Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137362e302f32342d3234203d3e203330303432.roa
File: 3231372e3231362e3137362e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: PGfiKlnGIT1tWdc27HikL1n7aT4HyNun15ciLMXrr1o=
Subject key identifier: 02:36:F2:60:33:5C:2B:5B:55:C9:64:EA:E8:D8:10:88:7C:4B:29:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32FFB20552A1C9E1C2E4374CD30C074B850FFC1F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137362e302f32342d3234203d3e203330303432.roa
Signing time: Mon 05 Oct 2026 09:25:48 +0000
ROA not before: Mon 05 Oct 2026 09:20:48 +0000
ROA not after: Mon 04 Oct 2027 09:25:48 +0000
asID: 30042
IP address blocks: 217.216.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ff:b2:05:52:a1:c9:e1:c2:e4:37:4c:d3:0c:07:4b:85:0f:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:48 2026 GMT
Not After : Oct 4 09:25:48 2027 GMT
Subject: CN=0236F260335C2B5B55C964EAE8D810887C4B29E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:bd:eb:63:ad:ea:f6:bd:e0:cb:ec:90:83:
65:8b:31:4d:a2:89:f9:8c:cc:35:90:61:2f:db:74:
5e:5f:79:bf:d3:d7:57:a0:c5:46:1d:36:38:99:7e:
31:3c:02:82:22:19:d4:d4:da:a4:d8:55:48:17:71:
fa:90:b8:d3:aa:ee:6f:22:57:94:60:a6:7e:cb:15:
9f:39:4d:6b:4d:bb:8a:01:79:f6:9c:ff:24:c1:72:
51:b4:7d:00:5b:ed:66:f5:b1:dc:3f:2b:4c:e5:db:
d7:13:9d:98:6c:fa:66:41:e7:41:b3:fe:94:94:b4:
86:a9:9a:b6:4a:1c:bd:3d:2e:85:5e:c4:2f:be:84:
a8:13:aa:76:9a:0e:11:fb:56:31:3f:c8:79:a8:ef:
08:1b:d2:a8:e4:42:70:96:4d:23:a2:81:76:16:6c:
cb:b4:65:c9:cd:23:34:6c:39:5d:14:c4:85:2b:99:
1f:41:1f:a0:06:78:e9:91:b7:4b:eb:2e:cb:40:98:
32:cc:d6:64:62:70:01:08:9b:46:9b:6e:49:b4:98:
d2:6c:1d:b0:ba:8a:db:64:4a:a8:c6:47:92:03:26:
ff:86:7e:b9:e8:ec:26:c4:c5:ac:c1:1c:42:2d:8c:
b7:73:c1:46:12:71:3d:50:bd:b4:ac:74:b5:8b:96:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:F2:60:33:5C:2B:5B:55:C9:64:EA:E8:D8:10:88:7C:4B:29:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137362e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.176.0/24
Signature Algorithm: sha256WithRSAEncryption
20:25:37:64:bd:64:17:54:de:98:25:c5:c8:da:dd:35:13:4a:
9f:ad:6c:d6:01:75:32:05:9b:d9:1e:15:6c:77:4a:2d:37:35:
33:a4:1e:bf:76:1c:fa:c2:19:6d:08:42:52:82:8b:bf:97:ef:
17:fb:0b:d1:b4:04:7a:be:1c:96:60:32:de:fc:73:f5:f6:2f:
3e:9d:12:22:47:b0:ce:4d:b6:88:da:3b:98:ad:00:ed:5a:c5:
29:92:bf:bc:06:26:a7:cf:85:07:94:14:97:c0:9f:6e:9f:ce:
6c:9a:9a:6a:41:4f:5a:43:e1:94:d6:a3:f8:e4:b1:14:6c:b7:
da:8a:15:67:6d:85:6b:90:58:55:00:bc:a5:63:f1:f0:a0:49:
6b:4e:aa:da:0f:11:bc:f6:b0:fd:7d:2f:37:dd:00:5d:6c:29:
16:6b:b9:26:7b:26:51:78:8c:27:80:0d:02:e1:b8:a2:da:0a:
0e:da:91:7a:c2:75:e6:30:c3:80:27:65:ed:86:ea:9b:37:82:
82:38:cc:74:62:7a:d5:aa:9d:96:38:35:52:ba:39:7d:79:d8:
23:ce:a6:3d:04:8e:fa:6a:1e:15:1c:85:66:3f:56:38:e6:52:
19:b4:07:ef:8e:e0:43:95:9c:1b:9c:ab:e6:04:32:71:dd:8f:
7f:29:1e:92
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMv+yBVKhyeHC5DdM0wwHS4UP/B8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDUwOTIwNDhaFw0yNzEwMDQwOTI1NDhaMDMxMTAvBgNV
BAMTKDAyMzZGMjYwMzM1QzJCNUI1NUM5NjRFQUU4RDgxMDg4N0M0QjI5RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VL3rY63q9r3gy+yQg2WLMU2i
ifmMzDWQYS/bdF5feb/T11egxUYdNjiZfjE8AoIiGdTU2qTYVUgXcfqQuNOq7m8i
V5Rgpn7LFZ85TWtNu4oBefac/yTBclG0fQBb7Wb1sdw/K0zl29cTnZhs+mZB50Gz
/pSUtIapmrZKHL09LoVexC++hKgTqnaaDhH7VjE/yHmo7wgb0qjkQnCWTSOigXYW
bMu0ZcnNIzRsOV0UxIUrmR9BH6AGeOmRt0vrLstAmDLM1mRicAEIm0abbkm0mNJs
HbC6ittkSqjGR5IDJv+Gfrno7CbExazBHEItjLdzwUYScT1QvbSsdLWLllHtAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUAjbyYDNcK1tVyWTq6NgQiHxLKeUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzAzMDM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2LAwDQYJKoZIhvcNAQELBQADggEBACAlN2S9ZBdU3pglxcja3TUTSp+tbNYB
dTIFm9keFWx3Si03NTOkHr92HPrCGW0IQlKCi7+X7xf7C9G0BHq+HJZgMt78c/X2
Lz6dEiJHsM5NtojaO5itAO1axSmSv7wGJqfPhQeUFJfAn26fzmyammpBT1pD4ZTW
o/jksRRst9qKFWdthWuQWFUAvKVj8fCgSWtOqtoPEbz2sP19LzfdAF1sKRZruSZ7
JlF4jCeADQLhuKLaCg7akXrCdeYww4AnZe2G6ps3goI4zHRietWqnZY4NVK6OX15
2CPOpj0EjvpqHhUchWY/VjjmUhm0B++O4EOVnBucq+YEMnHdj38pHpI=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:14 2026 by rpki-client