Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: i8WsCqajKYThNOZWQNXtOyMKKpDHGeQLfAnYHjWqErM=
Subject key identifier: 43:A9:16:17:D4:4A:D1:2F:F7:2B:51:48:94:35:E7:9C:C4:E6:16:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D09F4AF918E8F8078BD64DBED2DC1B9593820B6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Oct 2026 15:57:53 +0000
ROA not before: Fri 30 Oct 2026 15:52:53 +0000
ROA not after: Fri 29 Oct 2027 15:57:53 +0000
asID: 834
IP address blocks: 217.217.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:09:f4:af:91:8e:8f:80:78:bd:64:db:ed:2d:c1:b9:59:38:20:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 15:52:53 2026 GMT
Not After : Oct 29 15:57:53 2027 GMT
Subject: CN=43A91617D44AD12FF72B51489435E79CC4E61685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:1f:aa:53:24:43:e2:cd:a1:8e:16:c7:f0:
f0:b9:1d:01:17:be:a3:2e:11:7d:14:f9:98:ba:7c:
b2:06:aa:28:ed:bd:46:25:ff:cd:29:ec:5b:f1:4b:
af:7e:de:5b:ea:17:42:96:05:1f:7c:63:23:39:fe:
d9:04:81:0c:a5:3a:8b:89:47:ed:db:a1:61:5e:8f:
e7:f2:dc:00:ee:f6:1a:10:86:82:7c:df:90:7d:a7:
7b:ab:8d:f5:a6:37:41:5c:56:db:3d:ef:86:0f:6f:
c9:04:43:c2:82:82:b4:a2:76:e7:34:e1:56:ba:f5:
6c:13:56:d7:12:03:76:e8:9d:b2:97:ca:95:09:5c:
4c:53:e7:ac:16:ca:85:80:26:12:98:01:38:be:b0:
58:d9:26:b2:04:22:5c:ed:95:72:f6:86:62:d3:ff:
76:34:21:a4:28:c6:f2:bc:3c:19:58:43:9c:55:d7:
b1:f6:ab:f1:6a:24:78:55:8a:be:2a:2e:c9:c8:e1:
bd:61:4d:9b:4d:91:09:f6:f2:b0:55:52:50:2c:9b:
33:05:52:df:d8:f9:5b:8f:ef:ac:e6:ba:d0:68:aa:
8a:e3:d0:39:53:b5:3c:d1:0c:61:37:6f:88:e8:8b:
c9:a8:a1:d1:96:79:16:8a:c0:10:5e:0f:78:a5:aa:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:16:17:D4:4A:D1:2F:F7:2B:51:48:94:35:E7:9C:C4:E6:16:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4f:a5:da:15:7c:6d:17:5a:af:83:c9:d2:91:11:1f:58:bc:
ff:9e:b0:ce:cb:11:99:30:44:b8:24:a3:63:3d:64:9e:5a:e3:
95:9f:9f:a5:4e:1b:bd:19:14:fb:ad:2f:38:8d:02:b9:7d:df:
dc:2e:30:1e:44:66:48:13:6d:bd:49:cf:fb:f7:28:19:c9:67:
1b:1a:d5:ee:5f:3d:db:2c:2c:7f:9b:4c:e9:52:88:21:ea:12:
c7:c9:c0:08:34:df:9f:a7:68:6e:5b:fb:c4:2b:9a:f7:6b:cb:
65:c3:e7:0a:b8:48:03:4d:d3:54:f6:f2:b6:b0:3c:77:a3:57:
95:6b:21:eb:1c:e7:59:ab:ff:68:21:28:02:0a:47:a7:91:0b:
89:b6:cb:65:27:3d:09:33:0e:5f:af:3e:49:4d:cf:db:96:30:
15:7a:c2:aa:40:fd:8c:3f:0b:d1:04:41:b4:5a:b4:0e:13:22:
cc:51:7c:a3:e9:c9:d2:5f:1a:64:c2:d9:50:6c:19:f8:99:1f:
2c:fc:79:62:a8:cf:ce:3d:f7:c5:78:27:98:07:d0:7e:dc:09:
a3:e1:1c:2d:a6:e4:e4:78:d0:3c:37:c3:62:cf:db:73:58:e5:
18:76:48:c9:f1:4f:c3:f3:35:30:4c:ff:a9:dd:ad:8d:f1:e3:
0b:44:37:db
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXQn0r5GOj4B4vWTb7S3BuVk4ILYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMzAxNTUyNTNaFw0yNzEwMjkxNTU3NTNaMDMxMTAvBgNV
BAMTKDQzQTkxNjE3RDQ0QUQxMkZGNzJCNTE0ODk0MzVFNzlDQzRFNjE2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNx+qUyRD4s2hjhbH8PC5HQEX
vqMuEX0U+Zi6fLIGqijtvUYl/80p7FvxS69+3lvqF0KWBR98YyM5/tkEgQylOouJ
R+3boWFej+fy3ADu9hoQhoJ835B9p3urjfWmN0FcVts974YPb8kEQ8KCgrSiduc0
4Va69WwTVtcSA3bonbKXypUJXExT56wWyoWAJhKYATi+sFjZJrIEIlztlXL2hmLT
/3Y0IaQoxvK8PBlYQ5xV17H2q/FqJHhVir4qLsnI4b1hTZtNkQn28rBVUlAsmzMF
Ut/Y+VuP76zmutBoqorj0DlTtTzRDGE3b4joi8moodGWeRaKwBBeD3ilqi+JAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUQ6kWF9RK0S/3K1FIlDXnnMTmFoUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
1zANBgkqhkiG9w0BAQsFAAOCAQEAPk+l2hV8bRdar4PJ0pERH1i8/56wzssRmTBE
uCSjYz1knlrjlZ+fpU4bvRkU+60vOI0CuX3f3C4wHkRmSBNtvUnP+/coGclnGxrV
7l892ywsf5tM6VKIIeoSx8nACDTfn6doblv7xCua92vLZcPnCrhIA03TVPbytrA8
d6NXlWsh6xznWav/aCEoAgpHp5ELibbLZSc9CTMOX68+SU3P25YwFXrCqkD9jD8L
0QRBtFq0DhMizFF8o+nJ0l8aZMLZUGwZ+JkfLPx5YqjPzj33xXgnmAfQftwJo+Ec
Labk5HjQPDfDYs/bc1jlGHZIyfFPw/M1MEz/qd2tjfHjC0Q32w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:29 2026 by rpki-client