Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20313734.roa
File: 3231372e3231362e3230382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: VjnR45NJEJj7dJz4V2G1L5WWeduttlbb8v375hOTHhc=
Subject key identifier: C7:AC:CA:DA:40:02:1F:60:72:D0:9C:19:C6:DE:66:D7:F1:0B:BD:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 130C000EB23AC20CD4FBE937E1F61859697172A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20313734.roa
Signing time: Mon 05 Oct 2026 09:25:24 +0000
ROA not before: Mon 05 Oct 2026 09:20:24 +0000
ROA not after: Mon 04 Oct 2027 09:25:24 +0000
asID: 174
IP address blocks: 217.216.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0c:00:0e:b2:3a:c2:0c:d4:fb:e9:37:e1:f6:18:59:69:71:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:24 2026 GMT
Not After : Oct 4 09:25:24 2027 GMT
Subject: CN=C7ACCADA40021F6072D09C19C6DE66D7F10BBDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:2d:9a:bf:be:d5:24:a0:d3:76:d2:48:c7:
fc:74:11:e7:0a:96:77:53:26:c1:32:6d:ae:1b:a3:
21:b5:7f:f0:a9:ee:b1:85:ea:46:60:12:14:ba:41:
3e:6f:a5:95:ae:39:69:01:28:bf:5a:38:19:76:cc:
76:6a:6c:24:3a:6c:84:ad:a7:93:4f:b1:2e:18:ac:
77:de:96:1d:a1:2a:80:06:1a:74:b2:da:34:c0:04:
11:b4:2b:72:19:a6:27:ae:ee:f8:04:5c:68:58:8e:
21:4e:ea:11:5e:d8:94:a8:6c:5c:f2:20:ec:1a:6f:
55:0f:a3:01:3c:b8:3f:4d:82:f6:5c:fd:7a:ce:77:
2d:f8:01:2d:71:92:db:fc:6a:ef:13:e3:48:66:cc:
b1:5c:ee:8f:84:24:f8:dc:24:a9:b3:52:29:b2:b2:
c2:b5:29:e2:e9:51:37:53:d6:4e:04:7f:80:83:ab:
69:86:8d:a0:9a:3b:15:4a:11:21:b6:ca:2a:d1:b1:
cd:90:d0:98:b8:c2:ed:81:a7:ae:84:56:6a:e8:2e:
78:40:b7:64:d1:15:f5:ad:08:8c:13:de:d8:06:2f:
75:db:fc:a1:f5:70:bd:16:bb:66:d5:51:f3:ca:48:
93:72:7a:71:00:3f:88:c0:67:e7:d3:6d:3b:d5:53:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:CA:DA:40:02:1F:60:72:D0:9C:19:C6:DE:66:D7:F1:0B:BD:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230382e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f4:ba:5a:3d:85:96:05:18:b4:a2:1d:6e:b5:6a:23:87:7d:
f7:ac:fd:8d:68:62:15:2a:82:60:62:00:8d:c0:95:1d:55:a1:
a7:ff:39:6b:5a:10:c4:11:97:06:20:76:c9:37:67:46:3e:3c:
e3:db:2c:d3:8a:93:af:60:e0:f2:e3:85:19:17:9d:ab:d1:98:
2b:50:e3:d7:2a:50:dc:d2:a8:2a:cb:d5:4d:d8:16:7a:a7:7f:
af:b8:49:1a:d7:53:5b:6f:92:e0:a2:8c:dc:ec:3e:05:0a:2e:
d7:48:15:c1:e4:8f:43:88:56:b8:40:4c:bc:ba:05:16:25:dc:
04:24:b8:e8:08:c0:37:89:16:80:06:ad:f6:3f:49:10:83:ba:
74:44:5f:d7:ed:9d:34:7d:96:42:70:e2:43:fc:df:3c:25:83:
83:9f:b8:06:c9:bf:7e:a9:70:24:f2:e5:0f:e0:c2:22:e3:50:
f8:0c:11:6a:28:2e:ec:6d:fb:cc:8d:1e:39:84:d5:df:7f:96:
86:2f:6b:f2:0a:f2:b8:e7:2d:32:95:31:49:04:66:4f:c6:f3:
5a:66:3d:ae:56:64:bc:20:17:ef:56:6b:e6:9b:0e:32:3c:56:
22:1e:a2:56:f9:c4:04:06:ee:7d:18:5a:e5:8d:b9:fe:a5:8e:
04:99:a1:cc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUEwwADrI6wgzU++k34fYYWWlxcqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDUwOTIwMjRaFw0yNzEwMDQwOTI1MjRaMDMxMTAvBgNV
BAMTKEM3QUNDQURBNDAwMjFGNjA3MkQwOUMxOUM2REU2NkQ3RjEwQkJEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pC2av77VJKDTdtJIx/x0EecK
lndTJsEyba4boyG1f/Cp7rGF6kZgEhS6QT5vpZWuOWkBKL9aOBl2zHZqbCQ6bISt
p5NPsS4YrHfelh2hKoAGGnSy2jTABBG0K3IZpieu7vgEXGhYjiFO6hFe2JSobFzy
IOwab1UPowE8uD9NgvZc/XrOdy34AS1xktv8au8T40hmzLFc7o+EJPjcJKmzUimy
ssK1KeLpUTdT1k4Ef4CDq2mGjaCaOxVKESG2yirRsc2Q0Ji4wu2Bp66EVmroLnhA
t2TRFfWtCIwT3tgGL3Xb/KH1cL0Wu2bVUfPKSJNyenEAP4jAZ+fTbTvVU1qHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUx6zK2kACH2By0JwZxt5m1/ELvbwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnY
0DANBgkqhkiG9w0BAQsFAAOCAQEAUvS6Wj2FlgUYtKIdbrVqI4d996z9jWhiFSqC
YGIAjcCVHVWhp/85a1oQxBGXBiB2yTdnRj4849ss04qTr2Dg8uOFGRedq9GYK1Dj
1ypQ3NKoKsvVTdgWeqd/r7hJGtdTW2+S4KKM3Ow+BQou10gVweSPQ4hWuEBMvLoF
FiXcBCS46AjAN4kWgAat9j9JEIO6dERf1+2dNH2WQnDiQ/zfPCWDg5+4Bsm/fqlw
JPLlD+DCIuNQ+AwRaigu7G37zI0eOYTV33+Whi9r8gryuOctMpUxSQRmT8bzWmY9
rlZkvCAX71Zr5psOMjxWIh6iVvnEBAbufRha5Y25/qWOBJmhzA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:22:16 2026 by rpki-client