Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa
File: 3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa (raw, json)
Hash identifier: b7KKsaztW3W4UHWnXEBpigqDybSTk0VHO7TJotAISFQ=
Subject key identifier: EE:55:04:AE:46:F5:50:57:14:3D:3D:83:37:A3:EA:70:20:93:B7:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A78C3E85BA6CF3393B7B969E11D1AD4F9A05F8E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa
Signing time: Wed 07 Oct 2026 13:29:39 +0000
ROA not before: Wed 07 Oct 2026 13:24:39 +0000
ROA not after: Wed 06 Oct 2027 13:29:39 +0000
asID: 141995
IP address blocks: 217.216.76.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 21:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:78:c3:e8:5b:a6:cf:33:93:b7:b9:69:e1:1d:1a:d4:f9:a0:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 7 13:24:39 2026 GMT
Not After : Oct 6 13:29:39 2027 GMT
Subject: CN=EE5504AE46F55057143D3D8337A3EA702093B7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:86:eb:b9:f6:58:b2:4c:da:89:c0:6f:a5:
fd:ac:7a:b6:87:59:be:fc:00:d7:79:3b:01:2f:b1:
b2:f9:fc:38:78:1c:4e:0c:87:48:ab:ec:a4:a7:fa:
b3:08:ee:4c:b5:bd:53:3d:75:8b:8c:f8:58:b2:c1:
31:c0:0b:f4:b0:11:8b:a2:7d:b5:4c:fe:ae:cd:e4:
85:c4:b9:00:9e:75:39:6f:a3:83:29:1e:40:7a:e5:
b0:be:46:96:a9:22:a3:40:4a:c5:10:86:dc:f1:84:
cb:d0:45:ff:33:6b:ce:c1:e2:69:25:dc:ef:54:59:
55:7f:04:99:39:16:fb:ef:77:94:ca:99:cc:45:66:
99:4c:85:ea:2f:a2:0e:77:4a:bc:7d:62:51:c7:c2:
5d:20:eb:26:05:b0:be:59:77:2b:44:d7:ae:82:33:
69:15:b7:da:2c:a7:cb:9d:d8:ee:30:f3:90:05:e8:
0b:87:07:88:5c:d0:d0:8f:e9:5f:01:af:c0:7b:0e:
86:23:a3:f0:f4:aa:57:97:f9:55:63:71:bb:15:7a:
47:81:3c:08:d8:95:18:8f:5b:1e:cd:d4:dc:d4:64:
d2:d4:ae:20:be:bc:44:73:fc:12:f1:0f:85:53:06:
69:7a:a7:f5:f4:0f:7d:a1:f9:d4:0b:dd:78:5f:ee:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:04:AE:46:F5:50:57:14:3D:3D:83:37:A3:EA:70:20:93:B7:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e37362e302f32332d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:cc:74:21:43:a6:1c:21:13:fd:c6:54:9b:e2:ca:1b:82:4d:
bc:ad:14:ae:0d:af:70:bd:c6:9c:00:51:30:bd:bd:9c:50:d5:
09:1b:7a:6e:80:a9:1b:6f:26:ad:77:b8:85:2d:61:51:d2:df:
8d:d4:09:37:bf:c6:f1:9d:3b:c7:1d:2b:dd:94:d7:72:88:2c:
0c:94:32:79:57:06:57:e5:ae:b1:47:f3:9c:bf:21:ae:85:9f:
5b:df:e1:d6:5b:dd:3a:32:bf:25:06:58:92:cf:9b:68:4e:aa:
d7:50:8f:96:41:ae:74:4a:bd:e9:3c:48:3a:16:cb:93:c4:46:
8f:0c:ac:a3:01:03:8e:74:e3:d8:7b:e6:77:7a:6b:e2:cf:4e:
8a:33:27:06:5e:6e:f1:2f:36:d2:df:ad:1f:d7:30:1f:d6:cd:
04:06:94:40:70:d2:05:b5:d4:d8:f1:97:c2:bd:f4:70:0b:12:
69:13:32:a1:81:e1:48:fa:3a:bc:5c:d6:fa:5e:08:c2:a8:45:
72:61:56:3b:5b:7c:84:e5:13:4a:34:ac:c3:74:60:d9:02:ff:
90:94:97:ee:58:fe:e0:15:09:c7:a0:c5:32:ee:08:f9:d0:81:
5c:bd:2b:ea:0a:9e:76:6d:f6:8d:2d:1a:ab:22:ac:43:2b:cc:
47:27:0c:e4
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUCnjD6FumzzOTt7lp4R0a1PmgX44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDcxMzI0MzlaFw0yNzEwMDYxMzI5MzlaMDMxMTAvBgNV
BAMTKEVFNTUwNEFFNDZGNTUwNTcxNDNEM0Q4MzM3QTNFQTcwMjA5M0I3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcYbrufZYskzaicBvpf2seraH
Wb78ANd5OwEvsbL5/Dh4HE4Mh0ir7KSn+rMI7ky1vVM9dYuM+FiywTHAC/SwEYui
fbVM/q7N5IXEuQCedTlvo4MpHkB65bC+RpapIqNASsUQhtzxhMvQRf8za87B4mkl
3O9UWVV/BJk5Fvvvd5TKmcxFZplMheovog53Srx9YlHHwl0g6yYFsL5ZdytE166C
M2kVt9osp8ud2O4w85AF6AuHB4hc0NCP6V8Br8B7DoYjo/D0qleX+VVjcbsVekeB
PAjYlRiPWx7N1NzUZNLUriC+vERz/BLxD4VTBml6p/X0D32h+dQL3Xhf7rWbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU7lUErkb1UFcUPT2DN6PqcCCTt+8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTM3
MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHZ2EwwDQYJKoZIhvcNAQELBQADggEBACvMdCFDphwhE/3GVJviyhuCTbytFK4N
r3C9xpwAUTC9vZxQ1Qkbem6AqRtvJq13uIUtYVHS343UCTe/xvGdO8cdK92U13KI
LAyUMnlXBlflrrFH85y/Ia6Fn1vf4dZb3ToyvyUGWJLPm2hOqtdQj5ZBrnRKvek8
SDoWy5PERo8MrKMBA45049h75nd6a+LPToozJwZebvEvNtLfrR/XMB/WzQQGlEBw
0gW11Njxl8K99HALEmkTMqGB4Uj6Orxc1vpeCMKoRXJhVjtbfITlE0o0rMN0YNkC
/5CUl+5Y/uAVCcegxTLuCPnQgVy9K+oKnnZt9o0tGqsirEMrzEcnDOQ=
-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:15 2026 by rpki-client