Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20323134373136.roa
File: 3231372e3231362e3231382e302f32342d3234203d3e20323134373136.roa (raw, json)
Hash identifier: cwAC6wNMYeZ6jWrKMNsLPpHEoe4yjND76RsivoXsrPo=
Subject key identifier: 37:D8:8F:F9:7A:F3:24:12:15:33:4F:42:D3:D4:1B:E9:8A:8F:FD:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28D03562813A51487B34A81DF18B5A3338C096A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20323134373136.roa
Signing time: Tue 06 Oct 2026 12:08:51 +0000
ROA not before: Tue 06 Oct 2026 12:03:51 +0000
ROA not after: Tue 05 Oct 2027 12:08:51 +0000
asID: 214716
IP address blocks: 217.216.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d0:35:62:81:3a:51:48:7b:34:a8:1d:f1:8b:5a:33:38:c0:96:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 12:03:51 2026 GMT
Not After : Oct 5 12:08:51 2027 GMT
Subject: CN=37D88FF97AF3241215334F42D3D41BE98A8FFD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:53:12:34:3e:c0:21:69:ac:a2:9f:2b:9c:
dd:09:e1:29:a2:46:fe:7f:a7:29:37:e1:2d:4a:4b:
26:90:c6:d3:21:a5:82:a4:87:18:e5:80:6c:b1:42:
47:2b:2a:ab:7c:de:4f:b2:cb:53:c2:05:c9:b5:18:
46:7a:ea:06:ca:f4:9e:7e:c7:b3:d5:a2:c6:a4:3b:
6e:4d:5d:e3:f3:d3:19:8d:40:8b:30:47:fa:42:57:
27:57:05:04:a4:39:b6:36:cf:aa:e1:d7:de:ef:b5:
4f:58:46:53:92:55:e2:10:5e:ba:6e:ab:dd:8f:57:
64:26:44:0e:ea:2d:ff:04:30:0a:aa:ab:ec:71:d3:
76:8c:95:8f:2c:c2:b8:7d:aa:e5:b8:19:83:95:03:
63:d2:11:e9:41:d9:d3:61:71:74:d1:d3:0d:71:00:
3d:68:82:e5:65:13:1f:4e:dd:fd:a1:e0:78:e0:19:
33:0d:20:fd:8d:25:5a:ab:25:c8:24:59:76:2d:66:
c1:fe:f9:3c:c7:6a:ba:2e:18:00:66:e9:d1:ac:a1:
d7:cd:a5:b1:4a:c6:21:40:e4:bc:a1:98:ab:21:35:
c5:ab:b6:b7:b2:ac:08:cb:a1:5d:bf:44:b9:ce:9b:
69:9b:b5:e0:18:45:f2:4e:4b:93:ae:97:14:cc:33:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:8F:F9:7A:F3:24:12:15:33:4F:42:D3:D4:1B:E9:8A:8F:FD:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3231382e302f32342d3234203d3e20323134373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.218.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3d:df:04:43:8d:75:13:ce:d5:7c:60:09:ef:f4:0a:dc:a9:
68:99:c1:e9:c0:a2:a8:41:f2:22:b7:01:e6:01:46:d7:23:14:
7c:06:de:b8:ff:98:4c:bf:4d:de:38:ef:77:6d:ec:87:75:47:
49:1c:10:86:2d:3f:6b:10:3a:07:90:f7:44:48:96:55:4c:f4:
67:75:91:28:3e:d7:40:c9:0d:20:e8:18:bc:4c:44:36:96:6b:
ff:32:b2:9f:8f:a9:d6:06:6d:96:ec:9e:79:c4:04:ac:05:06:
1c:4f:60:d8:5a:94:29:b2:0c:0b:f6:bf:be:79:03:d9:25:68:
e7:5e:71:da:b5:04:59:d0:6a:c0:34:17:b9:47:0e:a6:f8:ac:
32:2d:53:52:8d:98:36:f9:0c:0d:2a:01:6a:48:6a:0d:46:fe:
9e:b6:91:63:4d:e8:e0:c8:80:7d:02:e5:d2:7f:2a:5d:ab:0f:
06:af:15:dd:88:75:4c:a3:58:22:fa:a3:04:1a:6b:ea:8b:da:
61:ef:4b:20:43:20:f9:12:ef:85:5a:4e:ec:04:9c:d4:0c:8b:
85:7f:d4:90:25:07:28:83:8e:b8:50:6f:39:e7:48:e5:d1:04:
a1:5b:56:77:34:13:5c:49:57:0d:0b:8c:0c:dc:4e:1d:fb:fb:
06:00:ba:f6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKNA1YoE6UUh7NKgd8YtaMzjAlqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDYxMjAzNTFaFw0yNzEwMDUxMjA4NTFaMDMxMTAvBgNV
BAMTKDM3RDg4RkY5N0FGMzI0MTIxNTMzNEY0MkQzRDQxQkU5OEE4RkZEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8FMSND7AIWmsop8rnN0J4Smi
Rv5/pyk34S1KSyaQxtMhpYKkhxjlgGyxQkcrKqt83k+yy1PCBcm1GEZ66gbK9J5+
x7PVosakO25NXePz0xmNQIswR/pCVydXBQSkObY2z6rh197vtU9YRlOSVeIQXrpu
q92PV2QmRA7qLf8EMAqqq+xx03aMlY8swrh9quW4GYOVA2PSEelB2dNhcXTR0w1x
AD1oguVlEx9O3f2h4HjgGTMNIP2NJVqrJcgkWXYtZsH++TzHarouGABm6dGsodfN
pbFKxiFA5LyhmKshNcWrtreyrAjLoV2/RLnOm2mbteAYRfJOS5OulxTMM4ePAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUN9iP+XrzJBIVM09C09Qb6YqP/QcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM3MzEzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnY2jANBgkqhkiG9w0BAQsFAAOCAQEAlz3fBEONdRPO1XxgCe/0CtypaJnB
6cCiqEHyIrcB5gFG1yMUfAbeuP+YTL9N3jjvd23sh3VHSRwQhi0/axA6B5D3REiW
VUz0Z3WRKD7XQMkNIOgYvExENpZr/zKyn4+p1gZtluyeecQErAUGHE9g2FqUKbIM
C/a/vnkD2SVo515x2rUEWdBqwDQXuUcOpvisMi1TUo2YNvkMDSoBakhqDUb+nraR
Y03o4MiAfQLl0n8qXasPBq8V3Yh1TKNYIvqjBBpr6ovaYe9LIEMg+RLvhVpO7ASc
1AyLhX/UkCUHKIOOuFBvOedI5dEEoVtWdzQTXElXDQuMDNxOHfv7BgC69g==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:20 2026 by rpki-client