B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32302e302f32322d3234203d3e2037383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:c5:72:3c:ce:bf:49:e2:e6:d6:28:a1:7a:73:b2:9f:6c:22:
60:a5:8d:b5:83:15:a7:d3:a3:a1:fc:6e:46:d4:c6:c1:ce:76:
7e:85:64:2d:25:fd:c5:ec:95:7b:be:8b:55:49:e7:fb:cf:8e:
c6:54:29:6b:8a:7b:d2:48:b7:35:f9:5b:d9:69:f0:91:67:d3:
e8:3d:a9:94:e7:26:b4:16:72:fd:eb:2a:1f:19:68:20:b2:0f:
87:77:84:09:69:77:12:b7:34:0c:b6:d6:98:0a:f6:24:8f:00:
66:89:e6:b9:da:67:c0:6f:c8:e3:95:b2:ef:9b:3f:08:bc:5d:
2d:66:80:2a:9c:71:bc:e1:87:7c:b0:ed:0d:fb:71:b4:2a:39:
bd:1b:2e:85:ef:96:49:b0:ae:c6:77:36:0a:60:28:88:49:62:
16:32:14:97:80:7f:c9:55:42:94:62:32:dc:8b:dc:de:3f:d3:
f5:57:c4:d2:f1:72:73:5a:21:7d:d9:0a:e4:06:96:72:7f:6b:
80:20:b2:8d:e6:90:07:01:3a:c7:43:74:3b:58:66:54:82:95:
82:7c:5c:d6:5f:a0:8f:96:25:25:a4:06:aa:33:cb:5d:e9:19:
05:71:97:4e:e0:30:ad:c3:e0:d6:47:01:e0:f1:a5:d8:de:ca:
c1:53:d6:9e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfsYQ2fj39H2DYcOVFnRz7ziMGxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MjQxODIwNDRaFw0yNzA2MjMxODI1NDRaMDMxMTAvBgNV
BAMTKDNFNjkxQzYwNTMzNkRCNjQ2ODBCRjU1NzFGNkY4MkY2N0Q5RkY2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2v5z+0U3pYpNmPcIBjpFNRVu
5PbMadtW2VmkQ6+1GhDnOmLmhS2HvR39AbW4XcH2eo93gBM55s3smbw/TbBKO9sk
/xj2oZsKQXKUMcMjIVLZdvlkKkzoLi4isP3xVI3Lt0knQ5KDvIMrmQgcQiHCoulD
or/LyXZyJwev0J1+p7zCK0tzvPI4lUst3EDWTvJovYg16xePOYVCB2pi+3R+XoOL
cgdKWRSrDxOchgoxosJIUTBBsbi2KuJqicrZRU2idCiJTN4MctEyTKRPn27fnltZ
rErx+RZ4r9t7B4yuoX9c3ymHBNt19dPPHJT6KksSjd05NyOYLWNm0SDxJyWZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUPmkcYFM222RoC/VXH2+C9n2f9gswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzM4MzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
FDANBgkqhkiG9w0BAQsFAAOCAQEAfcVyPM6/SeLm1iihenOyn2wiYKWNtYMVp9Oj
ofxuRtTGwc52foVkLSX9xeyVe76LVUnn+8+OxlQpa4p70ki3Nflb2WnwkWfT6D2p
lOcmtBZy/esqHxloILIPh3eECWl3Erc0DLbWmAr2JI8AZonmudpnwG/I45Wy75s/
CLxdLWaAKpxxvOGHfLDtDftxtCo5vRsuhe+WSbCuxnc2CmAoiEliFjIUl4B/yVVC
lGIy3Ivc3j/T9VfE0vFyc1ohfdkK5AaWcn9rgCCyjeaQBwE6x0N0O1hmVIKVgnxc
1l+gj5YlJaQGqjPLXekZBXGXTuAwrcPg1kcB4PGl2N7KwVPWng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:44 2026 by rpki-client