Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: zLBPrVsH1SwGDmBCyaCgc41DG8dplgT/A2KTH12QMmU=
Subject key identifier: 61:AF:AC:B0:B3:ED:D7:FC:F7:7D:53:DA:9B:F7:40:D3:A3:D5:A9:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33486C093507C1141E5207662484C305F55776D6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 10 Sep 2026 13:28:49 +0000
ROA not before: Thu 10 Sep 2026 13:23:49 +0000
ROA not after: Thu 09 Sep 2027 13:28:49 +0000
asID: 136787
IP address blocks: 217.216.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:48:6c:09:35:07:c1:14:1e:52:07:66:24:84:c3:05:f5:57:76:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:23:49 2026 GMT
Not After : Sep 9 13:28:49 2027 GMT
Subject: CN=61AFACB0B3EDD7FCF77D53DA9BF740D3A3D5A9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:ea:21:df:94:ea:c9:ef:04:68:8c:1c:34:
11:3e:4a:ec:92:6c:ca:a3:f8:72:df:06:f9:ad:a9:
25:43:81:a4:25:ce:a6:83:16:66:a6:ea:05:a1:53:
33:40:8d:8b:9b:16:d0:80:67:4d:52:85:b1:b2:c2:
cc:23:11:3c:94:56:b2:ee:92:75:e9:9f:7a:65:9b:
b7:d2:be:bf:c2:0c:75:02:ff:9f:c1:dd:1f:e6:01:
2d:8c:83:ae:af:f4:7c:52:9e:c0:c6:81:92:f9:d6:
4b:35:74:d8:7d:df:45:e8:7f:73:17:03:ee:d9:28:
1f:dc:be:3d:2a:42:2c:0c:24:0a:a5:4b:98:ee:34:
86:58:25:39:3c:77:72:10:7b:d7:db:d3:22:16:07:
eb:6a:27:f9:b8:6c:87:d7:65:45:ac:48:50:fe:4a:
f9:1c:04:b1:a4:9a:47:ac:1c:85:6f:05:5a:9b:af:
84:e9:18:0f:10:24:68:7c:43:18:ba:df:2b:5a:fe:
ba:5a:84:11:8c:f6:c6:e8:3a:60:9b:60:27:2d:b1:
d9:27:d1:7a:30:c0:ee:60:ef:2c:22:68:4c:08:e1:
83:b4:ab:a4:95:12:35:5e:62:34:90:cb:31:78:04:
bd:73:75:9c:a3:16:6c:c5:fd:5d:f6:5c:ec:78:97:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:AC:B0:B3:ED:D7:FC:F7:7D:53:DA:9B:F7:40:D3:A3:D5:A9:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.115.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ca:03:10:09:2e:10:0f:02:51:b6:6b:b5:e0:4e:7c:e3:ac:
f4:3a:79:4d:53:13:5f:6b:c6:1d:7b:9b:cb:18:dd:75:c2:9f:
db:de:2a:c1:03:fb:bb:47:97:fa:35:a3:f6:99:f0:c5:73:ee:
21:de:bd:dc:a2:1c:60:b7:c5:aa:f4:21:0b:3d:43:e9:f8:24:
61:4b:5e:88:4e:5a:dd:ff:c6:e5:f9:87:22:02:a6:9a:30:4c:
6d:f6:c4:9e:74:8c:b3:01:81:31:9d:26:bf:e5:20:36:76:8a:
2d:4b:9e:88:d4:dd:4d:a7:23:91:15:7c:e0:a5:a1:7d:26:ce:
cd:a4:cf:9c:50:d7:7c:1f:92:9c:37:5b:cc:0c:a6:1d:6a:5e:
c2:87:9a:06:79:e0:ef:7b:94:0d:b1:8e:0d:a4:cf:fb:25:23:
ea:cf:5c:54:e2:ca:0f:cf:f5:54:ed:49:3b:59:d1:b1:24:c9:
80:1b:36:ff:86:5a:58:5a:15:b6:c3:81:73:ef:37:54:ec:77:
19:dc:db:b3:d9:2b:f4:c9:a3:77:a2:f7:97:77:18:15:c8:f1:
78:96:ca:06:71:9f:b5:73:b0:50:e6:d1:b4:73:e8:3c:16:00:
c3:b9:4d:33:38:35:c5:84:e1:18:53:01:61:f1:ce:0e:c6:f9:
51:bd:2f:ee
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUM0hsCTUHwRQeUgdmJITDBfVXdtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMzIzNDlaFw0yNzA5MDkxMzI4NDlaMDMxMTAvBgNV
BAMTKDYxQUZBQ0IwQjNFREQ3RkNGNzdENTNEQTlCRjc0MEQzQTNENUE5Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+Ooh35Tqye8EaIwcNBE+SuyS
bMqj+HLfBvmtqSVDgaQlzqaDFmam6gWhUzNAjYubFtCAZ01ShbGywswjETyUVrLu
knXpn3plm7fSvr/CDHUC/5/B3R/mAS2Mg66v9HxSnsDGgZL51ks1dNh930Xof3MX
A+7ZKB/cvj0qQiwMJAqlS5juNIZYJTk8d3IQe9fb0yIWB+tqJ/m4bIfXZUWsSFD+
SvkcBLGkmkesHIVvBVqbr4TpGA8QJGh8Qxi63yta/rpahBGM9sboOmCbYCctsdkn
0XowwO5g7ywiaEwI4YO0q6SVEjVeYjSQyzF4BL1zdZyjFmzF/V32XOx4l8ZTAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUYa+ssLPt1/z3fVPam/dA06PVqcswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYczANBgkqhkiG9w0BAQsFAAOCAQEAQsoDEAkuEA8CUbZrteBOfOOs9Dp5
TVMTX2vGHXubyxjddcKf294qwQP7u0eX+jWj9pnwxXPuId693KIcYLfFqvQhCz1D
6fgkYUteiE5a3f/G5fmHIgKmmjBMbfbEnnSMswGBMZ0mv+UgNnaKLUueiNTdTacj
kRV84KWhfSbOzaTPnFDXfB+SnDdbzAymHWpewoeaBnng73uUDbGODaTP+yUj6s9c
VOLKD8/1VO1JO1nRsSTJgBs2/4ZaWFoVtsOBc+83VOx3Gdzbs9kr9Mmjd6L3l3cY
FcjxeJbKBnGftXOwUObRtHPoPBYAw7lNMzg1xYThGFMBYfHODsb5Ub0v7g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:24:41 2026 by rpki-client