Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131322e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 98lhT8Cqm1/Bd757Lflx61jhm0Cqeajx0AvmE1SNusg=
Subject key identifier: AF:6F:DB:BA:8A:31:9B:CD:AE:4F:04:76:B5:06:3D:78:C1:48:58:65
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 733A1F7C9B5A2D4E0592680D54F26C12189DC40C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:48 +0000
ROA not before: Thu 10 Sep 2026 13:23:48 +0000
ROA not after: Thu 09 Sep 2027 13:28:48 +0000
asID: 136787
IP address blocks: 217.216.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3a:1f:7c:9b:5a:2d:4e:05:92:68:0d:54:f2:6c:12:18:9d:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:48 2026 GMT
Not After : Sep 9 13:28:48 2027 GMT
Subject: CN=AF6FDBBA8A319BCDAE4F0476B5063D78C1485865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:ff:02:33:da:fa:7d:b1:11:3d:ec:2c:23:
b8:be:3d:86:4d:3e:8d:95:54:be:0a:dc:92:61:c4:
1d:3f:4b:b4:6a:20:82:b8:ea:cc:03:63:53:46:83:
1d:af:f3:c1:67:d8:fe:45:4f:39:32:20:0c:5e:60:
b8:df:8e:55:f5:5a:7a:ca:d6:0e:26:97:99:6d:d3:
0a:62:cf:d1:17:ed:17:a0:ca:e6:0e:94:b7:4e:33:
44:7d:a9:90:7f:c7:e6:a4:04:92:a7:bb:dc:d6:10:
61:06:6d:22:29:af:67:df:04:a1:f0:bd:04:d4:01:
df:3c:37:36:e0:37:d1:05:00:c9:7a:1d:d3:ba:0e:
1c:ec:c1:73:83:f7:6e:d9:33:64:fe:32:56:3a:9c:
15:9c:4c:3d:0f:e2:43:df:34:44:fa:11:fd:6f:d0:
70:6c:5f:c4:f6:91:ea:ea:68:96:9c:10:9f:7a:b2:
37:d2:a9:42:10:de:7e:e9:27:c0:ad:f9:6c:38:de:
89:15:7a:46:46:82:7a:66:be:16:91:cb:47:a7:19:
e9:08:25:c6:ea:17:87:be:a4:94:a0:5f:1b:1e:43:
21:86:c6:ff:b5:c4:de:76:13:8e:ef:ea:57:41:82:
90:46:b4:a8:1e:e7:5f:0c:04:21:25:8a:94:a0:39:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:DB:BA:8A:31:9B:CD:AE:4F:04:76:B5:06:3D:78:C1:48:58:65
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.112.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6d:f7:34:87:c3:9d:78:68:dd:f6:ed:5a:dd:be:fb:7c:4c:
31:a0:d8:c6:82:73:d3:3b:a0:c2:af:6b:78:d7:09:e6:e3:2f:
e7:d8:f5:45:67:38:6e:92:e6:38:22:af:1e:ea:b8:f3:6a:2e:
8b:d2:94:65:8e:23:ce:6d:50:47:74:da:fa:df:c1:0a:1d:f7:
3a:08:8e:dd:3f:ed:75:02:40:c4:cb:c6:37:9c:02:9b:aa:36:
a2:af:47:8a:0c:65:95:00:82:27:6f:80:e0:c5:4f:26:1c:c4:
64:af:aa:64:3a:f6:b2:8f:86:cb:27:fd:03:c1:f4:8f:15:86:
e1:de:1a:ba:49:53:e2:75:54:90:e3:69:72:fb:e9:a5:2d:fc:
22:53:d9:aa:44:4d:dd:8f:c1:bb:94:dc:54:18:f2:29:b9:63:
ab:1e:8b:a7:59:98:cd:82:00:ed:58:a9:c3:75:44:77:b7:81:
37:3a:c4:5f:01:06:36:7e:9a:2e:71:95:61:9a:21:3e:6e:1b:
9a:65:7d:95:48:ed:f1:70:90:9b:16:a5:08:4b:3b:fe:c8:11:
86:d9:91:14:d8:10:61:b7:cf:18:79:92:c4:47:17:d8:c1:16:
23:25:be:05:33:4a:73:d2:0f:95:d1:b2:b3:a6:9f:23:5b:bf:
85:8d:f0:70
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUczoffJtaLU4FkmgNVPJsEhidxAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMzIzNDhaFw0yNzA5MDkxMzI4NDhaMDMxMTAvBgNV
BAMTKEFGNkZEQkJBOEEzMTlCQ0RBRTRGMDQ3NkI1MDYzRDc4QzE0ODU4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSf8CM9r6fbERPewsI7i+PYZN
Po2VVL4K3JJhxB0/S7RqIIK46swDY1NGgx2v88Fn2P5FTzkyIAxeYLjfjlX1WnrK
1g4ml5lt0wpiz9EX7RegyuYOlLdOM0R9qZB/x+akBJKnu9zWEGEGbSIpr2ffBKHw
vQTUAd88NzbgN9EFAMl6HdO6DhzswXOD927ZM2T+MlY6nBWcTD0P4kPfNET6Ef1v
0HBsX8T2kerqaJacEJ96sjfSqUIQ3n7pJ8Ct+Ww43okVekZGgnpmvhaRy0enGekI
JcbqF4e+pJSgXxseQyGGxv+1xN52E47v6ldBgpBGtKge518MBCElipSgOfY5AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUr2/buooxm82uTwR2tQY9eMFIWGUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYcDANBgkqhkiG9w0BAQsFAAOCAQEAN233NIfDnXho3fbtWt2++3xMMaDY
xoJz0zugwq9reNcJ5uMv59j1RWc4bpLmOCKvHuq482oui9KUZY4jzm1QR3Ta+t/B
Ch33OgiO3T/tdQJAxMvGN5wCm6o2oq9HigxllQCCJ2+A4MVPJhzEZK+qZDr2so+G
yyf9A8H0jxWG4d4auklT4nVUkONpcvvppS38IlPZqkRN3Y/Bu5TcVBjyKbljqx6L
p1mYzYIA7Vipw3VEd7eBNzrEXwEGNn6aLnGVYZohPm4bmmV9lUjt8XCQmxalCEs7
/sgRhtmRFNgQYbfPGHmSxEcX2MEWIyW+BTNKc9IPldGys6afI1u/hY3wcA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:24:51 2026 by rpki-client