Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233332e302f32342d3234203d3e20313938333737.roa
File: 3231372e3231362e3233332e302f32342d3234203d3e20313938333737.roa (raw, json)
Hash identifier: ilrY7XnCAKSnijVBHj9H25+MuSmuR/4Cb9XPeH/DF6U=
Subject key identifier: 68:90:FD:F0:3D:E0:CE:29:0B:8A:47:70:B4:C8:03:E2:D4:00:7D:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4AFCEFDD8EA7DC34269FBE9231AB41D070A03648
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233332e302f32342d3234203d3e20313938333737.roa
Signing time: Sat 24 Oct 2026 07:03:51 +0000
ROA not before: Sat 24 Oct 2026 06:58:51 +0000
ROA not after: Sat 23 Oct 2027 07:03:51 +0000
asID: 198377
IP address blocks: 217.216.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fc:ef:dd:8e:a7:dc:34:26:9f:be:92:31:ab:41:d0:70:a0:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 06:58:51 2026 GMT
Not After : Oct 23 07:03:51 2027 GMT
Subject: CN=6890FDF03DE0CE290B8A4770B4C803E2D4007D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:8f:7c:e1:1e:36:14:54:7e:66:c1:2b:d1:
14:79:57:42:0e:99:13:a8:6a:36:bb:ca:d3:43:9e:
cb:8f:00:33:fe:08:09:07:54:40:bf:9c:6f:70:aa:
d6:a9:60:fe:73:e4:8d:3d:3f:63:dd:a6:62:8b:3f:
a4:a4:9c:3d:a7:44:8a:6a:b7:5c:7a:78:e0:8a:bd:
4e:3f:2b:b6:39:5d:87:97:4b:21:1e:b6:ba:bd:35:
3d:33:0e:16:62:35:30:1a:bf:00:f6:0c:65:7a:94:
f0:7a:54:9f:cd:95:b3:11:8f:b9:ea:7f:04:c3:ec:
c7:98:31:fa:d4:51:6a:2f:34:8f:f1:cd:56:5a:69:
ff:9d:d0:87:51:cc:95:c6:bc:34:e4:fb:56:b8:16:
32:3e:c9:cc:e2:4f:73:35:ba:e6:11:70:5d:37:71:
ae:32:da:18:9a:b6:a7:fe:d4:a7:51:81:e7:0a:07:
15:10:b6:c2:d5:a9:95:04:1d:9a:24:c6:47:1a:c6:
56:10:38:59:e1:8b:cf:11:23:92:f5:c9:90:dd:6c:
5c:75:de:a8:66:16:41:09:c1:05:27:d0:4a:30:e3:
79:74:c3:b1:32:3d:63:64:b8:27:3a:13:66:1a:59:
9e:22:41:63:50:05:25:a6:7b:25:6f:51:0e:43:0a:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:FD:F0:3D:E0:CE:29:0B:8A:47:70:B4:C8:03:E2:D4:00:7D:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233332e302f32342d3234203d3e20313938333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:f4:40:41:0d:d2:f3:11:88:1d:8b:4c:32:56:ae:5e:bb:
51:4b:be:cc:94:9d:c3:38:c1:c0:f2:b5:3d:0a:11:70:fa:c3:
f7:cf:21:32:74:d1:c4:ba:68:67:63:b1:29:d1:62:e8:c3:2d:
de:4e:7a:0c:91:24:ce:8b:64:95:16:f3:24:e4:c5:f0:e6:8e:
a2:4b:f3:df:76:e3:54:e0:7e:27:5b:71:89:ec:8a:6d:b4:6e:
ae:22:2d:38:9a:a5:da:91:91:fa:2a:99:45:6f:7c:74:17:a9:
d2:82:58:df:fe:52:73:62:0c:76:04:da:8e:ba:29:72:27:bd:
ce:32:67:6e:ca:d0:59:1e:52:eb:61:df:f9:92:f4:bd:e5:46:
2c:7a:d6:54:5e:3e:3f:2b:9a:07:39:3d:05:32:b5:40:b7:00:
81:17:c7:98:d7:30:41:96:bf:26:96:8a:30:31:2d:7a:a9:ba:
c1:fb:f6:ec:16:91:19:88:71:ce:d3:49:2e:63:62:e1:56:69:
e4:b2:d3:eb:b9:35:c5:8c:d8:2c:a2:d1:a8:1a:85:56:3a:0e:
3a:e4:9b:81:b4:f4:9d:fb:d0:0e:19:e4:95:98:66:97:9e:98:
ce:2e:4d:58:e4:3b:8f:5a:23:d3:bd:64:84:3e:84:01:cb:e4:
bd:c8:1b:14
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSvzv3Y6n3DQmn76SMatB0HCgNkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMjQwNjU4NTFaFw0yNzEwMjMwNzAzNTFaMDMxMTAvBgNV
BAMTKDY4OTBGREYwM0RFMENFMjkwQjhBNDc3MEI0QzgwM0UyRDQwMDdENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBuY984R42FFR+ZsEr0RR5V0IO
mROoaja7ytNDnsuPADP+CAkHVEC/nG9wqtapYP5z5I09P2PdpmKLP6SknD2nRIpq
t1x6eOCKvU4/K7Y5XYeXSyEetrq9NT0zDhZiNTAavwD2DGV6lPB6VJ/NlbMRj7nq
fwTD7MeYMfrUUWovNI/xzVZaaf+d0IdRzJXGvDTk+1a4FjI+ycziT3M1uuYRcF03
ca4y2hiatqf+1KdRgecKBxUQtsLVqZUEHZokxkcaxlYQOFnhi88RI5L1yZDdbFx1
3qhmFkEJwQUn0Eow43l0w7EyPWNkuCc6E2YaWZ4iQWNQBSWmeyVvUQ5DClxvAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUaJD98D3gzikLikdwtMgD4tQAfVswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODMzMzczNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnY6TANBgkqhkiG9w0BAQsFAAOCAQEACob0QEEN0vMRiB2LTDJWrl67UUu+
zJSdwzjBwPK1PQoRcPrD988hMnTRxLpoZ2OxKdFi6MMt3k56DJEkzotklRbzJOTF
8OaOokvz33bjVOB+J1txieyKbbRuriItOJql2pGR+iqZRW98dBep0oJY3/5Sc2IM
dgTajropcie9zjJnbsrQWR5S62Hf+ZL0veVGLHrWVF4+PyuaBzk9BTK1QLcAgRfH
mNcwQZa/JpaKMDEteqm6wfv27BaRGYhxztNJLmNi4VZp5LLT67k1xYzYLKLRqBqF
VjoOOuSbgbT0nfvQDhnklZhml56Yzi5NWOQ7j1oj071khD6EAcvkvcgbFA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:00 2026 by rpki-client