Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134312e302f32342d3234203d3e20323138373937.roa
File: 3231372e3231362e3134312e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: xy6xM81eHYfUdnwxSyFV++3Xnv9+mdVOS0y7Mi/Hnrc=
Subject key identifier: E7:E0:37:82:AD:A8:5A:75:65:0E:48:97:60:28:45:D9:98:46:0A:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6723CB086BB4976148877B0FCECE1E90BF57D6D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134312e302f32342d3234203d3e20323138373937.roa
Signing time: Tue 29 Sep 2026 07:29:20 +0000
ROA not before: Tue 29 Sep 2026 07:24:20 +0000
ROA not after: Tue 28 Sep 2027 07:29:20 +0000
asID: 218797
IP address blocks: 217.216.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:23:cb:08:6b:b4:97:61:48:87:7b:0f:ce:ce:1e:90:bf:57:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 07:24:20 2026 GMT
Not After : Sep 28 07:29:20 2027 GMT
Subject: CN=E7E03782ADA85A75650E4897602845D998460A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:24:d5:7d:34:cf:0e:b2:19:fd:80:63:a8:
25:54:9d:1e:b3:d6:6d:0e:33:0f:1e:e4:23:72:ef:
1d:9f:42:28:f0:db:64:f5:a4:e3:11:76:83:54:b2:
f8:e4:ec:dd:09:5d:7a:b5:19:6a:da:e3:dd:bf:7b:
f7:48:aa:62:76:2f:58:db:22:84:10:fd:c5:80:b3:
eb:a3:40:fa:b5:f9:1a:69:7a:c8:ce:3b:63:ff:b4:
e3:ab:df:e8:ce:ac:b2:a5:ca:04:ca:30:c8:2f:37:
bd:98:25:99:99:8a:04:43:26:a8:58:79:9f:07:37:
8c:66:93:af:6b:3e:c6:09:54:f7:63:a5:d3:08:75:
d7:2e:75:5a:03:5d:0c:46:81:72:3d:ef:41:ee:da:
21:5f:64:6e:de:54:af:a1:a3:28:e2:eb:8a:e9:d1:
ab:42:6e:99:67:2a:2b:15:ce:5d:3d:62:94:c3:c0:
2a:61:ce:9b:86:14:6b:a6:16:1e:3b:26:6a:2d:75:
74:40:17:bf:46:b7:fa:a0:1c:50:ea:ae:dd:f0:e0:
d0:94:61:bb:d6:de:36:31:1a:05:14:91:61:70:77:
cc:58:35:ea:f5:b8:0f:0b:3c:cd:1f:c2:32:03:4e:
de:02:9c:30:04:37:d1:cd:7f:fc:63:ed:e1:7a:52:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:37:82:AD:A8:5A:75:65:0E:48:97:60:28:45:D9:98:46:0A:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134312e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ef:a7:99:cf:cb:89:a1:34:93:6b:9a:03:67:26:83:43:22:
4b:65:f3:89:3b:39:9b:c7:67:56:b7:06:4d:06:0f:f8:8f:ef:
60:cb:e2:8f:44:73:a0:4a:04:9b:22:f2:b5:3c:db:d7:72:a9:
8d:da:93:d2:de:e5:b3:30:c8:6a:f4:48:cf:c8:80:ff:a4:1b:
d0:08:b8:c7:cc:91:0a:c8:c1:1c:51:0e:a6:4b:cd:f0:79:99:
7d:72:f0:84:be:92:65:70:d4:ff:e6:f7:ed:91:3e:7e:03:77:
62:f9:dc:d0:8d:31:54:03:18:da:16:5c:1e:46:08:c8:73:7d:
79:75:69:d3:b5:0e:73:88:e9:33:df:08:6b:f9:6f:e5:82:f9:
07:44:25:23:42:5f:a9:c6:0f:08:7d:ce:dd:a4:d0:15:1e:42:
97:93:63:ec:ed:d5:31:34:88:48:3c:ad:56:69:6c:bb:70:cb:
a4:53:f3:af:66:fe:89:92:aa:ef:f3:ef:ed:1d:d9:88:80:11:
c6:98:3e:1f:67:0d:75:7b:6b:ff:2b:03:29:06:cb:28:d3:53:
9a:be:89:9d:86:5f:ba:0f:75:bc:3f:70:c7:f1:6a:3d:74:6e:
06:68:c0:5a:2e:38:e7:6b:8b:e6:96:f1:de:6b:5b:00:6b:4d:
9a:38:c1:f1
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZyPLCGu0l2FIh3sPzs4ekL9X1tIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjkwNzI0MjBaFw0yNzA5MjgwNzI5MjBaMDMxMTAvBgNV
BAMTKEU3RTAzNzgyQURBODVBNzU2NTBFNDg5NzYwMjg0NUQ5OTg0NjBBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDiTVfTTPDrIZ/YBjqCVUnR6z
1m0OMw8e5CNy7x2fQijw22T1pOMRdoNUsvjk7N0JXXq1GWra492/e/dIqmJ2L1jb
IoQQ/cWAs+ujQPq1+RppesjOO2P/tOOr3+jOrLKlygTKMMgvN72YJZmZigRDJqhY
eZ8HN4xmk69rPsYJVPdjpdMIddcudVoDXQxGgXI970Hu2iFfZG7eVK+hoyji64rp
0atCbplnKisVzl09YpTDwCphzpuGFGumFh47JmotdXRAF79Gt/qgHFDqrt3w4NCU
YbvW3jYxGgUUkWFwd8xYNer1uA8LPM0fwjIDTt4CnDAEN9HNf/xj7eF6UqtZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU5+A3gq2oWnVlDkiXYChF2ZhGCpcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM3MzkzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYjTANBgkqhkiG9w0BAQsFAAOCAQEAn++nmc/LiaE0k2uaA2cmg0MiS2Xz
iTs5m8dnVrcGTQYP+I/vYMvij0RzoEoEmyLytTzb13KpjdqT0t7lszDIavRIz8iA
/6Qb0Ai4x8yRCsjBHFEOpkvN8HmZfXLwhL6SZXDU/+b37ZE+fgN3Yvnc0I0xVAMY
2hZcHkYIyHN9eXVp07UOc4jpM98Ia/lv5YL5B0QlI0JfqcYPCH3O3aTQFR5Cl5Nj
7O3VMTSISDytVmlsu3DLpFPzr2b+iZKq7/Pv7R3ZiIARxpg+H2cNdXtr/ysDKQbL
KNNTmr6JnYZfug91vD9wx/FqPXRuBmjAWi4452uL5pbx3mtbAGtNmjjB8Q==
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:39 2026 by rpki-client