Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139392e302f32342d3234203d3e20383334.roa
File: 3231372e3231362e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: loiguUigDyKOSbANdgG1PEnZYeavznIXu86nqZiGUtQ=
Subject key identifier: 59:6E:07:16:CE:EA:B2:CC:0C:9D:92:A5:78:AF:62:CD:C0:FD:BA:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F91D90F07C29C59AAE3DFBB8CEB0DAF175ABB65
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139392e302f32342d3234203d3e20383334.roa
Signing time: Sat 17 Oct 2026 19:45:03 +0000
ROA not before: Sat 17 Oct 2026 19:40:03 +0000
ROA not after: Sat 16 Oct 2027 19:45:03 +0000
asID: 834
IP address blocks: 217.216.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:91:d9:0f:07:c2:9c:59:aa:e3:df:bb:8c:eb:0d:af:17:5a:bb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 19:40:03 2026 GMT
Not After : Oct 16 19:45:03 2027 GMT
Subject: CN=596E0716CEEAB2CC0C9D92A578AF62CDC0FDBA7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:54:dc:64:c6:e2:10:02:f2:13:f0:fd:2e:
3e:71:96:d7:59:c7:4e:08:33:81:76:cd:8b:3a:ee:
21:fe:11:39:b1:d7:12:c8:dc:f2:b4:a4:02:a2:04:
52:2b:14:24:4b:c3:e3:5c:af:e5:24:45:2d:6b:f2:
68:05:70:8e:35:2b:8b:81:07:16:23:48:4d:01:cb:
63:5f:56:d8:da:ab:35:de:70:a4:33:b6:f2:71:54:
c4:da:04:34:03:68:3b:94:8d:d7:1f:07:6f:fe:e8:
d9:e3:0b:2c:38:40:1b:fc:b4:7c:a8:0c:9a:f0:db:
75:b7:1b:1e:f5:86:7c:8b:04:1e:27:34:05:12:7f:
aa:99:d4:de:c5:8f:c7:17:bf:ab:90:5a:5e:91:a9:
eb:d9:1d:1f:a0:75:59:36:50:57:aa:03:29:41:e4:
43:42:1a:3c:07:1e:c4:b0:11:19:f1:be:7f:6d:79:
98:a7:c1:39:3e:fa:ed:f8:9c:df:f4:fd:ec:99:ea:
57:74:75:14:af:69:b2:99:6d:71:a5:d6:73:c4:41:
a1:43:c5:23:29:ff:1b:1f:af:d8:1c:6e:4f:e7:ad:
a4:2a:9a:9a:64:ad:e3:cb:bb:a5:05:ef:26:2f:4f:
66:9b:3b:c9:1d:02:46:62:b1:33:ea:82:a9:e5:1a:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6E:07:16:CE:EA:B2:CC:0C:9D:92:A5:78:AF:62:CD:C0:FD:BA:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3139392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.199.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b7:25:87:e9:e6:6d:c2:62:c2:12:ae:e0:1c:d8:e9:ec:28:
f4:ce:10:46:36:a5:76:3d:75:e9:63:b4:2a:3d:a7:7e:3a:cb:
64:88:7c:bb:93:66:e8:45:8c:59:e3:b5:1f:66:1f:a8:d2:6a:
d7:e9:5d:40:93:d3:31:26:d0:77:bf:61:5a:4b:b8:85:87:79:
48:0e:1d:82:f3:d1:3f:96:26:3d:6a:78:26:30:c2:62:49:05:
e1:4a:02:d9:0e:5f:5f:24:90:b6:05:35:00:35:4e:27:32:6f:
ad:22:74:83:04:64:4b:71:df:3e:27:38:d6:6c:0e:29:a9:34:
e1:08:d0:8b:09:6d:2b:27:b0:fb:bc:3c:09:56:c6:59:59:f6:
df:06:9a:be:3d:d6:d1:27:10:02:57:d6:94:8e:05:c8:c8:bd:
d7:7b:f7:05:a3:6a:f6:cc:05:29:d4:2c:f9:98:f6:32:82:65:
8a:bf:a3:93:cd:71:35:52:33:c9:3e:74:46:15:00:92:75:48:
9e:87:ab:bd:f4:79:81:8e:35:9a:80:44:2a:cb:55:69:55:fb:
0f:d3:bc:05:b4:32:40:23:21:55:fb:e1:5b:78:6b:f9:0b:1c:
e2:ca:e4:8b:66:95:78:ed:71:12:46:64:e5:17:94:97:0c:eb:
33:b9:7d:42
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUP5HZDwfCnFmq49+7jOsNrxdau2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTcxOTQwMDNaFw0yNzEwMTYxOTQ1MDNaMDMxMTAvBgNV
BAMTKDU5NkUwNzE2Q0VFQUIyQ0MwQzlEOTJBNTc4QUY2MkNEQzBGREJBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCit1TcZMbiEALyE/D9Lj5xltdZ
x04IM4F2zYs67iH+ETmx1xLI3PK0pAKiBFIrFCRLw+Ncr+UkRS1r8mgFcI41K4uB
BxYjSE0By2NfVtjaqzXecKQztvJxVMTaBDQDaDuUjdcfB2/+6NnjCyw4QBv8tHyo
DJrw23W3Gx71hnyLBB4nNAUSf6qZ1N7Fj8cXv6uQWl6RqevZHR+gdVk2UFeqAylB
5ENCGjwHHsSwERnxvn9teZinwTk++u34nN/0/eyZ6ld0dRSvabKZbXGl1nPEQaFD
xSMp/xsfr9gcbk/nraQqmppkrePLu6UF7yYvT2abO8kdAkZisTPqgqnlGuCjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWW4HFs7qsswMnZKleK9izcD9un4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnY
xzANBgkqhkiG9w0BAQsFAAOCAQEAMbclh+nmbcJiwhKu4BzY6ewo9M4QRjaldj11
6WO0Kj2nfjrLZIh8u5Nm6EWMWeO1H2YfqNJq1+ldQJPTMSbQd79hWku4hYd5SA4d
gvPRP5YmPWp4JjDCYkkF4UoC2Q5fXySQtgU1ADVOJzJvrSJ0gwRkS3HfPic41mwO
Kak04QjQiwltKyew+7w8CVbGWVn23waavj3W0ScQAlfWlI4FyMi913v3BaNq9swF
KdQs+Zj2MoJlir+jk81xNVIzyT50RhUAknVInoervfR5gY41moBEKstVaVX7D9O8
BbQyQCMhVfvhW3hr+Qsc4srki2aVeO1xEkZk5ReUlwzrM7l9Qg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:55:33 2026 by rpki-client