Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38372e302f32342d3234203d3e20313937323133.roa
File: 3231372e3231372e38372e302f32342d3234203d3e20313937323133.roa (raw, json)
Hash identifier: /RT1rnBYOAl4eqW+D5x0Ej+gU9G/KfRDzgM15svDsng=
Subject key identifier: 36:4F:F5:56:68:5F:EB:E6:8D:70:26:45:F8:D3:49:5E:70:6A:CC:06
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C934437474EB9932EA6A05E154B9564F9E95906
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38372e302f32342d3234203d3e20313937323133.roa
Signing time: Wed 07 Oct 2026 11:17:27 +0000
ROA not before: Wed 07 Oct 2026 11:12:27 +0000
ROA not after: Wed 06 Oct 2027 11:17:27 +0000
asID: 197213
IP address blocks: 217.217.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:93:44:37:47:4e:b9:93:2e:a6:a0:5e:15:4b:95:64:f9:e9:59:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 7 11:12:27 2026 GMT
Not After : Oct 6 11:17:27 2027 GMT
Subject: CN=364FF556685FEBE68D702645F8D3495E706ACC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:fd:fa:2c:62:3f:79:91:cf:42:31:e8:36:
a3:bb:44:d3:58:46:cc:a9:3e:42:1e:93:fb:59:0d:
97:c7:2d:4c:3c:4c:ea:e8:2b:89:c7:94:fd:87:c3:
26:f4:a4:7b:20:24:ef:9f:d1:0a:ad:1e:06:fc:d8:
ef:3a:b1:b1:e2:2d:88:b8:82:9e:86:3b:31:48:c0:
41:68:7b:43:fb:aa:6b:be:72:f9:ce:08:83:21:d5:
fd:ba:ad:2c:8d:f9:ad:57:61:72:cc:92:3e:1f:30:
1c:78:e0:b3:d4:74:39:b5:20:59:69:94:ff:d5:17:
cf:46:32:27:de:39:cc:82:9b:30:37:fc:a5:a0:49:
7b:af:5d:78:25:5f:af:57:e8:68:41:3f:ae:f4:90:
f9:0d:70:20:38:b8:0d:ce:e3:5c:e9:be:65:a7:c4:
09:e1:fa:72:69:16:55:0a:4f:e7:54:73:13:92:f9:
37:a4:f7:d5:c8:62:79:80:00:eb:37:3f:79:e9:3a:
ae:57:02:c1:b4:33:c1:90:ca:2b:12:17:7d:62:06:
66:b6:96:fd:c2:4e:c1:5d:a9:4e:74:6b:5e:2d:63:
2e:5c:f2:9e:30:b4:2d:be:79:05:4e:8e:cd:8d:e3:
9d:67:f4:b5:f8:a2:aa:8c:60:0e:24:ae:b7:aa:13:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4F:F5:56:68:5F:EB:E6:8D:70:26:45:F8:D3:49:5E:70:6A:CC:06
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38372e302f32342d3234203d3e20313937323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.87.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e3:cb:2c:74:78:7b:65:10:92:6f:41:a1:6e:c5:af:c0:fa:
81:20:32:35:b3:d5:a1:41:77:7c:29:a4:e0:5f:79:e7:b9:69:
7e:5c:0f:1d:ca:57:a6:56:48:d3:85:33:94:d1:c5:ea:44:79:
19:aa:87:1a:f1:60:92:30:f7:8a:44:79:70:ab:71:5b:a2:f6:
8d:e9:ba:1a:90:7d:74:4d:78:5b:93:f3:39:33:2e:b6:f5:19:
8b:5d:2e:1d:2d:95:5e:07:f7:69:61:3e:57:e8:b1:55:58:c2:
d6:7c:da:5a:a0:b5:5c:9d:90:65:7e:0f:56:81:00:14:3e:cc:
a8:16:8a:27:c8:75:62:77:bd:55:f1:f2:30:02:09:56:c4:56:
1c:41:90:5c:20:e4:54:5a:86:f1:01:74:fe:67:75:a1:55:e4:
46:81:a2:6b:10:21:46:e6:7b:0e:2f:8c:94:c9:02:16:e2:7d:
fc:86:f2:01:19:27:ac:67:60:95:d9:84:47:81:fe:5d:56:4a:
d7:a3:17:4c:3b:6e:78:c3:93:43:f6:24:aa:21:da:e0:8d:3a:
ca:3b:28:c9:c9:d8:bf:b7:39:c3:08:5d:c0:55:ff:7b:e7:35:
3d:53:fd:3b:ea:20:d6:dd:47:80:59:2d:44:44:18:7e:d3:a3:
4c:10:a0:15
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXJNEN0dOuZMupqBeFUuVZPnpWQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDcxMTEyMjdaFw0yNzEwMDYxMTE3MjdaMDMxMTAvBgNV
BAMTKDM2NEZGNTU2Njg1RkVCRTY4RDcwMjY0NUY4RDM0OTVFNzA2QUNDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVv36LGI/eZHPQjHoNqO7RNNY
RsypPkIek/tZDZfHLUw8TOroK4nHlP2Hwyb0pHsgJO+f0QqtHgb82O86sbHiLYi4
gp6GOzFIwEFoe0P7qmu+cvnOCIMh1f26rSyN+a1XYXLMkj4fMBx44LPUdDm1IFlp
lP/VF89GMifeOcyCmzA3/KWgSXuvXXglX69X6GhBP670kPkNcCA4uA3O41zpvmWn
xAnh+nJpFlUKT+dUcxOS+Tek99XIYnmAAOs3P3npOq5XAsG0M8GQyisSF31iBma2
lv3CTsFdqU50a14tYy5c8p4wtC2+eQVOjs2N451n9LX4oqqMYA4krreqEw3NAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUNk/1Vmhf6+aNcCZF+NNJXnBqzAYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczMjMxMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2VcwDQYJKoZIhvcNAQELBQADggEBAFnjyyx0eHtlEJJvQaFuxa/A+oEgMjWz
1aFBd3wppOBfeee5aX5cDx3KV6ZWSNOFM5TRxepEeRmqhxrxYJIw94pEeXCrcVui
9o3puhqQfXRNeFuT8zkzLrb1GYtdLh0tlV4H92lhPlfosVVYwtZ82lqgtVydkGV+
D1aBABQ+zKgWiifIdWJ3vVXx8jACCVbEVhxBkFwg5FRahvEBdP5ndaFV5EaBomsQ
IUbmew4vjJTJAhbiffyG8gEZJ6xnYJXZhEeB/l1WStejF0w7bnjDk0P2JKoh2uCN
Oso7KMnJ2L+3OcMIXcBV/3vnNT1T/TvqINbdR4BZLUREGH7To0wQoBU=
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:08 2026 by rpki-client