Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133392e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231362e3133392e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: FhrAcDQ8049l9jqJ0ttvKOWMCsSEP2GF5+FOzBeqXOg=
Subject key identifier: 8F:41:60:A5:16:A0:73:3C:52:CA:02:74:BB:E9:51:57:E5:0A:3E:42
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5300F444AFB524C07B50CE8D78573A72F9CB7AD6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133392e302f32342d3234203d3e20323138393131.roa
Signing time: Tue 29 Sep 2026 07:29:21 +0000
ROA not before: Tue 29 Sep 2026 07:24:21 +0000
ROA not after: Tue 28 Sep 2027 07:29:21 +0000
asID: 218911
IP address blocks: 217.216.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:00:f4:44:af:b5:24:c0:7b:50:ce:8d:78:57:3a:72:f9:cb:7a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:21 2026 GMT
Not After : Sep 28 07:29:21 2027 GMT
Subject: CN=8F4160A516A0733C52CA0274BBE95157E50A3E42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:a7:e8:1f:ae:ac:68:f4:33:81:db:28:b6:
80:c5:08:0c:fa:40:94:2f:f6:d4:d6:21:7b:e3:05:
40:09:f2:e7:e9:60:b0:fd:46:14:65:c6:42:63:77:
ad:d2:04:31:d8:69:74:d0:2f:40:f7:24:e6:c1:b9:
4d:cc:37:03:04:a3:a5:9c:6f:80:6a:41:7e:37:e1:
93:cf:ea:7d:52:b0:76:0f:3b:35:43:08:a6:e8:00:
66:92:29:f7:bf:ea:f3:ec:9d:fe:70:ed:ac:d8:1f:
6b:06:ee:f0:25:45:f5:19:e0:53:b8:09:37:dc:11:
dd:65:0e:af:61:c1:c9:fc:ed:02:9f:a0:f1:25:0a:
d5:02:13:e4:1f:5e:2f:07:8b:fe:1f:02:e5:2b:2e:
af:25:6b:06:ab:8d:28:9a:38:b7:ad:17:fb:91:20:
6e:1c:da:3b:06:b1:72:5a:8a:1f:b8:6f:66:c3:c1:
e6:9d:70:ef:12:74:bd:b7:1e:a4:6c:ae:51:fd:1d:
32:f7:9b:82:75:e5:3d:b7:fb:6c:69:db:7e:4a:b6:
46:81:90:d9:e8:68:59:e4:10:2e:42:f7:b4:ee:df:
29:1f:80:5b:dc:30:1d:ea:51:83:53:e0:a9:61:d4:
c0:9a:4d:b4:b0:1c:1d:78:da:cd:78:8e:d8:56:da:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:60:A5:16:A0:73:3C:52:CA:02:74:BB:E9:51:57:E5:0A:3E:42
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3133392e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:93:3e:18:d1:6e:44:3b:08:7a:d8:36:b1:03:4b:bc:3e:f6:
0a:3c:ed:a3:5c:67:04:eb:b4:48:4f:a9:a4:10:51:8b:3e:63:
91:cf:25:b9:85:6f:51:78:91:e0:be:aa:d8:f4:ba:6e:1f:8e:
96:aa:23:fb:e2:72:b2:4f:d8:24:47:cf:25:b2:36:a7:5e:ad:
32:36:03:a5:40:2a:06:3e:dc:ae:51:e7:fd:77:12:39:d4:52:
6d:63:0a:1e:70:0a:3a:a7:f0:be:22:44:85:84:3b:c2:9d:d4:
c1:90:69:a8:fa:4d:3b:22:00:b5:f4:af:0a:e0:f7:93:65:08:
d9:0b:7e:47:49:2a:67:19:fe:5a:82:03:78:19:54:9d:df:b1:
8d:40:af:43:a2:fd:cf:3a:65:ba:2e:bc:8b:57:fb:70:39:68:
d3:87:92:4a:ea:67:4e:5c:9e:21:86:71:bc:1d:20:3b:aa:47:
c9:06:c1:50:98:62:cb:ef:9c:10:2f:e3:75:6a:79:85:91:58:
a5:4c:aa:45:7f:19:b3:6b:a4:f8:1c:03:45:87:c5:c4:d9:66:
65:84:44:59:77:37:8b:4e:c2:a2:31:64:57:51:a0:2a:a5:65:
48:aa:d5:7e:a8:85:8b:eb:16:a0:4b:6b:13:ce:68:04:b2:e1:
6f:1f:3c:b7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUUwD0RK+1JMB7UM6NeFc6cvnLetYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjkwNzI0MjFaFw0yNzA5MjgwNzI5MjFaMDMxMTAvBgNV
BAMTKDhGNDE2MEE1MTZBMDczM0M1MkNBMDI3NEJCRTk1MTU3RTUwQTNFNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVEafoH66saPQzgdsotoDFCAz6
QJQv9tTWIXvjBUAJ8ufpYLD9RhRlxkJjd63SBDHYaXTQL0D3JObBuU3MNwMEo6Wc
b4BqQX434ZPP6n1SsHYPOzVDCKboAGaSKfe/6vPsnf5w7azYH2sG7vAlRfUZ4FO4
CTfcEd1lDq9hwcn87QKfoPElCtUCE+QfXi8Hi/4fAuUrLq8lawarjSiaOLetF/uR
IG4c2jsGsXJaih+4b2bDweadcO8SdL23HqRsrlH9HTL3m4J15T23+2xp235KtkaB
kNnoaFnkEC5C97Tu3ykfgFvcMB3qUYNT4Klh1MCaTbSwHB142s14jthW2n5TAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUj0FgpRagczxSygJ0u+lRV+UKPkIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM5MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYizANBgkqhkiG9w0BAQsFAAOCAQEAe5M+GNFuRDsIetg2sQNLvD72Cjzt
o1xnBOu0SE+ppBBRiz5jkc8luYVvUXiR4L6q2PS6bh+Olqoj++Jysk/YJEfPJbI2
p16tMjYDpUAqBj7crlHn/XcSOdRSbWMKHnAKOqfwviJEhYQ7wp3UwZBpqPpNOyIA
tfSvCuD3k2UI2Qt+R0kqZxn+WoIDeBlUnd+xjUCvQ6L9zzplui68i1f7cDlo04eS
SupnTlyeIYZxvB0gO6pHyQbBUJhiy++cEC/jdWp5hZFYpUyqRX8Zs2uk+BwDRYfF
xNlmZYREWXc3i07CojFkV1GgKqVlSKrVfqiFi+sWoEtrE85oBLLhbx88tw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:29:17 2026 by rpki-client