Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3230372e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: TmdTJYkMOmWbZO3GBxV7SsDrBKmLma8L70xIygvd8Os=
Subject key identifier: B1:11:7F:88:3F:00:27:12:1A:18:5C:50:66:A8:86:E0:7B:10:4E:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 700FAC859F87078733B5D1CB4B7B37C736E250CE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:10 +0000
ROA not before: Wed 25 Mar 2026 08:44:10 +0000
ROA not after: Wed 24 Mar 2027 08:49:10 +0000
asID: 48266
IP address blocks: 217.217.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0f:ac:85:9f:87:07:87:33:b5:d1:cb:4b:7b:37:c7:36:e2:50:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:10 2026 GMT
Not After : Mar 24 08:49:10 2027 GMT
Subject: CN=B1117F883F0027121A185C5066A886E07B104E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:e2:51:39:68:71:00:11:fd:31:e9:9b:11:
be:9f:c3:df:9a:97:40:b5:36:96:82:63:5c:b1:66:
cb:c5:ee:7f:1c:b2:eb:10:d9:cb:ea:0f:26:ad:c2:
14:3c:ff:c4:c5:f4:8e:76:3c:48:44:01:eb:a0:e4:
1e:13:53:c5:de:bf:ed:cc:20:42:f9:29:7f:8c:ef:
72:98:59:d0:ae:a1:55:b1:bd:d5:e4:1e:dd:cb:5e:
3a:ca:be:18:25:d6:8f:ca:52:1c:92:dd:ad:0e:1f:
fb:cc:a5:1a:5c:a9:7e:bb:40:2d:5d:62:bd:4d:5b:
28:66:ca:74:7c:25:65:9d:92:eb:7a:3d:18:58:66:
c0:7e:e2:ec:06:ba:83:cd:8a:90:5f:b5:bc:6c:c7:
2b:42:85:00:26:62:04:7e:72:37:5b:4f:83:43:9a:
13:33:53:88:0c:a4:6a:26:eb:f4:a3:09:02:62:bc:
96:ac:ce:43:be:11:b7:fd:9d:55:5a:f2:22:d7:3c:
33:87:5c:08:7f:2a:f0:7c:05:9e:8e:a7:5f:74:49:
c8:6b:8f:8c:e0:07:8d:57:ed:9f:04:c1:41:e5:24:
87:07:80:25:c4:86:f6:f9:58:f4:40:fd:e7:88:3b:
24:d4:71:73:39:c7:4f:63:f6:1c:aa:e3:ee:65:f7:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:7F:88:3F:00:27:12:1A:18:5C:50:66:A8:86:E0:7B:10:4E:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230372e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.207.0/24
Signature Algorithm: sha256WithRSAEncryption
08:96:b2:ea:bf:70:b4:f9:68:75:08:60:30:f7:77:7a:26:52:
c9:77:a0:74:8c:6b:1a:df:eb:22:00:4d:c2:ff:b9:0d:a6:94:
f8:f5:f6:c6:49:05:25:93:04:15:e2:b4:20:3e:b7:52:55:2f:
cf:a3:de:9b:fe:05:0a:40:53:f2:67:f0:1c:8d:df:c6:71:a2:
2d:48:87:3a:42:1f:c3:88:c2:f8:5c:a5:26:eb:b2:7d:b8:aa:
2f:86:22:3b:d3:c1:99:0b:6b:c9:9e:29:64:22:4e:3b:20:40:
db:7f:24:60:1e:21:d3:e2:69:bf:e2:3e:86:e9:cc:07:11:62:
f9:59:cf:95:5a:b4:47:49:6c:6f:56:5e:b0:c6:10:b0:96:d1:
9f:4c:aa:6a:58:94:04:61:91:05:16:c0:dd:4e:68:66:c8:05:
9e:6f:6d:96:76:69:ea:b1:15:fa:b5:ef:83:7d:eb:cb:c6:79:
e8:a0:d3:c4:53:58:bd:1b:5a:03:cf:3c:7d:22:27:5b:5b:f5:
e5:1e:db:f0:41:89:8a:3f:7d:b6:e5:2c:e8:c9:91:98:72:04:
26:80:50:84:2d:d2:57:47:6b:39:73:85:6d:66:b3:09:6e:ff:
c1:f8:4f:7c:57:c8:06:43:35:97:85:30:a1:fa:c5:9f:e5:49:
c3:b9:3e:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcA+shZ+HB4cztdHLS3s3xzbiUM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMjUwODQ0MTBaFw0yNzAzMjQwODQ5MTBaMDMxMTAvBgNV
BAMTKEIxMTE3Rjg4M0YwMDI3MTIxQTE4NUM1MDY2QTg4NkUwN0IxMDRFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KOJROWhxABH9MembEb6fw9+a
l0C1NpaCY1yxZsvF7n8csusQ2cvqDyatwhQ8/8TF9I52PEhEAeug5B4TU8Xev+3M
IEL5KX+M73KYWdCuoVWxvdXkHt3LXjrKvhgl1o/KUhyS3a0OH/vMpRpcqX67QC1d
Yr1NWyhmynR8JWWdkut6PRhYZsB+4uwGuoPNipBftbxsxytChQAmYgR+cjdbT4ND
mhMzU4gMpGom6/SjCQJivJaszkO+Ebf9nVVa8iLXPDOHXAh/KvB8BZ6Op190Schr
j4zgB41X7Z8EwUHlJIcHgCXEhvb5WPRA/eeIOyTUcXM5x09j9hyq4+5l9/fPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUsRF/iD8AJxIaGFxQZqiG4HsQTlcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMjM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2c8wDQYJKoZIhvcNAQELBQADggEBAAiWsuq/cLT5aHUIYDD3d3omUsl3oHSM
axrf6yIATcL/uQ2mlPj19sZJBSWTBBXitCA+t1JVL8+j3pv+BQpAU/Jn8ByN38Zx
oi1IhzpCH8OIwvhcpSbrsn24qi+GIjvTwZkLa8meKWQiTjsgQNt/JGAeIdPiab/i
PobpzAcRYvlZz5VatEdJbG9WXrDGELCW0Z9MqmpYlARhkQUWwN1OaGbIBZ5vbZZ2
aeqxFfq174N968vGeeig08RTWL0bWgPPPH0iJ1tb9eUe2/BBiYo/fbblLOjJkZhy
BCaAUIQt0ldHazlzhW1mswlu/8H4T3xXyAZDNZeFMKH6xZ/lScO5Pgg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:51 2026 by rpki-client