Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3235312e302f32342d3234203d3e203233303631.roa
File: 3231372e3231362e3235312e302f32342d3234203d3e203233303631.roa (raw, json)
Hash identifier: 2AcTQsSfmBR+0sO01Xld4Lf761qgPgLerQZViz5cIW8=
Subject key identifier: 9B:67:D7:AB:65:02:F5:37:A5:AB:C9:AB:39:71:92:A5:A4:43:47:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41AFC924365F5345F28CC06C4C47E17461B23629
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3235312e302f32342d3234203d3e203233303631.roa
Signing time: Sat 17 Oct 2026 11:36:58 +0000
ROA not before: Sat 17 Oct 2026 11:31:58 +0000
ROA not after: Sat 16 Oct 2027 11:36:58 +0000
asID: 23061
IP address blocks: 217.216.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:af:c9:24:36:5f:53:45:f2:8c:c0:6c:4c:47:e1:74:61:b2:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 11:31:58 2026 GMT
Not After : Oct 16 11:36:58 2027 GMT
Subject: CN=9B67D7AB6502F537A5ABC9AB397192A5A44347FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:41:86:44:4c:5a:56:f6:d9:cd:cd:0f:da:
ca:7c:42:aa:90:9d:0b:da:d8:2c:73:15:e6:08:d9:
a8:2e:6b:95:3b:39:c8:eb:98:72:c3:fe:da:23:de:
f0:08:75:d4:f2:c8:fa:4f:be:0d:69:05:e5:a1:6b:
27:3c:5a:f8:e6:94:45:75:a5:53:44:e8:4a:56:1f:
90:61:b8:5d:c9:fe:f9:a4:da:64:53:60:a5:cb:82:
22:5e:bf:f3:9e:80:e1:06:43:c6:4a:82:24:0b:21:
b6:40:f9:3f:ec:c9:5d:4f:73:ec:18:d2:99:b9:42:
e2:fd:75:3e:59:68:1e:12:1e:ec:be:0a:03:a7:ad:
59:e5:70:a8:fc:28:dd:ed:3b:98:0f:d5:6c:bd:8e:
cc:e5:b1:d0:c9:91:4c:1d:12:03:ef:5f:bd:45:54:
23:e3:1d:f6:81:06:dc:a5:e1:56:3c:1b:58:a0:4c:
e6:79:61:d0:c2:d7:ac:25:1a:b8:c4:85:7a:8a:a2:
7b:33:b2:b1:81:f9:0f:0e:54:3b:c6:14:28:6c:3d:
65:f8:e3:2e:bc:6d:cc:32:08:bb:ee:09:04:3f:dc:
77:0e:71:25:8b:c9:50:3a:5a:ed:a6:de:c8:12:4a:
56:26:b9:a9:d5:d4:92:ee:55:e2:2d:bf:c7:04:c1:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:D7:AB:65:02:F5:37:A5:AB:C9:AB:39:71:92:A5:A4:43:47:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3235312e302f32342d3234203d3e203233303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:78:44:8c:0a:95:e6:4e:b7:93:c4:59:de:00:93:54:5e:39:
ec:a9:af:c7:a3:bf:1a:87:6b:a0:9c:62:16:ab:fa:11:38:e0:
e7:c5:b7:7f:5c:4b:6c:33:2f:1e:63:30:17:cb:00:1f:e0:ba:
5e:28:ad:b4:96:c4:a3:cc:db:c1:10:de:76:43:4d:bb:8e:13:
3d:68:88:1a:36:46:2f:12:fc:36:cc:b7:9a:44:cd:10:75:00:
34:01:8a:0e:2d:b1:68:ac:6f:57:48:a4:8e:f8:b0:e6:6a:2a:
24:5f:c1:06:f8:21:b9:e6:03:a2:5f:33:d7:1b:33:be:da:1f:
ef:7f:b3:6a:b6:18:23:f2:8d:30:e6:a5:5e:71:50:69:89:39:
60:b0:30:dc:6b:76:41:20:a9:de:6f:b6:73:af:22:92:83:fe:
05:45:4b:d8:57:fd:c0:43:9b:81:e0:a5:7c:4c:0b:0a:f8:d6:
30:f5:02:c4:38:7d:dd:26:4e:3b:51:c8:ed:bc:55:53:3d:40:
aa:59:87:a1:da:7a:7d:3a:34:77:96:78:c5:8e:96:bd:fc:b8:
93:a1:1d:16:50:3f:1e:3b:8f:fa:fd:6b:ae:d8:b3:f0:77:5f:
1f:6b:31:4e:9e:69:23:5b:2b:4c:ac:f5:83:5e:5f:d0:79:8f:
a2:72:ad:e9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQa/JJDZfU0XyjMBsTEfhdGGyNikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTcxMTMxNThaFw0yNzEwMTYxMTM2NThaMDMxMTAvBgNV
BAMTKDlCNjdEN0FCNjUwMkY1MzdBNUFCQzlBQjM5NzE5MkE1QTQ0MzQ3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQEGGRExaVvbZzc0P2sp8QqqQ
nQva2CxzFeYI2agua5U7OcjrmHLD/toj3vAIddTyyPpPvg1pBeWhayc8WvjmlEV1
pVNE6EpWH5BhuF3J/vmk2mRTYKXLgiJev/OegOEGQ8ZKgiQLIbZA+T/syV1Pc+wY
0pm5QuL9dT5ZaB4SHuy+CgOnrVnlcKj8KN3tO5gP1Wy9jszlsdDJkUwdEgPvX71F
VCPjHfaBBtyl4VY8G1igTOZ5YdDC16wlGrjEhXqKonszsrGB+Q8OVDvGFChsPWX4
4y68bcwyCLvuCQQ/3HcOcSWLyVA6Wu2m3sgSSlYmuanV1JLuVeItv8cEwV/5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUm2fXq2UC9Telq8mrOXGSpaRDR/wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzMzMDM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2PswDQYJKoZIhvcNAQELBQADggEBAA14RIwKleZOt5PEWd4Ak1ReOeypr8ej
vxqHa6CcYhar+hE44OfFt39cS2wzLx5jMBfLAB/gul4orbSWxKPM28EQ3nZDTbuO
Ez1oiBo2Ri8S/DbMt5pEzRB1ADQBig4tsWisb1dIpI74sOZqKiRfwQb4IbnmA6Jf
M9cbM77aH+9/s2q2GCPyjTDmpV5xUGmJOWCwMNxrdkEgqd5vtnOvIpKD/gVFS9hX
/cBDm4HgpXxMCwr41jD1AsQ4fd0mTjtRyO28VVM9QKpZh6Haen06NHeWeMWOlr38
uJOhHRZQPx47j/r9a67Ys/B3Xx9rMU6eaSNbK0ys9YNeX9B5j6Jyrek=
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:22 2026 by rpki-client