Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232312e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3232312e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: 3eXpCnDXiVso4ETT+EBtbiLhqaZNYNiBmUSi7IenAGk=
Subject key identifier: 1E:AA:5C:5C:75:D6:5D:DF:EA:5B:C2:D8:97:1B:42:07:DD:3D:F1:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A51A68106FC7760ED944F445594BF8D945C16BD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232312e302f32342d3234203d3e2033323537.roa
Signing time: Thu 06 Aug 2026 07:27:41 +0000
ROA not before: Thu 06 Aug 2026 07:22:41 +0000
ROA not after: Thu 05 Aug 2027 07:27:41 +0000
asID: 3257
IP address blocks: 217.217.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:51:a6:81:06:fc:77:60:ed:94:4f:44:55:94:bf:8d:94:5c:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 07:22:41 2026 GMT
Not After : Aug 5 07:27:41 2027 GMT
Subject: CN=1EAA5C5C75D65DDFEA5BC2D8971B4207DD3DF1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:a2:6c:10:a8:ce:e8:ea:05:01:e2:2b:7f:
4b:fc:d9:37:a9:b5:8f:b6:eb:ae:0e:d7:6a:d4:4e:
1f:d7:ed:dc:ae:82:08:ec:61:14:96:b5:9a:24:74:
83:c6:f5:a5:d2:91:56:7c:10:2d:b8:10:bd:54:e7:
9c:3a:b1:d6:a2:e7:2f:69:b7:c5:5b:48:da:0e:7e:
ed:1c:ce:f4:81:28:6f:9d:70:76:21:e2:35:53:90:
71:ca:31:a0:29:e2:7e:e8:1a:c3:c3:1a:69:72:ac:
0b:d5:b8:0d:e7:da:1e:f3:24:29:ce:69:7f:60:8e:
d1:9a:9b:d5:13:f2:2a:02:52:9c:70:8c:0b:b6:0d:
da:b9:08:aa:83:59:95:50:f3:ed:52:b1:2a:dc:84:
b0:6c:71:5c:b0:04:10:b9:17:e1:1c:dd:e6:fc:bf:
c9:a1:05:d7:2e:dd:dd:c1:92:a2:23:f7:29:19:cd:
a9:eb:63:c3:fd:27:9b:42:65:4c:19:1f:f7:2a:02:
0c:62:39:d3:b3:1f:68:54:80:36:fa:0d:e1:94:c0:
b7:1e:49:54:1b:a9:30:fd:36:51:da:02:c7:8a:16:
d3:22:70:85:ca:0d:62:d5:a0:a3:92:88:53:95:ee:
fb:cc:d2:c0:7f:cf:52:b6:2f:b7:00:54:ad:ca:2b:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:5C:5C:75:D6:5D:DF:EA:5B:C2:D8:97:1B:42:07:DD:3D:F1:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232312e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.221.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a0:84:ae:44:e7:82:51:3c:bc:06:80:ca:86:1f:fc:bb:83:
07:2c:c6:b1:55:24:4e:a7:90:4c:e7:46:af:08:30:75:7e:70:
2f:08:76:ec:a1:05:2e:12:96:01:59:15:d3:a6:42:2f:e3:fa:
9b:e8:6b:5c:58:78:0b:2d:4e:69:c1:5d:8c:eb:50:ff:d5:da:
bc:4b:63:1e:a8:01:91:bb:c2:21:b6:b4:ea:ad:f8:21:9e:e3:
4a:8a:3b:85:a0:12:dd:2a:d3:40:1b:0b:fb:de:e3:94:16:ea:
8a:61:0a:f0:eb:ad:e1:36:c3:18:b2:1e:e7:ce:fd:1c:e1:13:
dc:ff:74:4d:bc:06:8d:10:a7:29:12:34:28:73:e6:15:41:f0:
2d:0f:aa:dc:02:e0:7a:78:15:37:e7:2b:4e:d0:34:d9:1d:a3:
21:54:c3:43:39:7a:33:f4:c8:c9:4e:fc:c9:18:1f:7b:6a:20:
72:69:d4:88:c8:68:14:16:a9:46:7b:c1:80:96:09:4d:08:a7:
0d:6c:5a:16:12:0f:6b:6b:53:64:a4:cb:d2:c8:11:2f:9f:fb:
cc:18:e1:9a:5b:0d:97:41:68:11:8f:32:c1:ea:94:c3:b2:55:
6d:77:5e:ec:1b:54:a6:33:a6:d9:b6:da:01:a1:fa:4d:fc:d7:
fe:df:e8:3a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUalGmgQb8d2DtlE9EVZS/jZRcFr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDYwNzIyNDFaFw0yNzA4MDUwNzI3NDFaMDMxMTAvBgNV
BAMTKDFFQUE1QzVDNzVENjVEREZFQTVCQzJEODk3MUI0MjA3REQzREYxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkqJsEKjO6OoFAeIrf0v82Tep
tY+2664O12rUTh/X7dyuggjsYRSWtZokdIPG9aXSkVZ8EC24EL1U55w6sdai5y9p
t8VbSNoOfu0czvSBKG+dcHYh4jVTkHHKMaAp4n7oGsPDGmlyrAvVuA3n2h7zJCnO
aX9gjtGam9UT8ioCUpxwjAu2Ddq5CKqDWZVQ8+1SsSrchLBscVywBBC5F+Ec3eb8
v8mhBdcu3d3BkqIj9ykZzanrY8P9J5tCZUwZH/cqAgxiOdOzH2hUgDb6DeGUwLce
SVQbqTD9NlHaAseKFtMicIXKDWLVoKOSiFOV7vvM0sB/z1K2L7cAVK3KK/UPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUHqpcXHXWXd/qW8LYlxtCB9098fswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dndMA0GCSqGSIb3DQEBCwUAA4IBAQCeoISuROeCUTy8BoDKhh/8u4MHLMaxVSRO
p5BM50avCDB1fnAvCHbsoQUuEpYBWRXTpkIv4/qb6GtcWHgLLU5pwV2M61D/1dq8
S2MeqAGRu8IhtrTqrfghnuNKijuFoBLdKtNAGwv73uOUFuqKYQrw663hNsMYsh7n
zv0c4RPc/3RNvAaNEKcpEjQoc+YVQfAtD6rcAuB6eBU35ytO0DTZHaMhVMNDOXoz
9MjJTvzJGB97aiByadSIyGgUFqlGe8GAlglNCKcNbFoWEg9ra1NkpMvSyBEvn/vM
GOGaWw2XQWgRjzLB6pTDslVtd17sG1SmM6bZttoBofpN/Nf+3+g6
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:16:41 2026 by rpki-client