Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234332e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231362e3234332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: A+6ld2ObuWQdD9kL5NAtB37rtQEauWIdXuFLe4PxcU8=
Subject key identifier: 10:2A:53:6A:F9:71:69:BB:42:E3:B1:F6:63:1F:94:F8:C0:5D:36:BD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AF0AD61248616E823CD0771D899DFC95AA1BF16
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234332e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 28 Oct 2026 12:02:46 +0000
ROA not before: Wed 28 Oct 2026 11:57:46 +0000
ROA not after: Wed 27 Oct 2027 12:02:46 +0000
asID: 212238
IP address blocks: 217.216.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f0:ad:61:24:86:16:e8:23:cd:07:71:d8:99:df:c9:5a:a1:bf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 28 11:57:46 2026 GMT
Not After : Oct 27 12:02:46 2027 GMT
Subject: CN=102A536AF97169BB42E3B1F6631F94F8C05D36BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:a8:d5:60:41:a5:94:33:2d:80:33:45:69:
7c:3d:8c:81:f5:5a:2b:75:42:40:7d:1b:72:81:b4:
a5:71:27:fc:9f:16:22:9f:9a:4b:c2:40:69:1e:22:
24:93:3f:16:77:15:d0:5d:e7:8b:73:d1:45:c4:e5:
91:9a:27:ce:72:99:27:a0:22:7d:c2:41:08:0e:00:
63:b1:7f:0f:f9:35:a8:f4:69:ea:87:f1:fb:5b:36:
06:c2:5c:d8:a6:23:17:fe:60:a2:42:b5:22:d5:5e:
40:66:0c:fc:66:da:7a:d4:e0:6a:d6:2c:9b:2a:fd:
1d:10:38:6a:35:69:c2:0e:21:33:44:56:69:6b:44:
f5:81:d6:56:68:69:41:f1:af:bc:70:35:a1:ee:eb:
ab:78:94:de:f3:6d:9e:e9:e5:9d:ba:cb:89:35:35:
94:68:56:3e:2f:d1:6b:ce:1b:f0:02:66:f2:5b:bc:
5d:39:a4:b4:0a:80:98:ca:16:3a:11:a7:8a:0d:3c:
a3:ca:cc:27:1d:71:92:7f:00:8b:22:2d:75:03:fe:
ad:4b:7a:f7:02:44:f0:36:b2:f3:76:fe:d5:63:80:
a5:ba:e2:b0:c4:f0:3c:0d:5d:df:5e:32:5d:4a:be:
64:d6:3c:a7:be:8a:46:57:7d:0f:63:2c:43:6c:83:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:53:6A:F9:71:69:BB:42:E3:B1:F6:63:1F:94:F8:C0:5D:36:BD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8c:ab:be:96:2a:55:2f:c1:e6:94:56:2e:8c:d3:d3:de:cc:
d0:50:12:53:9d:5c:e5:e3:88:c0:ed:4e:15:5b:55:a4:f8:4f:
8b:56:d3:f4:48:e2:a2:0f:d5:3e:09:d9:b2:a7:66:96:6f:0b:
89:c8:f2:de:5a:77:f2:b1:2e:7e:9f:47:9a:c3:d4:84:db:1e:
ad:d0:b6:f2:f5:e0:55:e1:f6:9d:ea:94:c8:fc:87:ff:fd:c5:
5c:6e:1b:3b:38:cd:cb:0d:cc:27:ce:e6:c7:8e:ab:b5:12:26:
72:09:45:39:96:c4:b3:85:8e:44:2d:df:4e:8f:97:69:01:2f:
4d:91:7e:d7:2b:43:01:90:a2:54:ec:58:d4:88:ea:02:42:fb:
8e:d7:93:d4:d7:11:a7:44:ee:ad:6f:d1:0b:cd:58:f1:d0:f8:
66:a3:1a:8b:22:53:c6:e6:47:f7:26:6a:65:e1:bf:7a:cf:48:
54:e7:b3:25:9b:30:73:b0:35:70:46:56:58:25:76:4f:d5:70:
59:e5:37:22:82:b3:47:1b:44:33:f7:44:cf:ef:5a:87:3a:51:
df:de:e0:60:9e:57:6d:64:13:f3:6e:6c:09:f9:8a:ca:4d:4c:
96:f0:b4:63:58:47:39:6d:0a:7f:d7:25:12:ed:8f:10:66:bd:
76:26:73:a3
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKvCtYSSGFugjzQdx2JnfyVqhvxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMjgxMTU3NDZaFw0yNzEwMjcxMjAyNDZaMDMxMTAvBgNV
BAMTKDEwMkE1MzZBRjk3MTY5QkI0MkUzQjFGNjYzMUY5NEY4QzA1RDM2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8KjVYEGllDMtgDNFaXw9jIH1
Wit1QkB9G3KBtKVxJ/yfFiKfmkvCQGkeIiSTPxZ3FdBd54tz0UXE5ZGaJ85ymSeg
In3CQQgOAGOxfw/5Naj0aeqH8ftbNgbCXNimIxf+YKJCtSLVXkBmDPxm2nrU4GrW
LJsq/R0QOGo1acIOITNEVmlrRPWB1lZoaUHxr7xwNaHu66t4lN7zbZ7p5Z26y4k1
NZRoVj4v0WvOG/ACZvJbvF05pLQKgJjKFjoRp4oNPKPKzCcdcZJ/AIsiLXUD/q1L
evcCRPA2svN2/tVjgKW64rDE8DwNXd9eMl1KvmTWPKe+ikZXfQ9jLENsg6qNAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUECpTavlxabtC47H2Yx+U+MBdNr0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnY8zANBgkqhkiG9w0BAQsFAAOCAQEAb4yrvpYqVS/B5pRWLozT097M0FAS
U51c5eOIwO1OFVtVpPhPi1bT9Ejiog/VPgnZsqdmlm8Licjy3lp38rEufp9HmsPU
hNserdC28vXgVeH2neqUyPyH//3FXG4bOzjNyw3MJ87mx46rtRImcglFOZbEs4WO
RC3fTo+XaQEvTZF+1ytDAZCiVOxY1IjqAkL7jteT1NcRp0TurW/RC81Y8dD4ZqMa
iyJTxuZH9yZqZeG/es9IVOezJZswc7A1cEZWWCV2T9VwWeU3IoKzRxtEM/dEz+9a
hzpR397gYJ5XbWQT825sCfmKyk1MlvC0Y1hHOW0Kf9clEu2PEGa9diZzow==
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:15:31 2026 by rpki-client