Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38342e302f32342d3234203d3e20323138393131.roa
File: 3231372e3231372e38342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: 0IAc18OX4hafyZ1QB8Ovp8f7zF5ikObf0blEUOYbYFQ=
Subject key identifier: 7A:CD:39:96:D6:86:98:D3:80:C5:38:5B:6A:31:7E:33:32:F7:62:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E60CF910D47FDAD501B413194C2E2D2C7C243E8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38342e302f32342d3234203d3e20323138393131.roa
Signing time: Sat 10 Oct 2026 19:45:59 +0000
ROA not before: Sat 10 Oct 2026 19:40:59 +0000
ROA not after: Sat 09 Oct 2027 19:45:59 +0000
asID: 218911
IP address blocks: 217.217.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:cf:91:0d:47:fd:ad:50:1b:41:31:94:c2:e2:d2:c7:c2:43:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 19:40:59 2026 GMT
Not After : Oct 9 19:45:59 2027 GMT
Subject: CN=7ACD3996D68698D380C5385B6A317E3332F76238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:f5:06:c5:71:7c:37:96:c4:a0:84:40:b0:
fe:86:e0:64:55:9e:61:db:93:85:a1:6f:62:89:52:
11:97:bd:46:02:17:c1:f3:c3:58:04:91:b3:c1:b4:
ca:cf:8a:ac:a9:9a:3e:67:7c:c4:4b:d2:41:d0:c0:
cf:63:0f:95:b4:83:c2:5a:bf:1e:8f:19:c5:10:59:
e4:2e:c8:db:9e:f9:76:e0:02:5b:08:08:1e:14:75:
b0:00:82:5c:d1:ef:90:8e:6e:d7:83:95:e2:c9:d8:
cb:20:09:c1:0b:07:26:e0:8b:2c:31:a9:f0:7a:b4:
06:df:5d:14:d5:ce:d0:16:05:6e:cd:dd:26:9a:d4:
1e:89:93:f1:c0:a6:f3:cd:07:02:3c:d6:69:0b:11:
f9:5c:4b:93:1b:03:bf:bb:46:8a:b7:35:99:14:59:
5e:5d:6c:a2:05:4a:74:60:82:55:dd:82:54:ac:93:
a6:e2:dc:98:ef:31:05:d6:d2:84:20:92:e6:dc:14:
e1:d3:17:23:64:26:6b:5f:d2:e9:01:e9:b0:01:ec:
c2:d6:b4:2b:0c:1a:ea:ff:00:26:b7:c9:ee:8d:fb:
5d:32:ba:5e:9c:42:d3:c2:2f:fe:99:21:43:62:cc:
b8:59:4c:fd:12:79:59:00:b7:cd:a0:a7:38:08:eb:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:39:96:D6:86:98:D3:80:C5:38:5B:6A:31:7E:33:32:F7:62:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38342e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5e:f2:6a:49:03:56:be:8c:bc:f9:09:7f:f6:bc:fe:d7:54:
56:d5:18:0c:c0:ed:20:50:57:b5:64:37:c3:f0:96:1c:8c:12:
23:a7:1c:34:25:55:1a:e8:97:74:0d:6a:4c:dd:ed:84:d8:4e:
ac:5f:83:7e:52:4d:7b:dc:f9:0e:fd:22:d2:92:26:74:cb:de:
64:95:b8:8d:7a:f8:9a:05:21:39:e6:01:d8:4f:29:5e:cd:f8:
3c:cd:59:1e:35:82:2e:23:8f:1b:c5:c2:83:1b:e0:1d:8b:b4:
51:6d:bb:c9:10:96:2c:67:5c:70:b3:39:84:90:54:d6:29:4d:
9c:6b:8e:b4:51:49:6e:19:8e:9b:4d:5a:56:8d:ed:8a:30:d2:
ca:20:34:96:1a:1e:c2:24:54:a7:ae:98:0f:95:9d:5b:4c:17:
5a:54:22:61:fb:65:d4:08:bb:5e:73:c6:a9:36:f8:cd:47:34:
cd:a8:57:7a:04:d2:92:31:7b:84:a4:a8:c7:38:b9:7f:a4:3d:
6f:6a:30:c9:67:34:c8:9d:80:6e:cf:48:34:0e:3c:76:80:65:
11:1a:8e:bd:5a:e4:3c:4d:a1:cb:54:1c:37:df:70:f3:02:d2:
a9:82:c5:64:55:bc:fb:d2:2c:b7:2a:a2:78:e7:17:96:9e:7c:
4a:78:eb:2e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTmDPkQ1H/a1QG0ExlMLi0sfCQ+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTAxOTQwNTlaFw0yNzEwMDkxOTQ1NTlaMDMxMTAvBgNV
BAMTKDdBQ0QzOTk2RDY4Njk4RDM4MEM1Mzg1QjZBMzE3RTMzMzJGNzYyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+vUGxXF8N5bEoIRAsP6G4GRV
nmHbk4Whb2KJUhGXvUYCF8Hzw1gEkbPBtMrPiqypmj5nfMRL0kHQwM9jD5W0g8Ja
vx6PGcUQWeQuyNue+XbgAlsICB4UdbAAglzR75CObteDleLJ2MsgCcELBybgiywx
qfB6tAbfXRTVztAWBW7N3Saa1B6Jk/HApvPNBwI81mkLEflcS5MbA7+7Roq3NZkU
WV5dbKIFSnRgglXdglSsk6bi3JjvMQXW0oQgkubcFOHTFyNkJmtf0ukB6bAB7MLW
tCsMGur/ACa3ye6N+10yul6cQtPCL/6ZIUNizLhZTP0SeVkAt82gpzgI6wFtAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUes05ltaGmNOAxThbajF+MzL3YjgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzOTMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2VQwDQYJKoZIhvcNAQELBQADggEBAF1e8mpJA1a+jLz5CX/2vP7XVFbVGAzA
7SBQV7VkN8PwlhyMEiOnHDQlVRrol3QNakzd7YTYTqxfg35STXvc+Q79ItKSJnTL
3mSVuI16+JoFITnmAdhPKV7N+DzNWR41gi4jjxvFwoMb4B2LtFFtu8kQlixnXHCz
OYSQVNYpTZxrjrRRSW4ZjptNWlaN7Yow0sogNJYaHsIkVKeumA+VnVtMF1pUImH7
ZdQIu15zxqk2+M1HNM2oV3oE0pIxe4SkqMc4uX+kPW9qMMlnNMidgG7PSDQOPHaA
ZREajr1a5DxNoctUHDffcPMC0qmCxWRVvPvSLLcqonjnF5aefEp46y4=
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:33 2026 by rpki-client