Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gyDCD56bKuOYD6tixWd2yvUM7KpKvrlYMHt7RP4wOSE=
Subject key identifier: DF:F5:C7:2D:5E:0C:E3:F8:E6:7B:3D:96:BE:49:1C:C5:2E:F6:21:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03018941356E63D3BDAF000E1BA54FEC572BC937
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 12:04:45 +0000
ROA not before: Tue 21 Jul 2026 11:59:45 +0000
ROA not after: Tue 20 Jul 2027 12:04:45 +0000
asID: 834
IP address blocks: 217.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:01:89:41:35:6e:63:d3:bd:af:00:0e:1b:a5:4f:ec:57:2b:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 11:59:45 2026 GMT
Not After : Jul 20 12:04:45 2027 GMT
Subject: CN=DFF5C72D5E0CE3F8E67B3D96BE491CC52EF62109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:85:d0:6a:ea:a0:7e:53:a5:0f:a6:d4:a7:
46:88:6a:00:5c:88:1d:99:1e:7c:c0:a6:f0:45:7c:
20:f0:96:61:bc:db:01:30:c1:f1:51:86:93:e0:ae:
fe:ca:89:09:a9:4d:a1:f4:f2:41:31:b2:e9:ac:f6:
b6:b0:ea:1d:62:d1:4c:f6:5a:b7:b8:ea:4b:91:3f:
e3:d9:0b:29:16:e2:99:37:13:6e:f1:3c:78:e4:11:
81:22:07:f6:e0:26:0e:9a:86:07:6b:05:f2:1a:b4:
d4:5c:8c:97:52:56:e4:09:36:42:d0:66:4c:85:ff:
da:dd:2e:6c:32:09:d8:72:a8:9a:cf:87:8a:70:68:
c7:af:7e:3d:9e:78:df:89:35:a8:75:4d:f0:42:bd:
e5:7a:b2:05:ab:32:80:eb:51:87:cd:58:92:ed:e3:
ae:db:57:16:90:0c:0f:2a:0c:8e:bc:21:09:41:15:
57:df:37:24:e3:e8:01:06:5a:12:6c:ca:3c:c8:e5:
47:a5:7a:83:41:dd:8e:39:c2:8c:28:2c:06:2f:3c:
3e:da:04:56:93:93:a8:6a:ba:43:93:6a:57:21:a1:
08:d1:fd:ba:f0:ff:39:ef:98:92:b7:2a:19:96:ba:
a1:51:b7:9c:14:e6:04:55:4c:33:b4:a7:79:7a:7e:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:C7:2D:5E:0C:E3:F8:E6:7B:3D:96:BE:49:1C:C5:2E:F6:21:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9a:a6:7d:9a:39:8d:30:c0:5b:03:ee:e8:99:e5:fd:5d:55:
b2:1a:32:92:b7:cd:6a:0e:27:4e:13:a1:bb:08:f4:53:cb:8f:
59:3b:82:46:1b:80:df:a9:44:8c:b4:cb:8f:c3:50:dc:84:08:
8f:a1:8c:cd:10:8e:27:c3:70:0f:d0:20:af:ce:a9:a1:50:00:
0c:f0:e9:bb:69:82:11:0a:16:1c:6b:5c:43:f7:7f:58:6a:80:
d5:a9:7e:0d:e5:64:22:e0:68:35:04:d5:2e:11:70:f1:86:ed:
28:74:d2:36:29:d7:f5:4c:d0:9e:c1:80:de:a1:0a:be:71:64:
7b:85:58:ee:85:e2:b8:85:b8:e8:86:3d:e6:0f:e2:21:30:05:
46:de:c5:4a:bf:85:85:96:64:57:51:e6:cd:ea:9e:90:6f:c0:
79:15:45:53:a5:6f:8b:ed:6e:06:13:32:51:a2:27:84:87:b1:
74:bb:ec:6d:3f:a8:db:f5:7d:4b:8e:30:e7:6c:78:21:53:7a:
36:25:5d:f5:24:10:fd:6a:50:c1:92:09:7a:79:4c:34:d1:95:
ed:9c:d4:1f:bd:05:a4:5c:03:86:44:0f:e4:a5:01:29:cd:63:
fc:c8:1f:4d:76:74:37:bb:aa:e5:da:e9:90:3a:9c:69:e1:ea:
8b:97:14:7e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUAwGJQTVuY9O9rwAOG6VP7FcryTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjExMTU5NDVaFw0yNzA3MjAxMjA0NDVaMDMxMTAvBgNV
BAMTKERGRjVDNzJENUUwQ0UzRjhFNjdCM0Q5NkJFNDkxQ0M1MkVGNjIxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/IXQauqgflOlD6bUp0aIagBc
iB2ZHnzApvBFfCDwlmG82wEwwfFRhpPgrv7KiQmpTaH08kExsums9raw6h1i0Uz2
Wre46kuRP+PZCykW4pk3E27xPHjkEYEiB/bgJg6ahgdrBfIatNRcjJdSVuQJNkLQ
ZkyF/9rdLmwyCdhyqJrPh4pwaMevfj2eeN+JNah1TfBCveV6sgWrMoDrUYfNWJLt
467bVxaQDA8qDI68IQlBFVffNyTj6AEGWhJsyjzI5UeleoNB3Y45wowoLAYvPD7a
BFaTk6hqukOTalchoQjR/brw/znvmJK3KhmWuqFRt5wU5gRVTDO0p3l6fv19AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU3/XHLV4M4/jmez2WvkkcxS72IQkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
0DANBgkqhkiG9w0BAQsFAAOCAQEAT5qmfZo5jTDAWwPu6Jnl/V1VshoykrfNag4n
ThOhuwj0U8uPWTuCRhuA36lEjLTLj8NQ3IQIj6GMzRCOJ8NwD9Agr86poVAADPDp
u2mCEQoWHGtcQ/d/WGqA1al+DeVkIuBoNQTVLhFw8YbtKHTSNinX9UzQnsGA3qEK
vnFke4VY7oXiuIW46IY95g/iITAFRt7FSr+FhZZkV1HmzeqekG/AeRVFU6Vvi+1u
BhMyUaInhIexdLvsbT+o2/V9S44w52x4IVN6NiVd9SQQ/WpQwZIJenlMNNGV7ZzU
H70FpFwDhkQP5KUBKc1j/MgfTXZ0N7uq5drpkDqcaeHqi5cUfg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:45 2026 by rpki-client