Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20383334.roa
File: 3231372e3231372e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EiMWHF1mz2C8IKf2xWivON7IymoqQLaFS+rtsVYtRMU=
Subject key identifier: F5:77:A0:D7:1F:CD:60:AA:F9:55:07:FB:C1:2C:AD:2B:B2:B7:4D:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06EFBDE4776AC08CB8034C5AC0573B3C364D97EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20383334.roa
Signing time: Fri 16 Oct 2026 19:20:22 +0000
ROA not before: Fri 16 Oct 2026 19:15:22 +0000
ROA not after: Fri 15 Oct 2027 19:20:22 +0000
asID: 834
IP address blocks: 217.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ef:bd:e4:77:6a:c0:8c:b8:03:4c:5a:c0:57:3b:3c:36:4d:97:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 19:15:22 2026 GMT
Not After : Oct 15 19:20:22 2027 GMT
Subject: CN=F577A0D71FCD60AAF95507FBC12CAD2BB2B74D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:73:59:2a:0a:5c:d2:16:2c:5a:82:34:f7:
41:6b:35:25:21:68:63:01:ab:40:ca:c6:02:59:54:
90:05:26:9f:15:8e:7d:e2:48:00:82:82:1d:92:b5:
23:2d:ed:cd:32:61:d2:91:b0:2e:13:cb:7f:ae:d4:
e9:e4:6f:c7:ee:03:38:8c:4c:12:03:b4:21:a8:3d:
11:bb:e6:ab:8e:2a:5d:12:ac:3d:5c:af:44:7a:ac:
ea:76:45:3b:b0:40:33:95:63:ad:ec:f8:d1:06:56:
30:41:9d:38:39:88:e7:a8:53:e8:9b:24:c8:8d:0a:
97:c7:b0:4c:16:8e:0a:b4:33:91:4b:ec:61:5b:71:
c6:98:35:6c:84:bf:da:d4:b0:22:4f:54:88:93:c1:
e9:dd:08:db:62:e7:be:10:54:a2:b1:c2:99:39:74:
95:a0:a4:d4:a8:d4:73:2f:f7:f7:a6:bf:2f:68:09:
a4:21:39:7a:38:a4:91:23:a1:a0:02:2b:94:e0:da:
39:21:94:09:68:d2:0c:77:ae:c1:d7:1d:38:9b:05:
ab:c3:67:c5:47:e7:e9:8e:43:29:e7:81:d7:f2:3e:
d0:be:45:83:f3:63:1a:5e:b8:c3:ee:f9:44:6e:0b:
05:22:d2:30:59:da:80:8c:ff:42:26:77:e6:f6:b7:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:A0:D7:1F:CD:60:AA:F9:55:07:FB:C1:2C:AD:2B:B2:B7:4D:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7e:a4:d0:77:e1:2e:19:e2:db:df:27:f6:b4:fa:b5:86:4e:
de:34:38:d2:9a:3f:67:db:63:bb:c0:0c:07:b0:c2:6a:ef:d0:
fd:7f:9b:66:6f:60:39:e9:5b:6f:71:aa:e5:22:ad:80:82:61:
53:98:88:f9:03:a5:7b:07:15:7b:67:5f:d9:28:9a:25:ca:b2:
99:2d:fc:9f:22:6c:19:7f:98:49:71:27:55:3c:49:bd:11:2a:
41:62:cb:3b:33:30:0f:21:28:5f:35:ed:20:07:75:c6:27:14:
3c:5f:42:d2:72:19:a7:75:7a:a8:13:39:d6:8a:8c:d4:e3:1b:
09:ac:c6:b9:d4:7a:d4:2a:5f:d6:ed:a9:14:4c:83:a1:9f:19:
cf:4d:ac:ba:4f:6d:23:80:dd:15:fd:50:84:58:1a:8e:a1:23:
24:47:c5:0b:84:23:35:8e:e2:e9:82:4a:7a:c6:18:48:7c:2f:
c8:ce:1c:bf:79:11:5b:ee:df:73:9f:4b:c9:84:00:a6:23:3a:
9b:71:f3:b5:bc:a8:5d:52:5b:99:b1:6a:06:54:b8:a7:fa:80:
71:20:cd:9c:24:5b:6a:30:95:4b:9a:51:75:f5:96:14:61:cf:
fc:47:a9:b0:af:c1:86:85:45:44:07:23:a7:87:91:f9:6a:20:
7d:f4:c4:0b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUBu+95HdqwIy4A0xawFc7PDZNl+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTYxOTE1MjJaFw0yNzEwMTUxOTIwMjJaMDMxMTAvBgNV
BAMTKEY1NzdBMEQ3MUZDRDYwQUFGOTU1MDdGQkMxMkNBRDJCQjJCNzREMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fXNZKgpc0hYsWoI090FrNSUh
aGMBq0DKxgJZVJAFJp8Vjn3iSACCgh2StSMt7c0yYdKRsC4Ty3+u1Onkb8fuAziM
TBIDtCGoPRG75quOKl0SrD1cr0R6rOp2RTuwQDOVY63s+NEGVjBBnTg5iOeoU+ib
JMiNCpfHsEwWjgq0M5FL7GFbccaYNWyEv9rUsCJPVIiTwendCNti574QVKKxwpk5
dJWgpNSo1HMv9/emvy9oCaQhOXo4pJEjoaACK5Tg2jkhlAlo0gx3rsHXHTibBavD
Z8VH5+mOQynngdfyPtC+RYPzYxpeuMPu+URuCwUi0jBZ2oCM/0Imd+b2t6/9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU9Xeg1x/NYKr5VQf7wSytK7K3TQowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANnZ
3zANBgkqhkiG9w0BAQsFAAOCAQEAG36k0HfhLhni298n9rT6tYZO3jQ40po/Z9tj
u8AMB7DCau/Q/X+bZm9gOelbb3Gq5SKtgIJhU5iI+QOlewcVe2df2SiaJcqymS38
nyJsGX+YSXEnVTxJvREqQWLLOzMwDyEoXzXtIAd1xicUPF9C0nIZp3V6qBM51oqM
1OMbCazGudR61Cpf1u2pFEyDoZ8Zz02suk9tI4DdFf1QhFgajqEjJEfFC4QjNY7i
6YJKesYYSHwvyM4cv3kRW+7fc59LyYQApiM6m3HztbyoXVJbmbFqBlS4p/qAcSDN
nCRbajCVS5pRdfWWFGHP/EepsK/BhoVFRAcjp4eR+WogffTECw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:34 2026 by rpki-client