Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136382e302f32342d3234203d3e203136353039.roa
File: 3231372e3231362e3136382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 5YTqUUb90GYpO0etQLMdySUMraPPVJffKsyPeDNKULw=
Subject key identifier: F6:E6:2A:6A:BF:91:8B:37:CD:8A:D0:25:AA:5A:07:13:92:61:08:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 518DFA7C7B341A2D02558EA4EF00F8A60023A98B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136382e302f32342d3234203d3e203136353039.roa
Signing time: Mon 05 Oct 2026 09:25:30 +0000
ROA not before: Mon 05 Oct 2026 09:20:30 +0000
ROA not after: Mon 04 Oct 2027 09:25:30 +0000
asID: 16509
IP address blocks: 217.216.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8d:fa:7c:7b:34:1a:2d:02:55:8e:a4:ef:00:f8:a6:00:23:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:30 2026 GMT
Not After : Oct 4 09:25:30 2027 GMT
Subject: CN=F6E62A6ABF918B37CD8AD025AA5A07139261084F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:48:57:9d:6b:53:d3:71:79:1b:54:f6:e3:
3c:65:68:cf:e0:ef:74:4b:79:19:cf:bf:bd:69:3e:
df:36:cf:17:05:e4:1b:5c:6a:24:c6:82:d6:27:09:
66:e9:67:0e:40:b0:9a:59:8c:1d:0b:d4:8d:b1:49:
f4:14:84:b1:8f:e3:d7:ac:5f:4a:3e:db:38:a5:4b:
b5:90:ca:e1:be:fd:09:20:c8:78:64:63:7d:f2:de:
0d:fa:b6:b5:f0:f4:fc:e1:48:4c:72:5a:cd:ff:ee:
d9:6f:76:01:66:0d:f0:85:6e:ab:ab:ed:68:8f:c8:
49:b8:76:33:1e:28:54:79:fe:77:95:f2:34:e0:a7:
21:03:fc:d2:03:ba:e5:0f:71:e3:8c:b2:6f:3f:48:
b1:19:48:5d:bf:d3:d5:b1:e5:7c:21:af:6f:26:09:
ff:18:49:3d:b5:8c:d6:78:13:e4:b9:1e:75:91:c9:
e1:2b:58:b8:b1:65:a8:14:d3:b7:b0:6a:f0:af:68:
6c:8a:53:69:ec:aa:6c:e4:ac:d2:e7:d0:1f:4e:be:
a0:f8:52:45:a5:72:c5:8e:32:1b:ad:11:41:4d:23:
b1:4e:06:99:1b:c2:f1:31:1a:5a:70:9b:9e:a8:46:
6f:48:f3:b6:0c:6c:46:96:b7:95:0d:d1:fa:74:34:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E6:2A:6A:BF:91:8B:37:CD:8A:D0:25:AA:5A:07:13:92:61:08:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.168.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d7:39:3b:07:44:ac:63:05:c3:de:90:35:02:57:64:f5:bc:
0d:e8:c7:2a:d5:7e:d7:d0:dc:0c:f2:d4:23:c6:95:ec:45:b0:
01:60:3b:8b:68:62:06:d1:04:9f:16:7b:60:f1:1e:0c:6e:12:
43:5c:5b:bc:75:e0:3d:b4:08:9c:7e:67:95:1e:a6:96:42:c6:
a7:35:a2:a7:cd:92:c0:dc:66:16:39:01:6c:dc:d0:b5:5d:b1:
5d:d5:9e:46:11:a8:2e:49:4f:a5:1f:e4:85:d3:9d:5b:6e:e1:
31:58:21:86:57:ce:38:3a:6f:02:da:45:62:0f:ae:b8:51:57:
d6:cf:69:da:e9:bf:99:5a:94:ef:15:66:46:99:b3:cb:b4:35:
e2:27:c4:76:d9:1f:e7:73:d6:a4:ac:e4:02:c6:22:47:e3:3e:
fb:c9:b7:c8:ac:65:89:c5:ba:6c:f9:72:5c:38:48:36:8f:79:
f0:c3:c7:b5:76:13:f2:63:62:8e:e4:87:f2:f5:31:e3:24:c4:
f6:d2:02:01:c4:d7:6a:88:20:77:d1:fe:8b:4f:80:b8:57:51:
d6:fd:1f:a6:e9:c7:c8:9e:b8:5c:b2:22:db:7f:a0:d0:91:95:
18:2e:66:52:5c:91:78:3f:4a:41:21:0d:be:21:70:b4:e1:57:
89:1f:e1:f8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUY36fHs0Gi0CVY6k7wD4pgAjqYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDUwOTIwMzBaFw0yNzEwMDQwOTI1MzBaMDMxMTAvBgNV
BAMTKEY2RTYyQTZBQkY5MThCMzdDRDhBRDAyNUFBNUEwNzEzOTI2MTA4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTkhXnWtT03F5G1T24zxlaM/g
73RLeRnPv71pPt82zxcF5BtcaiTGgtYnCWbpZw5AsJpZjB0L1I2xSfQUhLGP49es
X0o+2zilS7WQyuG+/QkgyHhkY33y3g36trXw9PzhSExyWs3/7tlvdgFmDfCFbqur
7WiPyEm4djMeKFR5/neV8jTgpyED/NIDuuUPceOMsm8/SLEZSF2/09Wx5Xwhr28m
Cf8YST21jNZ4E+S5HnWRyeErWLixZagU07ewavCvaGyKU2nsqmzkrNLn0B9OvqD4
UkWlcsWOMhutEUFNI7FOBpkbwvExGlpwm56oRm9I87YMbEaWt5UN0fp0NA73AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU9uYqar+RizfNitAlqloHE5JhCE8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzNTMwMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2KgwDQYJKoZIhvcNAQELBQADggEBAJbXOTsHRKxjBcPekDUCV2T1vA3oxyrV
ftfQ3Azy1CPGlexFsAFgO4toYgbRBJ8We2DxHgxuEkNcW7x14D20CJx+Z5UeppZC
xqc1oqfNksDcZhY5AWzc0LVdsV3VnkYRqC5JT6Uf5IXTnVtu4TFYIYZXzjg6bwLa
RWIPrrhRV9bPadrpv5lalO8VZkaZs8u0NeInxHbZH+dz1qSs5ALGIkfjPvvJt8is
ZYnFumz5clw4SDaPefDDx7V2E/JjYo7kh/L1MeMkxPbSAgHE12qIIHfR/otPgLhX
Udb9H6bpx8ieuFyyItt/oNCRlRguZlJckXg/SkEhDb4hcLThV4kf4fg=
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:06 2026 by rpki-client