Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38332e302f32342d3234203d3e20313532313739.roa
File: 3231372e3231372e38332e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: F0oB4rv6XTnbU8am5/FBwYEtQ8TIBTlKJPQNKMSLi+g=
Subject key identifier: 40:0A:F5:08:2E:44:77:C7:1F:FA:B2:09:A9:97:54:5B:B6:73:2A:0C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03EE536746763860ECC24ABB04FE80B8F1EFC044
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38332e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 14 Oct 2026 07:51:03 +0000
ROA not before: Wed 14 Oct 2026 07:46:03 +0000
ROA not after: Wed 13 Oct 2027 07:51:03 +0000
asID: 152179
IP address blocks: 217.217.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ee:53:67:46:76:38:60:ec:c2:4a:bb:04:fe:80:b8:f1:ef:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 07:46:03 2026 GMT
Not After : Oct 13 07:51:03 2027 GMT
Subject: CN=400AF5082E4477C71FFAB209A997545BB6732A0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:fe:af:66:17:30:c4:e6:5f:cd:2e:a3:77:
eb:22:18:f1:1d:08:2f:cb:e8:49:9b:28:9b:b6:4c:
0c:a4:dd:49:3d:16:66:83:87:86:3c:8e:22:a5:a6:
16:93:5a:4a:1e:01:8c:67:97:41:83:34:49:36:bc:
09:ee:8d:29:dd:ce:fa:e2:6e:1a:8c:eb:b7:b2:28:
c2:f4:5a:33:70:cc:ae:9e:ef:47:c9:a7:67:8c:e5:
71:e9:08:f4:f7:d9:12:b9:ec:36:55:dd:79:fe:9f:
4b:48:cc:da:fa:66:f8:41:50:58:31:83:43:ff:62:
81:08:d1:9f:2f:b0:b0:c2:fe:b9:ce:73:1c:24:c6:
4a:29:b4:e3:fc:4f:de:93:bb:c4:bd:04:ad:e3:34:
f0:06:7b:a2:8f:3b:b0:ff:0f:47:69:6f:c4:ab:c5:
9d:fd:95:2d:c5:6d:12:01:d5:8b:a3:48:ef:1e:55:
91:0e:96:ab:e9:0b:2d:e5:33:8f:b7:7f:3c:9a:a3:
d0:01:1d:ca:e1:2f:ca:e0:e5:5e:66:ee:8b:f7:65:
19:4c:b6:17:63:e2:d3:fa:ae:07:f5:de:e0:26:77:
30:20:19:ad:ee:be:4b:b1:cc:7f:b2:fe:f7:d2:0f:
c4:e3:41:35:16:50:28:0c:1b:2b:5d:60:e8:96:ad:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:F5:08:2E:44:77:C7:1F:FA:B2:09:A9:97:54:5B:B6:73:2A:0C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38332e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:fd:5e:1e:32:96:92:24:bf:43:f6:b3:29:cf:1a:45:43:c6:
dc:f1:89:8d:1b:e3:2f:aa:95:f5:09:3b:47:3a:51:29:2a:97:
7b:e5:e9:bb:0b:cd:75:d0:9a:88:d1:1c:6f:0c:0a:80:bb:4c:
e8:df:2d:63:c0:0d:c1:0e:1a:23:14:4b:f7:84:3b:67:49:ac:
ea:72:26:cc:db:71:19:2b:57:2e:5b:67:bf:df:97:2a:1c:b3:
8e:b5:1a:8c:39:a6:ba:2e:84:c7:78:ae:01:61:3d:2d:a9:bb:
17:70:28:e4:aa:5b:3f:e7:ca:6b:63:5c:61:53:f6:e4:f2:24:
66:c1:1c:9e:43:5c:93:a2:59:f0:71:8c:0a:a7:b2:aa:78:ce:
a3:06:b2:96:0d:24:43:40:d1:90:a3:34:e3:58:f8:02:6b:5e:
99:21:c6:3e:29:a9:2a:0b:a3:db:5b:f1:73:ce:85:fb:2e:cb:
71:79:60:67:23:9e:c4:5b:ce:38:58:c7:a8:53:9e:94:18:86:
c2:26:6f:5a:b3:25:fb:fd:8f:d5:58:ba:8c:2f:9c:0c:39:a0:
37:1a:4e:18:24:76:16:e6:01:1a:91:01:f0:53:24:80:be:af:
dc:5b:c3:1f:88:bf:e0:73:26:46:11:91:13:2f:b5:69:0d:73:
eb:93:3a:11
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUA+5TZ0Z2OGDswkq7BP6AuPHvwEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTQwNzQ2MDNaFw0yNzEwMTMwNzUxMDNaMDMxMTAvBgNV
BAMTKDQwMEFGNTA4MkU0NDc3QzcxRkZBQjIwOUE5OTc1NDVCQjY3MzJBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUP6vZhcwxOZfzS6jd+siGPEd
CC/L6EmbKJu2TAyk3Uk9FmaDh4Y8jiKlphaTWkoeAYxnl0GDNEk2vAnujSndzvri
bhqM67eyKML0WjNwzK6e70fJp2eM5XHpCPT32RK57DZV3Xn+n0tIzNr6ZvhBUFgx
g0P/YoEI0Z8vsLDC/rnOcxwkxkoptOP8T96Tu8S9BK3jNPAGe6KPO7D/D0dpb8Sr
xZ39lS3FbRIB1YujSO8eVZEOlqvpCy3lM4+3fzyao9ABHcrhL8rg5V5m7ov3ZRlM
thdj4tP6rgf13uAmdzAgGa3uvkuxzH+y/vfSD8TjQTUWUCgMGytdYOiWreThAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUQAr1CC5Ed8cf+rIJqZdUW7ZzKgwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMTM3Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2VMwDQYJKoZIhvcNAQELBQADggEBACz9Xh4ylpIkv0P2synPGkVDxtzxiY0b
4y+qlfUJO0c6USkql3vl6bsLzXXQmojRHG8MCoC7TOjfLWPADcEOGiMUS/eEO2dJ
rOpyJszbcRkrVy5bZ7/flyocs461Gow5prouhMd4rgFhPS2puxdwKOSqWz/nymtj
XGFT9uTyJGbBHJ5DXJOiWfBxjAqnsqp4zqMGspYNJENA0ZCjNONY+AJrXpkhxj4p
qSoLo9tb8XPOhfsuy3F5YGcjnsRbzjhYx6hTnpQYhsImb1qzJfv9j9VYuowvnAw5
oDcaThgkdhbmARqRAfBTJIC+r9xbwx+Iv+BzJkYRkRMvtWkNc+uTOhE=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:34:36 2026 by rpki-client