Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133332e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: sX9R4IASCggVQoEsiT6EYs4SB/brBLCHiPB/XVZjbU8=
Subject key identifier: ED:AA:B0:E1:79:0B:5E:10:37:B3:C2:B6:C8:EE:E2:4E:8C:03:DB:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 07607B04916DFD900A399D98F7F50F6B311C1CB5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138393131.roa
Signing time: Tue 29 Sep 2026 20:30:32 +0000
ROA not before: Tue 29 Sep 2026 20:25:32 +0000
ROA not after: Tue 28 Sep 2027 20:30:32 +0000
asID: 218911
IP address blocks: 217.216.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:60:7b:04:91:6d:fd:90:0a:39:9d:98:f7:f5:0f:6b:31:1c:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 20:25:32 2026 GMT
Not After : Sep 28 20:30:32 2027 GMT
Subject: CN=EDAAB0E1790B5E1037B3C2B6C8EEE24E8C03DB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:b1:f4:fb:ba:4b:66:25:fe:b5:9e:8f:42:
bb:a5:59:4a:b0:58:f6:54:e6:7e:a9:4e:46:5f:5d:
c7:cf:34:80:6e:a4:24:be:62:db:56:8d:63:a9:bc:
56:99:ca:c6:83:3b:b6:1d:3f:d4:58:31:f4:62:94:
17:93:aa:50:e0:9d:c4:49:1b:49:2a:6a:34:55:6b:
36:e6:45:f0:60:8b:f6:5e:d0:78:08:0d:7e:55:b3:
46:10:48:17:78:62:a0:ff:bf:51:51:2b:61:aa:4f:
58:39:02:92:f2:f9:65:18:75:e0:02:a0:3c:07:1c:
b0:7a:c9:4b:f1:67:eb:04:d0:c4:48:17:82:81:89:
11:80:be:40:86:c2:49:94:c7:84:97:c1:fa:4f:8f:
a5:9c:9c:6b:42:f4:a2:2a:a3:82:c5:fb:8a:0d:93:
7a:4d:02:6a:22:3f:50:34:94:0b:06:fe:cc:1b:1f:
a1:b3:5b:a5:f9:32:8e:6b:21:e4:8b:cd:fc:e5:f1:
d6:d9:a5:f3:8b:f3:ca:c1:1c:b5:b4:4f:17:f4:25:
79:da:9a:da:c9:34:ea:10:96:8a:03:12:68:75:e9:
61:83:22:99:d0:b7:c0:d8:e9:d8:af:8c:82:a5:34:
ff:41:9a:d6:b5:15:cb:63:de:33:28:2f:28:f6:b2:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:B0:E1:79:0B:5E:10:37:B3:C2:B6:C8:EE:E2:4E:8C:03:DB:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133332e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.133.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5a:93:e4:d8:20:69:31:0f:a5:a4:a9:fe:ec:6c:81:31:68:
80:c3:9e:f8:e0:a1:fb:35:52:8a:e9:a1:59:1b:31:62:3c:1d:
b3:07:35:a8:04:e7:98:5a:8d:97:fd:bf:28:e6:aa:54:4c:b7:
4e:90:89:be:8f:8f:e9:a3:f6:39:ec:a7:2b:6a:97:2e:a4:d5:
43:f8:8e:5f:9f:02:33:58:88:c2:35:dc:e7:91:b2:ea:b7:6e:
2b:a3:7d:67:bf:b0:5c:df:b6:fc:27:c7:67:4f:82:64:50:cb:
22:2b:07:6d:80:b4:6c:02:6a:f4:74:f9:41:0c:78:72:70:cd:
bf:70:0a:c1:74:ed:f1:72:14:d9:74:05:f2:f6:f6:0e:81:c4:
d7:e6:43:a0:c0:d3:a5:9f:f5:aa:fa:7a:97:39:1b:86:11:1d:
64:73:c2:c1:f1:2b:65:d3:e5:81:c0:a6:8c:65:6d:86:45:ea:
20:3b:3e:bc:40:c5:6f:98:fe:fe:e4:6e:c2:95:e1:e7:4a:4f:
6e:49:67:d3:0d:a7:9d:e6:bd:ce:d9:a6:b0:90:ab:cb:4f:1d:
e3:0e:ce:8f:fa:38:21:3f:f1:2b:27:14:fb:7b:b7:16:c1:4a:
b0:60:8e:2c:13:3e:3f:68:22:23:e0:2a:75:af:f9:d0:c6:96:
40:ba:fe:12
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUB2B7BJFt/ZAKOZ2Y9/UPazEcHLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjkyMDI1MzJaFw0yNzA5MjgyMDMwMzJaMDMxMTAvBgNV
BAMTKEVEQUFCMEUxNzkwQjVFMTAzN0IzQzJCNkM4RUVFMjRFOEMwM0RCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8t7H0+7pLZiX+tZ6PQrulWUqw
WPZU5n6pTkZfXcfPNIBupCS+YttWjWOpvFaZysaDO7YdP9RYMfRilBeTqlDgncRJ
G0kqajRVazbmRfBgi/Ze0HgIDX5Vs0YQSBd4YqD/v1FRK2GqT1g5ApLy+WUYdeAC
oDwHHLB6yUvxZ+sE0MRIF4KBiRGAvkCGwkmUx4SXwfpPj6WcnGtC9KIqo4LF+4oN
k3pNAmoiP1A0lAsG/swbH6GzW6X5Mo5rIeSLzfzl8dbZpfOL88rBHLW0Txf0JXna
mtrJNOoQlooDEmh16WGDIpnQt8DY6divjIKlNP9Bmta1Fctj3jMoLyj2suOVAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU7aqw4XkLXhA3s8K2yO7iTowD2z0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM5MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYhTANBgkqhkiG9w0BAQsFAAOCAQEAJVqT5NggaTEPpaSp/uxsgTFogMOe
+OCh+zVSiumhWRsxYjwdswc1qATnmFqNl/2/KOaqVEy3TpCJvo+P6aP2OeynK2qX
LqTVQ/iOX58CM1iIwjXc55Gy6rduK6N9Z7+wXN+2/CfHZ0+CZFDLIisHbYC0bAJq
9HT5QQx4cnDNv3AKwXTt8XIU2XQF8vb2DoHE1+ZDoMDTpZ/1qvp6lzkbhhEdZHPC
wfErZdPlgcCmjGVthkXqIDs+vEDFb5j+/uRuwpXh50pPbkln0w2nnea9ztmmsJCr
y08d4w7Oj/o4IT/xKycU+3u3FsFKsGCOLBM+P2giI+Aqda/50MaWQLr+Eg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:48:59 2026 by rpki-client