Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa
File: 3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: zbsUYNJiBJhWDG/f8eMY14hs/POsCZONrfuDp5UM7Xs=
Subject key identifier: D9:E6:E0:09:E6:8A:DB:82:92:A3:0A:38:82:EB:F1:9C:C5:6F:28:6F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4A51022E95FEF86525EC20E002D0821DAFACAEC2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 14 Oct 2026 16:29:45 +0000
ROA not before: Wed 14 Oct 2026 16:24:45 +0000
ROA not after: Wed 13 Oct 2027 16:29:45 +0000
asID: 207137
IP address blocks: 217.216.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:51:02:2e:95:fe:f8:65:25:ec:20:e0:02:d0:82:1d:af:ac:ae:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 16:24:45 2026 GMT
Not After : Oct 13 16:29:45 2027 GMT
Subject: CN=D9E6E009E68ADB8292A30A3882EBF19CC56F286F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:3b:e7:74:80:ab:e8:14:c5:30:15:fe:19:
49:28:1e:92:f0:50:c6:13:5b:9f:87:3d:89:d9:60:
29:2e:f9:25:be:1c:29:6f:42:44:85:69:c4:21:be:
9f:1a:58:bd:f7:97:c8:4f:27:d6:d1:67:73:2b:f8:
53:b8:a3:c5:fc:64:e7:6e:49:04:67:39:c3:06:81:
39:c2:da:cb:70:06:7b:e5:6e:3e:69:5a:5d:75:84:
e7:fa:c6:fe:ad:a4:f3:ec:1f:19:83:a2:65:fd:09:
fc:27:82:0a:3b:16:69:b0:56:f1:ee:12:00:ff:e4:
8a:3f:a4:bf:f0:55:2b:75:28:46:d9:d5:b8:62:8d:
9d:5a:6d:ce:2d:6b:f0:33:fd:03:cb:c6:10:ed:e5:
b6:a0:06:79:6b:16:b4:44:d5:30:aa:d0:45:e7:d1:
28:0a:a7:2b:0d:de:6a:05:df:06:69:11:2f:94:42:
ac:66:6c:c1:c1:52:9a:a5:e5:61:35:25:34:6d:88:
59:36:03:ad:db:1c:bd:d2:93:67:d1:17:b6:67:e4:
e8:6e:2e:69:32:06:e6:2b:17:ed:08:c7:fc:f3:8f:
68:95:76:6d:42:47:5e:a6:ce:b8:4a:86:09:2d:15:
ba:1c:a0:7e:b8:f8:b1:ef:90:dd:79:c0:52:3d:85:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:E0:09:E6:8A:DB:82:92:A3:0A:38:82:EB:F1:9C:C5:6F:28:6F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e36392e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:de:6d:91:07:15:fe:8f:a0:e9:c5:7f:8a:2a:00:70:79:aa:
97:38:0d:24:36:1a:19:15:a6:b2:1a:e5:b7:3d:3e:9b:4d:bd:
97:8b:d3:5a:c2:06:fd:0b:9f:db:6e:0e:8d:25:ba:c1:1d:1c:
32:27:ab:3b:ac:2b:fe:24:99:a0:56:a0:70:35:8a:a2:02:cd:
ff:e7:97:a9:df:31:7b:9b:9d:86:68:ed:ab:47:26:c4:25:c1:
9f:95:2b:2f:1d:1c:bc:31:c0:83:16:b3:92:48:6b:80:1b:93:
7f:b1:94:ea:3b:ae:c2:e5:73:e8:02:02:f1:38:f4:a0:4d:74:
c2:e3:d3:2d:24:63:9d:f0:4c:f3:2a:32:3c:6b:a5:76:e7:b8:
d4:08:ca:a8:ac:bf:d0:9b:0a:7d:fc:8c:94:a1:e8:e9:06:15:
72:f0:70:9c:b7:89:72:f7:e5:aa:49:8e:ab:f3:57:17:e9:77:
3a:a8:1f:c9:23:37:03:8d:ef:61:37:46:28:5f:96:aa:a4:52:
93:6c:87:87:ca:5f:9b:d2:61:2a:da:9c:91:68:2d:39:c3:cf:
65:f7:66:8d:6b:b0:3b:bb:7d:86:08:4c:6d:1a:ef:31:6e:bf:
48:49:a5:94:12:13:9f:ee:8b:d4:d7:bd:6c:d0:4a:98:70:a1:
9a:4c:b9:23
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSlECLpX++GUl7CDgAtCCHa+srsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTQxNjI0NDVaFw0yNzEwMTMxNjI5NDVaMDMxMTAvBgNV
BAMTKEQ5RTZFMDA5RTY4QURCODI5MkEzMEEzODgyRUJGMTlDQzU2RjI4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrDvndICr6BTFMBX+GUkoHpLw
UMYTW5+HPYnZYCku+SW+HClvQkSFacQhvp8aWL33l8hPJ9bRZ3Mr+FO4o8X8ZOdu
SQRnOcMGgTnC2stwBnvlbj5pWl11hOf6xv6tpPPsHxmDomX9Cfwnggo7FmmwVvHu
EgD/5Io/pL/wVSt1KEbZ1bhijZ1abc4ta/Az/QPLxhDt5bagBnlrFrRE1TCq0EXn
0SgKpysN3moF3wZpES+UQqxmbMHBUpql5WE1JTRtiFk2A63bHL3Sk2fRF7Zn5Ohu
LmkyBuYrF+0Ix/zzj2iVdm1CR16mzrhKhgktFbocoH64+LHvkN15wFI9hYFHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU2ebgCeaK24KSowo4guvxnMVvKG8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM2
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2EUwDQYJKoZIhvcNAQELBQADggEBAD7ebZEHFf6PoOnFf4oqAHB5qpc4DSQ2
GhkVprIa5bc9PptNvZeL01rCBv0Ln9tuDo0lusEdHDInqzusK/4kmaBWoHA1iqIC
zf/nl6nfMXubnYZo7atHJsQlwZ+VKy8dHLwxwIMWs5JIa4Abk3+xlOo7rsLlc+gC
AvE49KBNdMLj0y0kY53wTPMqMjxrpXbnuNQIyqisv9CbCn38jJSh6OkGFXLwcJy3
iXL35apJjqvzVxfpdzqoH8kjNwON72E3RihflqqkUpNsh4fKX5vSYSranJFoLTnD
z2X3Zo1rsDu7fYYITG0a7zFuv0hJpZQSE5/ui9TXvWzQSphwoZpMuSM=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:27 2026 by rpki-client