Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139382e302f32342d3234203d3e20323135383137.roa
File: 3231372e3231372e3139382e302f32342d3234203d3e20323135383137.roa (raw, json)
Hash identifier: UrKAXVg6lUUUR2QGuRI232hJ9V9NbJBEAPEkgeijla0=
Subject key identifier: A3:29:C0:57:59:08:36:29:A6:77:32:60:6C:41:FB:9C:D6:9E:E2:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D6B7C8EF97D43CBFC23B379823EEE1565FE7F09
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139382e302f32342d3234203d3e20323135383137.roa
Signing time: Fri 09 Oct 2026 08:32:13 +0000
ROA not before: Fri 09 Oct 2026 08:27:13 +0000
ROA not after: Fri 08 Oct 2027 08:32:13 +0000
asID: 215817
IP address blocks: 217.217.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6b:7c:8e:f9:7d:43:cb:fc:23:b3:79:82:3e:ee:15:65:fe:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 08:27:13 2026 GMT
Not After : Oct 8 08:32:13 2027 GMT
Subject: CN=A329C05759083629A67732606C41FB9CD69EE281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:02:b5:60:c1:2d:77:d6:c7:24:b1:fe:b3:
63:11:73:02:1d:bb:99:1b:1d:aa:2d:2a:26:b8:1f:
ec:42:78:3a:1f:5d:16:7d:d4:17:59:66:ab:85:24:
7c:13:57:a4:6c:0f:0f:6f:7e:bc:b5:c0:db:9b:ec:
ec:45:4d:60:28:59:26:1d:af:72:c6:69:4d:3a:46:
8f:29:54:38:b1:e8:98:5a:e3:ff:e9:c1:19:1d:b5:
d6:45:98:4f:cd:6d:d0:1e:a3:a1:d7:21:c8:ae:a0:
46:1e:45:15:91:da:c9:91:1f:e8:4e:34:ea:ad:08:
b0:c6:94:9b:39:3e:bd:ba:fd:f6:46:00:e7:d8:34:
b8:ba:a3:5f:69:f1:2b:da:bd:1e:d8:e5:45:a7:db:
bb:3f:61:d7:93:46:e1:f6:19:5c:28:66:fe:a3:00:
e8:16:50:ac:1d:3b:13:cc:28:f5:56:be:e9:02:d1:
be:b1:8b:c6:f2:57:8d:1b:f1:26:19:0d:0d:9a:8a:
05:d3:c4:5a:7a:82:78:1b:5e:4c:00:9c:c2:cd:65:
5a:35:ed:04:f1:0a:fe:6b:65:82:90:38:fd:85:dd:
92:ab:8f:2c:0f:94:29:9b:62:8d:dc:7e:40:66:37:
9d:87:19:bf:e3:98:d1:d2:8a:be:e3:5f:ce:8e:c8:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:C0:57:59:08:36:29:A6:77:32:60:6C:41:FB:9C:D6:9E:E2:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139382e302f32342d3234203d3e20323135383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0f:fe:10:76:d6:c6:8f:eb:eb:c5:82:32:ed:8c:9e:e7:40:
12:03:3d:0f:91:ee:ba:dc:37:c6:99:80:34:49:2e:82:56:c2:
eb:2d:cb:47:ac:e1:c8:df:c0:f8:26:72:ca:8f:54:ab:e9:f5:
c0:3b:bc:25:8b:e3:dc:07:3c:eb:73:9b:3b:54:a3:fe:b8:fc:
58:0c:06:02:94:9e:db:4c:6a:01:81:be:b3:7c:55:80:12:2d:
a6:a4:9d:8a:92:9b:27:ad:36:e3:a2:91:79:58:8a:f0:1c:b0:
5a:50:7e:8d:37:6e:50:07:1f:02:99:34:04:42:5b:8f:8d:32:
5b:e9:2e:1e:15:c6:2a:d3:3b:99:a7:f6:f3:14:f7:79:e2:f0:
71:6a:35:84:e6:de:c2:a8:99:fc:f0:ee:51:5e:d0:69:40:29:
78:34:2a:a9:85:d7:1f:c1:f7:99:c0:6e:aa:f3:eb:4f:99:9e:
33:6e:5b:bd:f2:c6:54:d9:6d:57:04:ba:ee:75:3a:52:0e:8e:
b9:5c:c0:40:e0:94:66:1a:94:b2:c4:8a:ce:9d:97:83:61:c8:
0a:3f:d0:5e:82:43:29:45:97:3c:5e:8c:9f:4b:7e:53:78:77:
52:f3:93:32:b6:40:1b:25:ab:da:9a:fc:a3:79:f4:dd:c5:f7:
d3:b4:90:24
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIULWt8jvl9Q8v8I7N5gj7uFWX+fwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDkwODI3MTNaFw0yNzEwMDgwODMyMTNaMDMxMTAvBgNV
BAMTKEEzMjlDMDU3NTkwODM2MjlBNjc3MzI2MDZDNDFGQjlDRDY5RUUyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+QK1YMEtd9bHJLH+s2MRcwId
u5kbHaotKia4H+xCeDofXRZ91BdZZquFJHwTV6RsDw9vfry1wNub7OxFTWAoWSYd
r3LGaU06Ro8pVDix6Jha4//pwRkdtdZFmE/NbdAeo6HXIciuoEYeRRWR2smRH+hO
NOqtCLDGlJs5Pr26/fZGAOfYNLi6o19p8SvavR7Y5UWn27s/YdeTRuH2GVwoZv6j
AOgWUKwdOxPMKPVWvukC0b6xi8byV40b8SYZDQ2aigXTxFp6gngbXkwAnMLNZVo1
7QTxCv5rZYKQOP2F3ZKrjywPlCmbYo3cfkBmN52HGb/jmNHSir7jX86OyEdRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUoynAV1kINimmdzJgbEH7nNae4oEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM4MzEzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZxjANBgkqhkiG9w0BAQsFAAOCAQEASg/+EHbWxo/r68WCMu2MnudAEgM9
D5Huutw3xpmANEkuglbC6y3LR6zhyN/A+CZyyo9Uq+n1wDu8JYvj3Ac863ObO1Sj
/rj8WAwGApSe20xqAYG+s3xVgBItpqSdipKbJ60246KReViK8BywWlB+jTduUAcf
Apk0BEJbj40yW+kuHhXGKtM7maf28xT3eeLwcWo1hObewqiZ/PDuUV7QaUApeDQq
qYXXH8H3mcBuqvPrT5meM25bvfLGVNltVwS67nU6Ug6OuVzAQOCUZhqUssSKzp2X
g2HICj/QXoJDKUWXPF6Mn0t+U3h3UvOTMrZAGyWr2pr8o3n03cX307SQJA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:30:31 2026 by rpki-client