Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231372e3232332e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: NBT3K90SLWKZhYqCTr4MfLDPCjMsWDVEn4c49JU68JM=
Subject key identifier: 28:D0:AD:12:A6:6A:2A:74:7F:62:EE:CA:0C:5C:DE:8A:88:52:3D:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 30FE0CEC5A0CB9FA170A06CE276C9FE1BC9A9004
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20323138393131.roa
Signing time: Fri 23 Oct 2026 12:30:30 +0000
ROA not before: Fri 23 Oct 2026 12:25:30 +0000
ROA not after: Fri 22 Oct 2027 12:30:30 +0000
asID: 218911
IP address blocks: 217.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fe:0c:ec:5a:0c:b9:fa:17:0a:06:ce:27:6c:9f:e1:bc:9a:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 23 12:25:30 2026 GMT
Not After : Oct 22 12:30:30 2027 GMT
Subject: CN=28D0AD12A66A2A747F62EECA0C5CDE8A88523D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:1b:69:d2:8a:8b:e4:8c:f4:b6:6c:55:f2:
ba:23:33:22:96:6c:8f:9b:40:01:0b:53:3c:0b:0b:
83:c7:ac:e1:98:ee:64:46:df:75:2e:3e:0c:cb:26:
85:36:6e:ef:c1:23:57:b5:a7:d6:e1:92:f5:f7:63:
78:31:bf:a3:5f:08:6a:e1:55:40:55:fb:3e:72:a5:
42:45:9c:41:d4:14:ab:24:f7:f0:96:a9:7f:9f:27:
b5:e3:c3:b4:50:d6:9e:2f:38:e4:b1:b1:83:a3:6c:
9b:8c:69:c8:eb:16:6d:d0:a7:66:f8:c0:2f:44:37:
13:43:5a:12:64:bd:70:c7:4a:a7:04:ee:dc:e9:e4:
00:36:1b:02:ef:93:47:01:b7:b5:71:08:c0:f9:d1:
b1:d8:59:e8:a4:a7:7a:6c:75:9f:4d:f8:eb:c3:0c:
1f:19:5a:e7:a9:f8:92:0c:d0:d3:ce:2a:d1:51:cd:
69:5d:62:3d:7f:1f:75:9f:b2:fc:64:27:c1:bf:16:
c2:0f:81:b4:db:dd:20:22:07:45:fe:ce:92:f2:5c:
3f:8c:6d:98:74:4d:9a:c4:28:34:45:f6:3a:66:2f:
c6:5f:2e:da:ab:22:03:56:42:7a:36:9b:62:4e:c9:
6d:54:bd:25:a1:bd:f9:dd:5f:b1:71:18:0f:69:d7:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:AD:12:A6:6A:2A:74:7F:62:EE:CA:0C:5C:DE:8A:88:52:3D:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f5:5d:21:03:bc:0d:97:b5:dc:52:6c:f9:77:35:ea:61:d1:
e2:8d:37:e7:7a:d4:02:6e:f7:3f:85:23:a9:ac:de:71:07:62:
3e:0c:20:70:26:2e:06:3d:c6:b9:52:ae:26:00:a4:a3:9b:af:
92:f1:aa:ee:b9:ec:0f:bf:95:84:42:5b:bb:30:51:9c:d1:1c:
5a:f4:b1:05:b8:d7:8a:62:f4:66:2c:07:66:bd:79:89:35:4a:
be:8f:c9:f1:c1:ed:84:ec:6d:b6:88:15:9b:bb:64:a2:6a:c2:
f1:c6:f9:bc:92:ab:a4:e1:09:9b:d8:26:2f:59:0f:0b:8d:cd:
80:42:a7:bd:33:d7:ea:95:29:b2:77:c1:ff:00:af:ee:06:cb:
40:74:db:0b:88:9e:73:93:00:f6:65:41:7c:58:d8:2d:a0:4f:
ea:a5:67:5d:34:71:28:c3:4b:87:21:a1:b8:b7:77:ce:ab:0c:
62:a3:05:04:c7:0b:2a:4b:78:9c:3a:9f:c6:75:62:0d:e4:e5:
7a:7a:7a:2c:7a:20:a6:3d:49:21:c7:9d:1e:8e:f2:2a:92:f0:
69:b2:17:9b:72:fb:b8:1a:c3:2a:e4:44:25:ca:58:2c:e6:34:
09:04:c1:10:fd:ae:1f:0e:4d:e0:e8:b7:cc:93:fe:30:32:bd:
b0:1e:16:62
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMP4M7FoMufoXCgbOJ2yf4byakAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMjMxMjI1MzBaFw0yNzEwMjIxMjMwMzBaMDMxMTAvBgNV
BAMTKDI4RDBBRDEyQTY2QTJBNzQ3RjYyRUVDQTBDNUNERThBODg1MjNEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmxtp0oqL5Iz0tmxV8rojMyKW
bI+bQAELUzwLC4PHrOGY7mRG33UuPgzLJoU2bu/BI1e1p9bhkvX3Y3gxv6NfCGrh
VUBV+z5ypUJFnEHUFKsk9/CWqX+fJ7Xjw7RQ1p4vOOSxsYOjbJuMacjrFm3Qp2b4
wC9ENxNDWhJkvXDHSqcE7tzp5AA2GwLvk0cBt7VxCMD50bHYWeikp3psdZ9N+OvD
DB8ZWuep+JIM0NPOKtFRzWldYj1/H3WfsvxkJ8G/FsIPgbTb3SAiB0X+zpLyXD+M
bZh0TZrEKDRF9jpmL8ZfLtqrIgNWQno2m2JOyW1UvSWhvfndX7FxGA9p16IpAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUKNCtEqZqKnR/Yu7KDFzeiohSPQAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM5MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZ3zANBgkqhkiG9w0BAQsFAAOCAQEADfVdIQO8DZe13FJs+Xc16mHR4o03
53rUAm73P4UjqazecQdiPgwgcCYuBj3GuVKuJgCko5uvkvGq7rnsD7+VhEJbuzBR
nNEcWvSxBbjXimL0ZiwHZr15iTVKvo/J8cHthOxttogVm7tkomrC8cb5vJKrpOEJ
m9gmL1kPC43NgEKnvTPX6pUpsnfB/wCv7gbLQHTbC4iec5MA9mVBfFjYLaBP6qVn
XTRxKMNLhyGhuLd3zqsMYqMFBMcLKkt4nDqfxnViDeTlenp6LHogpj1JIcedHo7y
KpLwabIXm3L7uBrDKuREJcpYLOY0CQTBEP2uHw5N4Oi3zJP+MDK9sB4WYg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:00 2026 by rpki-client