Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32332d3233203d3e20323138393931.roa
File: 3231372e3231372e38302e302f32332d3233203d3e20323138393931.roa (raw, json)
Hash identifier: HBJn2MmmswF8xEWrDJ8UfCB8/Nq+h/qvcNwKmPRAqho=
Subject key identifier: 1B:ED:38:67:BF:4B:4E:32:43:20:17:A9:BB:68:13:44:AB:C1:9D:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46B0713389C9DE6B2AE0E9B40A9F7528A149C285
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32332d3233203d3e20323138393931.roa
Signing time: Sat 17 Oct 2026 19:45:05 +0000
ROA not before: Sat 17 Oct 2026 19:40:05 +0000
ROA not after: Sat 16 Oct 2027 19:45:05 +0000
asID: 218991
IP address blocks: 217.217.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b0:71:33:89:c9:de:6b:2a:e0:e9:b4:0a:9f:75:28:a1:49:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 19:40:05 2026 GMT
Not After : Oct 16 19:45:05 2027 GMT
Subject: CN=1BED3867BF4B4E32432017A9BB681344ABC19D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:87:8a:9d:9d:bb:b6:ad:99:4d:4b:b1:a6:
3e:44:43:d1:ac:78:85:56:20:d1:9c:11:80:d3:2b:
a3:2d:a1:13:7a:cc:ba:9b:28:9a:a1:fe:b5:51:25:
f6:e6:ef:68:53:74:1e:ce:c2:32:f1:fc:f0:02:b9:
18:90:b0:77:fb:df:9b:e9:f0:f5:b8:fd:d4:ad:22:
0d:b5:46:f7:f0:76:5c:76:da:50:68:57:bb:dd:bf:
fa:a3:28:da:ed:72:1f:5c:c6:51:6f:da:5d:71:45:
f0:1b:2c:6a:af:f5:a7:4a:f3:2f:3f:df:4f:2a:a2:
bb:0c:96:6d:56:1c:22:c2:d3:c1:4d:1f:ee:6a:a8:
70:69:0e:ef:b6:51:f3:85:8f:3c:c4:c7:8c:cf:3d:
c5:86:76:c0:3e:e3:d1:34:c0:28:b6:6d:0a:ef:ca:
5e:63:30:4f:94:b3:56:ec:e0:ef:0f:62:ba:7c:f7:
d7:b9:a8:fb:84:3e:6c:6e:5b:33:01:db:f1:67:df:
fb:40:4f:01:90:0b:d4:72:b2:a0:b4:f8:ed:ed:d9:
59:82:d3:de:fb:9d:80:82:75:6a:cf:9c:1a:1f:ea:
4d:03:f4:9b:fa:e8:a8:23:33:bf:76:45:ab:eb:0b:
8f:5a:48:24:8e:6a:92:04:4e:b6:e7:dc:5d:57:e4:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:38:67:BF:4B:4E:32:43:20:17:A9:BB:68:13:44:AB:C1:9D:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38302e302f32332d3233203d3e20323138393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:98:a1:4a:65:01:20:46:19:59:c6:88:b0:b4:a8:91:07:85:
82:88:98:6e:17:1d:ab:0f:a3:ea:6f:9e:24:55:01:e5:da:8a:
9e:64:27:2b:a5:03:f7:15:cc:65:14:1f:09:77:b6:32:4b:1d:
bb:28:71:26:fe:f7:43:98:11:42:2c:c1:bf:27:e1:74:16:ae:
e6:1c:02:4f:37:dc:24:a2:ba:4c:61:86:af:30:c9:61:8d:4d:
f7:ca:1f:83:b1:56:8c:38:36:83:03:00:0a:1d:33:41:31:5f:
ba:3e:15:f8:3e:05:9c:63:cd:f6:be:d8:ed:6a:fe:c9:2a:75:
56:27:6a:b5:a7:b8:a1:6a:84:16:70:86:00:1d:32:14:e0:53:
41:d9:78:b9:60:e9:28:46:62:51:9b:37:34:90:3d:ae:e1:71:
5c:79:20:1d:73:5f:9a:67:5b:89:ce:4b:20:3f:39:27:73:89:
a2:35:7b:01:f2:5a:94:1e:78:f0:5d:65:5f:f5:da:58:5d:50:
7b:85:92:92:0c:45:9f:18:cd:7c:ff:10:46:9a:cd:e3:6a:ba:
97:83:4b:3f:e2:53:f3:36:6e:12:7f:f8:c5:83:c9:ae:99:96:
39:d4:81:9d:47:f6:cc:30:1e:ed:7c:b3:55:c3:19:c0:a2:a3:
51:57:9a:3b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURrBxM4nJ3msq4Om0Cp91KKFJwoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTcxOTQwMDVaFw0yNzEwMTYxOTQ1MDVaMDMxMTAvBgNV
BAMTKDFCRUQzODY3QkY0QjRFMzI0MzIwMTdBOUJCNjgxMzQ0QUJDMTlEOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJh4eKnZ27tq2ZTUuxpj5EQ9Gs
eIVWINGcEYDTK6MtoRN6zLqbKJqh/rVRJfbm72hTdB7OwjLx/PACuRiQsHf735vp
8PW4/dStIg21Rvfwdlx22lBoV7vdv/qjKNrtch9cxlFv2l1xRfAbLGqv9adK8y8/
308qorsMlm1WHCLC08FNH+5qqHBpDu+2UfOFjzzEx4zPPcWGdsA+49E0wCi2bQrv
yl5jME+Us1bs4O8PYrp899e5qPuEPmxuWzMB2/Fn3/tATwGQC9RysqC0+O3t2VmC
0977nYCCdWrPnBof6k0D9Jv66KgjM792RavrC49aSCSOapIETrbn3F1X5LLzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUG+04Z79LTjJDIBepu2gTRKvBnZUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMxMzgzOTM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHZ2VAwDQYJKoZIhvcNAQELBQADggEBAE6YoUplASBGGVnGiLC0qJEHhYKImG4X
HasPo+pvniRVAeXaip5kJyulA/cVzGUUHwl3tjJLHbsocSb+90OYEUIswb8n4XQW
ruYcAk833CSiukxhhq8wyWGNTffKH4OxVow4NoMDAAodM0ExX7o+Ffg+BZxjzfa+
2O1q/skqdVYnarWnuKFqhBZwhgAdMhTgU0HZeLlg6ShGYlGbNzSQPa7hcVx5IB1z
X5pnW4nOSyA/OSdziaI1ewHyWpQeePBdZV/12lhdUHuFkpIMRZ8YzXz/EEaazeNq
upeDSz/iU/M2bhJ/+MWDya6ZljnUgZ1H9swwHu18s1XDGcCio1FXmjs=
-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:22 2026 by rpki-client