Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138362e302f32332d3234203d3e203330303432.roa
File: 3231372e3231362e3138362e302f32332d3234203d3e203330303432.roa (raw, json)
Hash identifier: g+/yg7//IH6FR30tO16pK7OxlQqBTYDkRy+vobAlPx8=
Subject key identifier: AF:47:8E:D4:3B:39:30:92:9F:17:EA:E9:68:89:90:5D:51:C9:2B:A9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D42951EABE798D529E5407B260C5E16D3CC45FF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138362e302f32332d3234203d3e203330303432.roa
Signing time: Fri 09 Oct 2026 08:32:16 +0000
ROA not before: Fri 09 Oct 2026 08:27:16 +0000
ROA not after: Fri 08 Oct 2027 08:32:16 +0000
asID: 30042
IP address blocks: 217.216.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:42:95:1e:ab:e7:98:d5:29:e5:40:7b:26:0c:5e:16:d3:cc:45:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 08:27:16 2026 GMT
Not After : Oct 8 08:32:16 2027 GMT
Subject: CN=AF478ED43B3930929F17EAE96889905D51C92BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:3e:2c:2a:9e:ee:8e:c1:50:1b:80:8e:fd:
1b:e9:fb:88:89:e7:25:af:12:68:a0:01:8b:06:c0:
52:c3:79:7f:37:9a:e2:14:aa:19:51:88:78:3d:48:
00:b6:07:7d:85:15:a2:54:21:89:45:52:95:df:6b:
89:6c:47:66:80:ca:d4:cc:51:61:01:a3:44:8f:ad:
db:be:7c:3a:41:6d:21:03:7e:37:de:c9:29:57:30:
61:10:ae:f0:e9:02:3d:f7:20:03:8d:94:c1:1e:09:
d0:27:d2:ec:6a:2b:20:fb:20:aa:ed:ff:db:5a:4e:
71:7c:26:15:65:35:9b:35:c9:f2:0f:ba:2d:3f:1d:
f3:42:84:ed:7d:b6:62:5b:65:5f:6b:fd:e1:43:f1:
28:52:45:b9:af:94:b8:ab:20:b5:a8:de:5d:20:ca:
e6:27:64:8c:23:e3:e8:e3:9e:4f:52:3a:a6:69:31:
0c:bd:44:3b:1d:f6:ca:f8:85:e6:d3:98:3f:e2:7a:
c2:54:15:9a:26:79:a5:29:80:a9:63:0d:98:fb:15:
87:2d:2b:97:3c:53:fb:4f:4c:df:e6:68:62:27:82:
37:f3:ca:1a:ac:20:a8:ec:f4:a1:67:be:dc:4c:90:
04:6e:00:48:b8:0c:5e:41:42:e0:b9:88:06:de:9d:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:8E:D4:3B:39:30:92:9F:17:EA:E9:68:89:90:5D:51:C9:2B:A9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138362e302f32332d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.186.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:62:b6:2c:04:67:24:1d:30:93:5c:14:51:f3:70:46:28:fb:
f4:a1:5b:a5:d3:d1:dd:86:a7:92:ac:7e:30:f3:e4:59:20:c3:
91:95:1f:9a:41:93:bc:60:d4:3d:d7:3c:cd:9c:96:25:ff:3f:
06:79:a7:9a:92:0d:7b:01:0b:51:34:9b:15:34:45:b9:d7:50:
6d:7d:0d:28:6e:97:11:ec:d1:f1:90:95:36:e8:af:24:72:ae:
6a:80:68:15:30:41:f8:be:78:4f:2a:8a:eb:dd:8c:27:71:f1:
82:c3:c4:08:e7:b7:c7:36:0d:a1:18:e1:0b:87:4c:75:70:cb:
59:96:94:0c:0e:00:bf:aa:5d:aa:b8:b0:e4:37:3b:c7:ee:5b:
ee:2d:f1:26:49:a3:54:a7:be:4d:05:e0:34:89:31:83:40:dd:
73:fb:11:2b:87:19:49:7f:98:30:63:52:72:50:5e:71:e9:f8:
4d:f8:00:9b:2c:6f:a7:1d:14:60:ad:c3:83:0a:5c:2f:ae:8d:
9f:f9:fe:d5:cd:a5:32:d5:67:bf:c6:c0:7c:2d:42:9c:8b:1c:
dd:85:d8:bd:75:57:ee:16:11:6d:78:1a:7b:6e:b6:d5:70:c8:
70:bf:e3:b6:68:89:ce:7e:90:80:4c:76:73:aa:1e:56:db:18:
79:26:ab:94
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTUKVHqvnmNUp5UB7JgxeFtPMRf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDkwODI3MTZaFw0yNzEwMDgwODMyMTZaMDMxMTAvBgNV
BAMTKEFGNDc4RUQ0M0IzOTMwOTI5RjE3RUFFOTY4ODk5MDVENTFDOTJCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsT4sKp7ujsFQG4CO/Rvp+4iJ
5yWvEmigAYsGwFLDeX83muIUqhlRiHg9SAC2B32FFaJUIYlFUpXfa4lsR2aAytTM
UWEBo0SPrdu+fDpBbSEDfjfeySlXMGEQrvDpAj33IAONlMEeCdAn0uxqKyD7IKrt
/9taTnF8JhVlNZs1yfIPui0/HfNChO19tmJbZV9r/eFD8ShSRbmvlLirILWo3l0g
yuYnZIwj4+jjnk9SOqZpMQy9RDsd9sr4hebTmD/iesJUFZomeaUpgKljDZj7FYct
K5c8U/tPTN/maGIngjfzyhqsIKjs9KFnvtxMkARuAEi4DF5BQuC5iAbenWiLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUr0eO1Ds5MJKfF+rpaImQXVHJK6kwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzgzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzAzMDM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHZ2LowDQYJKoZIhvcNAQELBQADggEBAIpitiwEZyQdMJNcFFHzcEYo+/ShW6XT
0d2Gp5KsfjDz5Fkgw5GVH5pBk7xg1D3XPM2cliX/PwZ5p5qSDXsBC1E0mxU0RbnX
UG19DShulxHs0fGQlTboryRyrmqAaBUwQfi+eE8qiuvdjCdx8YLDxAjnt8c2DaEY
4QuHTHVwy1mWlAwOAL+qXaq4sOQ3O8fuW+4t8SZJo1Snvk0F4DSJMYNA3XP7ESuH
GUl/mDBjUnJQXnHp+E34AJssb6cdFGCtw4MKXC+ujZ/5/tXNpTLVZ7/GwHwtQpyL
HN2F2L11V+4WEW14GntuttVwyHC/47Zoic5+kIBMdnOqHlbbGHkmq5Q=
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:43 2026 by rpki-client