Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233302e302f32342d3234203d3e20323130343634.roa
File: 3231372e3231362e3233302e302f32342d3234203d3e20323130343634.roa (raw, json)
Hash identifier: Ye2Njck1rihzfTrMwvXqXMB0rqbjcXx76Bql65LkHl0=
Subject key identifier: 38:EE:23:95:6E:19:61:5E:7E:24:7C:DF:44:DF:7E:5F:1A:D8:99:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 336156882CF144C6B8BD4406792930AC166E6458
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233302e302f32342d3234203d3e20323130343634.roa
Signing time: Tue 13 Oct 2026 20:11:43 +0000
ROA not before: Tue 13 Oct 2026 20:06:43 +0000
ROA not after: Tue 12 Oct 2027 20:11:43 +0000
asID: 210464
IP address blocks: 217.216.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 20:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:61:56:88:2c:f1:44:c6:b8:bd:44:06:79:29:30:ac:16:6e:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 20:06:43 2026 GMT
Not After : Oct 12 20:11:43 2027 GMT
Subject: CN=38EE23956E19615E7E247CDF44DF7E5F1AD899A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:16:4a:e6:a3:64:64:40:cd:6a:49:c2:2e:61:
10:3f:3e:d6:db:83:61:76:9b:05:d5:f1:ad:bd:40:
cf:f6:d3:bc:4b:d1:fc:bb:ec:60:88:77:c3:10:04:
90:3b:6a:1d:46:b6:0c:63:b5:88:0c:6b:f9:00:39:
e6:ac:67:33:0e:ed:f0:31:5e:22:ea:eb:49:ca:59:
e9:ef:53:db:b5:f8:36:28:9b:82:c0:96:cc:83:b1:
b0:0f:b8:55:e5:99:03:96:77:5b:87:90:4d:ed:77:
c4:64:e5:a1:1e:9c:75:d0:e1:2b:51:31:e7:08:9f:
95:68:bc:3d:93:9c:8f:cf:a4:1b:16:68:5d:77:33:
db:29:a6:83:c6:1d:1d:15:61:e0:95:1c:51:2d:9d:
b8:f3:30:a5:d7:d7:eb:5a:0e:3c:c8:d4:5c:9a:dd:
62:30:82:c4:e4:b3:c3:7d:a5:02:41:67:17:57:d6:
d1:27:e1:ed:05:02:12:6d:9a:17:8e:d3:5d:fa:35:
a1:dc:f8:40:dc:3b:ab:e2:43:ba:5d:f0:a9:0e:11:
65:5d:1b:ce:0e:34:31:8b:f5:6f:ed:cb:74:21:3a:
2b:93:62:39:90:62:53:43:1f:7c:62:4c:55:9b:7f:
43:d3:d5:c9:8e:5d:98:d4:2d:d2:35:be:6d:f6:b8:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:23:95:6E:19:61:5E:7E:24:7C:DF:44:DF:7E:5F:1A:D8:99:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233302e302f32342d3234203d3e20323130343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:04:d2:c2:e0:e3:7f:1d:6d:a8:bb:4c:01:8e:1d:c0:e5:6f:
9e:16:a2:2f:63:5c:f2:d7:06:d1:0c:44:5b:34:12:df:b3:23:
ee:8f:82:5d:7d:00:f5:49:0a:bc:5e:7f:c9:62:40:bc:63:ea:
4c:29:f0:c0:29:d4:e0:db:2f:4d:32:7f:9f:4e:7d:ec:6a:03:
bf:bf:e4:11:18:72:65:43:cb:a3:07:21:42:03:b3:c6:2b:df:
95:40:5a:54:5f:9c:0d:f6:7a:39:1a:16:79:f1:ed:f5:b3:5e:
f0:6a:28:c0:5c:01:de:c4:06:d2:55:37:b6:e3:5c:67:f2:d5:
33:15:04:44:47:73:24:00:6b:9e:80:6e:96:b3:d3:75:ff:74:
fa:d2:20:d3:e4:ba:71:ea:37:11:4f:e7:7b:66:c8:25:28:ca:
d5:ea:af:43:7b:bf:7e:a6:d0:0c:d2:a2:ca:0f:d0:b1:09:e4:
c5:01:d4:e1:69:fd:47:9e:cc:00:5a:4b:82:83:fa:a1:9d:41:
28:8e:84:74:77:c3:0e:0a:b7:6f:11:7a:26:6f:fe:be:ba:b0:
9d:9b:e5:4b:fc:47:d4:98:3e:13:c2:d3:fe:b3:31:d7:da:93:
2a:0a:bc:c2:bd:84:c3:43:52:d6:80:e3:bb:ba:6e:29:ed:b2:
e0:6a:53:97
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUM2FWiCzxRMa4vUQGeSkwrBZuZFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTMyMDA2NDNaFw0yNzEwMTIyMDExNDNaMDMxMTAvBgNV
BAMTKDM4RUUyMzk1NkUxOTYxNUU3RTI0N0NERjQ0REY3RTVGMUFEODk5QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEFkrmo2RkQM1qScIuYRA/Ptbb
g2F2mwXV8a29QM/207xL0fy77GCId8MQBJA7ah1GtgxjtYgMa/kAOeasZzMO7fAx
XiLq60nKWenvU9u1+DYom4LAlsyDsbAPuFXlmQOWd1uHkE3td8Rk5aEenHXQ4StR
MecIn5VovD2TnI/PpBsWaF13M9sppoPGHR0VYeCVHFEtnbjzMKXX1+taDjzI1Fya
3WIwgsTks8N9pQJBZxdX1tEn4e0FAhJtmheO0136NaHc+EDcO6viQ7pd8KkOEWVd
G84ONDGL9W/ty3QhOiuTYjmQYlNDH3xiTFWbf0PT1cmOXZjULdI1vm32uIUDAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUOO4jlW4ZYV5+JHzfRN9+XxrYmacwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDM0MzYzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnY5jANBgkqhkiG9w0BAQsFAAOCAQEAdATSwuDjfx1tqLtMAY4dwOVvnhai
L2Nc8tcG0QxEWzQS37Mj7o+CXX0A9UkKvF5/yWJAvGPqTCnwwCnU4NsvTTJ/n059
7GoDv7/kERhyZUPLowchQgOzxivflUBaVF+cDfZ6ORoWefHt9bNe8GoowFwB3sQG
0lU3tuNcZ/LVMxUEREdzJABrnoBulrPTdf90+tIg0+S6ceo3EU/ne2bIJSjK1eqv
Q3u/fqbQDNKiyg/QsQnkxQHU4Wn9R57MAFpLgoP6oZ1BKI6EdHfDDgq3bxF6Jm/+
vrqwnZvlS/xH1Jg+E8LT/rMx19qTKgq8wr2Ew0NS1oDju7puKe2y4GpTlw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:22:43 2026 by rpki-client