Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132382e302f32342d3234203d3e203136323736.roa
File: 3231372e3231362e3132382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: k6BH4ON4kDiDpWwP1S7/jYQCjyNOz/xe8HXRAh9sFso=
Subject key identifier: 2C:E8:59:36:5A:7A:78:D2:0A:67:47:38:52:EF:ED:78:EC:42:12:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12C6F73F3B568CAA5039A6CD3DD9DD63FEC4845F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132382e302f32342d3234203d3e203136323736.roa
Signing time: Tue 29 Sep 2026 07:29:05 +0000
ROA not before: Tue 29 Sep 2026 07:24:05 +0000
ROA not after: Tue 28 Sep 2027 07:29:05 +0000
asID: 16276
IP address blocks: 217.216.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c6:f7:3f:3b:56:8c:aa:50:39:a6:cd:3d:d9:dd:63:fe:c4:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:05 2026 GMT
Not After : Sep 28 07:29:05 2027 GMT
Subject: CN=2CE859365A7A78D20A67473852EFED78EC42125D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:69:e8:9a:e3:10:7d:30:8a:93:b1:e8:bb:
59:bc:6f:c0:c2:6c:96:3d:6f:56:64:98:e3:06:bd:
fc:de:7a:df:d0:3a:79:cb:2c:82:48:5e:02:0a:2f:
fa:49:a5:86:7a:07:75:13:c5:fd:26:e7:06:49:23:
ec:95:d5:19:4c:7c:5f:4e:ac:16:91:72:6e:a3:d3:
d8:d8:c4:59:c9:94:52:34:09:0f:31:9b:4c:c4:1e:
92:79:2a:78:af:72:ff:1c:f8:3c:30:00:24:6c:60:
39:63:48:5a:a9:9d:cc:59:65:67:e4:f3:66:89:b2:
77:1a:73:79:81:70:e2:92:24:f4:63:70:7c:19:13:
9f:d0:91:87:08:ea:eb:3d:69:67:91:b8:db:c1:d8:
ed:9d:34:84:4e:3e:41:f5:36:d8:4b:cc:e3:b9:f3:
6d:c8:9f:bc:72:ed:97:e8:b6:9e:01:11:10:25:5e:
b3:5b:1e:2b:54:10:eb:6a:06:a8:d9:a1:02:e8:81:
62:f0:8b:c1:63:08:5c:dd:63:fd:56:7b:13:36:57:
df:7e:01:02:39:5c:6c:1c:92:30:18:42:dc:70:1c:
d7:0a:ff:e4:f5:54:71:b5:0f:49:2c:93:dc:cd:00:
68:1d:49:9c:b7:ad:1c:d0:d1:50:f9:d8:b1:e7:62:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:59:36:5A:7A:78:D2:0A:67:47:38:52:EF:ED:78:EC:42:12:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3132382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2e:30:6c:d9:e3:88:21:58:ff:0a:c7:7c:ba:54:04:42:3a:
bc:a0:40:d7:2d:b9:fc:64:e5:70:80:ea:71:56:21:fc:1f:f3:
be:61:f3:7e:77:84:aa:fd:fb:a6:7b:9a:8b:a0:22:93:ad:a8:
c6:69:c6:1d:e2:2a:c9:7a:cd:0b:2f:20:47:19:f9:c7:9f:6e:
06:35:26:eb:c6:2e:29:57:34:cb:2e:da:21:24:d3:d9:8b:de:
73:3c:7b:e0:55:52:79:c9:64:b8:d9:3d:52:8b:5a:5e:c4:95:
ef:ea:4b:22:79:0e:e4:ac:5c:93:c8:0b:46:82:6e:05:51:3e:
a7:9d:64:82:59:3c:bd:96:66:d6:46:de:89:50:e2:42:98:59:
1d:85:f9:82:57:20:e2:7b:c3:77:2a:a2:36:7f:d7:3a:ab:cb:
a6:4c:5e:cf:49:4c:3e:3c:1c:22:b7:6a:3f:a1:a5:d1:5f:e1:
c4:0c:34:09:ed:d2:64:69:33:3f:5f:2e:df:3c:6c:01:62:61:
af:18:7c:f3:1c:da:16:5d:d6:32:fc:d0:e5:c7:29:b1:3f:df:
1d:be:41:9a:88:d8:44:12:3b:6d:cd:b5:a6:1f:61:e8:97:83:
2e:c6:21:86:0b:08:20:9c:0e:6f:eb:a7:ef:2d:a0:b7:7d:31:
a2:0f:6e:0a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEsb3PztWjKpQOabNPdndY/7EhF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjkwNzI0MDVaFw0yNzA5MjgwNzI5MDVaMDMxMTAvBgNV
BAMTKDJDRTg1OTM2NUE3QTc4RDIwQTY3NDczODUyRUZFRDc4RUM0MjEyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMpGnomuMQfTCKk7Hou1m8b8DC
bJY9b1ZkmOMGvfzeet/QOnnLLIJIXgIKL/pJpYZ6B3UTxf0m5wZJI+yV1RlMfF9O
rBaRcm6j09jYxFnJlFI0CQ8xm0zEHpJ5Knivcv8c+DwwACRsYDljSFqpncxZZWfk
82aJsncac3mBcOKSJPRjcHwZE5/QkYcI6us9aWeRuNvB2O2dNIROPkH1NthLzOO5
823In7xy7Zfotp4BERAlXrNbHitUEOtqBqjZoQLogWLwi8FjCFzdY/1WexM2V99+
AQI5XGwckjAYQtxwHNcK/+T1VHG1D0ksk9zNAGgdSZy3rRzQ0VD52LHnYs5rAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQULOhZNlp6eNIKZ0c4Uu/teOxCEl0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2IAwDQYJKoZIhvcNAQELBQADggEBAA0uMGzZ44ghWP8Kx3y6VARCOrygQNct
ufxk5XCA6nFWIfwf875h8353hKr9+6Z7mougIpOtqMZpxh3iKsl6zQsvIEcZ+cef
bgY1JuvGLilXNMsu2iEk09mL3nM8e+BVUnnJZLjZPVKLWl7Ele/qSyJ5DuSsXJPI
C0aCbgVRPqedZIJZPL2WZtZG3olQ4kKYWR2F+YJXIOJ7w3cqojZ/1zqry6ZMXs9J
TD48HCK3aj+hpdFf4cQMNAnt0mRpMz9fLt88bAFiYa8YfPMc2hZd1jL80OXHKbE/
3x2+QZqI2EQSO23NtaYfYeiXgy7GIYYLCCCcDm/rp+8toLd9MaIPbgo=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:20 2026 by rpki-client