Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e203438323636.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: p/8x8pWXXPBkyKDBk1O/3SLKehqUpI3cAW70Q21jQuA=
Subject key identifier: CB:7A:57:FC:EA:93:A8:7F:34:68:DE:63:9E:25:95:35:B8:8E:DD:E3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EF0E408A3396B34CF85EACF03916F11788F5544
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e203438323636.roa
Signing time: Wed 25 Mar 2026 08:49:07 +0000
ROA not before: Wed 25 Mar 2026 08:44:07 +0000
ROA not after: Wed 24 Mar 2027 08:49:07 +0000
asID: 48266
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f0:e4:08:a3:39:6b:34:cf:85:ea:cf:03:91:6f:11:78:8f:55:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 08:44:07 2026 GMT
Not After : Mar 24 08:49:07 2027 GMT
Subject: CN=CB7A57FCEA93A87F3468DE639E259535B88EDDE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:5a:ae:ed:bb:86:e3:b5:ed:98:a1:a2:e6:
b7:b5:bb:a2:77:ed:74:e8:e9:be:87:3c:4a:22:59:
6b:5d:4c:08:a3:dd:7e:75:94:73:20:22:99:f3:ec:
37:d4:b6:36:c2:89:86:aa:d1:2a:3c:72:32:27:f0:
06:8d:7e:e7:53:5b:76:6b:e8:ba:08:60:95:b6:dd:
89:a7:5e:e7:2b:9d:8c:15:7a:ce:fd:52:97:80:b8:
a7:dc:9c:65:8d:f8:f6:3a:80:33:3c:b7:de:2f:d1:
ab:1c:7c:c6:85:38:cd:74:6d:4e:2f:de:37:5b:b4:
ab:a7:90:75:14:d0:e7:84:cb:57:85:76:c8:3e:72:
d3:af:dd:47:b7:b0:ca:86:e8:25:57:f0:df:6c:89:
2f:24:74:78:1d:82:ec:00:f6:6c:7b:b2:ae:cc:e6:
aa:96:37:95:ba:1a:da:ac:dd:51:fb:a3:2c:7d:21:
fe:b6:64:77:60:2b:38:a3:4d:77:36:1a:8e:75:56:
ed:61:81:d7:ec:40:4a:5c:6d:46:dd:f3:bf:97:13:
20:85:f0:48:af:a2:59:5d:0f:57:da:a5:08:7a:51:
68:11:6b:6d:d6:a4:76:40:be:a4:6e:38:c7:f4:e3:
75:8c:bb:45:e1:f6:1d:5e:3e:6e:16:4f:81:08:46:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7A:57:FC:EA:93:A8:7F:34:68:DE:63:9E:25:95:35:B8:8E:DD:E3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8b:e7:e4:51:74:cb:6d:da:5a:f3:3e:94:bd:aa:a2:3d:d4:
3b:84:e9:da:9e:d1:b2:fb:d8:ba:b7:cb:83:fe:69:12:b8:5f:
8e:13:34:41:b4:15:3a:29:c7:e2:b8:da:6b:2c:9d:17:9e:2e:
36:dd:2c:a4:3f:e3:28:b4:ba:e6:60:ae:58:8b:dc:01:4e:e9:
94:a0:7e:03:17:b2:e7:1b:1f:f5:a3:74:0d:ab:21:c2:d2:88:
13:94:58:44:35:e0:00:a2:e9:6f:27:73:d4:4f:22:c2:e0:b7:
7d:f8:b0:c5:68:34:99:f5:f5:d7:ef:f6:b0:bc:c2:7b:77:fb:
e1:14:10:76:d2:4e:46:36:ca:51:63:bb:73:b4:9d:2f:7d:4d:
aa:75:c5:1e:aa:97:f8:45:b4:a9:03:a3:e4:11:a6:aa:d5:bc:
3e:70:00:40:c1:8b:58:ef:35:03:ba:a4:48:85:7f:43:ae:e2:
cd:85:fd:7e:8c:4c:cd:dc:84:69:48:a7:c8:2b:68:eb:05:2e:
36:ac:4b:02:10:50:37:ed:72:0c:a4:da:48:1d:a7:ae:6d:e5:
75:fd:ad:84:c0:fc:3f:87:eb:2c:e1:96:ac:a7:b4:ab:4d:76:
15:c4:c3:a1:7d:e8:b0:55:34:c5:27:13:03:25:ed:bb:90:03:
b5:f3:54:1c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXvDkCKM5azTPherPA5FvEXiPVUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMjUwODQ0MDdaFw0yNzAzMjQwODQ5MDdaMDMxMTAvBgNV
BAMTKENCN0E1N0ZDRUE5M0E4N0YzNDY4REU2MzlFMjU5NTM1Qjg4RURERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzR1qu7buG47XtmKGi5re1u6J3
7XTo6b6HPEoiWWtdTAij3X51lHMgIpnz7DfUtjbCiYaq0So8cjIn8AaNfudTW3Zr
6LoIYJW23YmnXucrnYwVes79UpeAuKfcnGWN+PY6gDM8t94v0ascfMaFOM10bU4v
3jdbtKunkHUU0OeEy1eFdsg+ctOv3Ue3sMqG6CVX8N9siS8kdHgdguwA9mx7sq7M
5qqWN5W6Gtqs3VH7oyx9If62ZHdgKzijTXc2Go51Vu1hgdfsQEpcbUbd87+XEyCF
8EivolldD1fapQh6UWgRa23WpHZAvqRuOMf043WMu0Xh9h1ePm4WT4EIRvDNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUy3pX/OqTqH80aN5jniWVNbiO3eMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMjM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2dMwDQYJKoZIhvcNAQELBQADggEBACWL5+RRdMtt2lrzPpS9qqI91DuE6dqe
0bL72Lq3y4P+aRK4X44TNEG0FTopx+K42mssnReeLjbdLKQ/4yi0uuZgrliL3AFO
6ZSgfgMXsucbH/WjdA2rIcLSiBOUWEQ14ACi6W8nc9RPIsLgt334sMVoNJn19dfv
9rC8wnt3++EUEHbSTkY2ylFju3O0nS99Tap1xR6ql/hFtKkDo+QRpqrVvD5wAEDB
i1jvNQO6pEiFf0Ou4s2F/X6MTM3chGlIp8graOsFLjasSwIQUDftcgyk2kgdp65t
5XX9rYTA/D+H6yzhlqyntKtNdhXEw6F96LBVNMUnEwMl7buQA7XzVBw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:50 2026 by rpki-client