Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e20383334.roa
File: 3231372e3231372e38382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: XSGuJfH3qVLjr8/GHYeAoWKI8+ynfPlhUdqare1f7yA=
Subject key identifier: 98:65:A9:42:81:81:BB:67:98:E7:04:D7:9D:DF:37:8F:3B:3A:A3:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28747C4D3F5021470D371C3DAB775E9385ACD51D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:41:13 +0000
ROA not before: Sat 14 Nov 2026 18:36:13 +0000
ROA not after: Sat 13 Nov 2027 18:41:13 +0000
asID: 834
IP address blocks: 217.217.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:74:7c:4d:3f:50:21:47:0d:37:1c:3d:ab:77:5e:93:85:ac:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 18:36:13 2026 GMT
Not After : Nov 13 18:41:13 2027 GMT
Subject: CN=9865A9428181BB6798E704D79DDF378F3B3AA300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:1d:88:b3:76:70:8d:2b:92:32:83:30:f2:
7f:1c:77:6b:1a:4b:bc:b1:a8:0e:6d:ea:84:af:cf:
14:81:e0:e1:75:83:13:1f:73:ae:3a:c3:98:e3:1a:
75:d2:eb:bd:2b:87:26:05:9a:b6:4b:58:4c:95:b0:
46:e2:cf:31:64:12:20:b3:1b:e8:70:41:41:cd:ba:
5d:25:c7:ac:fb:b3:5b:ce:e1:f4:09:72:22:cf:74:
ba:8d:28:60:b8:0c:4b:5f:3c:26:2e:5f:20:9d:b6:
6a:ff:b2:d9:35:cb:88:93:93:c2:7b:a7:3b:5c:f4:
62:44:c0:f8:ad:b5:99:83:26:c4:14:e7:03:b3:37:
cd:a8:1d:66:d8:30:d2:0b:02:db:35:8a:e1:0f:2c:
11:30:2d:20:c8:65:71:27:df:40:12:f3:61:07:e9:
da:9a:a8:75:d3:10:ce:47:43:fb:4a:be:5d:c0:bb:
2e:d5:b7:b0:18:f0:07:ad:aa:b2:06:c6:31:e1:16:
23:5e:1f:9a:b5:39:e4:e9:43:3a:c5:50:c9:f0:58:
9a:74:bc:36:21:c6:5d:5f:8b:7f:86:3c:e5:a0:b0:
c0:5c:1d:29:c8:41:ad:21:c4:42:b6:b2:b4:77:58:
0c:91:b2:6d:8e:ac:48:0b:46:ba:06:4f:25:aa:ad:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:A9:42:81:81:BB:67:98:E7:04:D7:9D:DF:37:8F:3B:3A:A3:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e38382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.88.0/23
Signature Algorithm: sha256WithRSAEncryption
92:a9:3d:ba:6f:54:90:30:7b:ec:7e:b7:5c:dd:17:f8:29:57:
df:9f:fa:a8:3e:dd:0b:ff:f6:c9:86:e0:6d:7e:14:cc:fb:20:
c1:aa:a3:f5:95:97:03:af:45:d4:87:fc:cc:50:21:22:23:4c:
9b:48:ad:1a:3f:6c:4b:09:94:7d:5f:6e:1b:7e:9f:68:f2:58:
76:b7:1e:6c:84:85:03:a0:bc:3d:94:3a:4d:70:fb:78:ff:18:
d6:bc:aa:bc:a0:d9:92:22:e6:37:bf:ed:c9:4a:64:bf:bf:3a:
2d:b6:dd:51:09:e9:8b:27:71:a2:f2:bc:ab:28:b7:c4:d9:37:
ae:cf:33:bc:cf:85:56:e9:bb:aa:0f:a3:ff:8b:6d:0b:0d:3b:
b1:64:47:26:83:8b:b2:8b:cc:af:59:52:15:82:77:22:44:8b:
11:94:71:7b:77:51:e1:d5:5e:1b:77:db:b4:84:a9:13:f5:39:
3f:16:57:2d:dc:81:ab:6b:42:2f:0f:b2:22:93:dc:d3:e9:d2:
ed:13:e6:de:77:19:02:4c:f0:be:cc:e0:20:6a:2b:dd:bb:a5:
6a:51:fd:0e:4d:2b:09:1a:ac:64:f2:70:2b:f9:e4:a1:d7:dc:
55:f4:b9:c1:df:ca:4f:a0:44:90:11:c2:10:b6:fb:b7:92:a5:
67:b3:96:c5
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUKHR8TT9QIUcNNxw9q3dek4Ws1R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjExMTQxODM2MTNaFw0yNzExMTMxODQxMTNaMDMxMTAvBgNV
BAMTKDk4NjVBOTQyODE4MUJCNjc5OEU3MDRENzlEREYzNzhGM0IzQUEzMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpex2Is3ZwjSuSMoMw8n8cd2sa
S7yxqA5t6oSvzxSB4OF1gxMfc646w5jjGnXS670rhyYFmrZLWEyVsEbizzFkEiCz
G+hwQUHNul0lx6z7s1vO4fQJciLPdLqNKGC4DEtfPCYuXyCdtmr/stk1y4iTk8J7
pztc9GJEwPittZmDJsQU5wOzN82oHWbYMNILAts1iuEPLBEwLSDIZXEn30AS82EH
6dqaqHXTEM5HQ/tKvl3Auy7Vt7AY8AetqrIGxjHhFiNeH5q1OeTpQzrFUMnwWJp0
vDYhxl1fi3+GPOWgsMBcHSnIQa0hxEK2srR3WAyRsm2OrEgLRroGTyWqrbvbAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUmGWpQoGBu2eY5wTXnd83jzs6owAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM4
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHZ2Vgw
DQYJKoZIhvcNAQELBQADggEBAJKpPbpvVJAwe+x+t1zdF/gpV9+f+qg+3Qv/9smG
4G1+FMz7IMGqo/WVlwOvRdSH/MxQISIjTJtIrRo/bEsJlH1fbht+n2jyWHa3HmyE
hQOgvD2UOk1w+3j/GNa8qryg2ZIi5je/7clKZL+/Oi223VEJ6YsncaLyvKsot8TZ
N67PM7zPhVbpu6oPo/+LbQsNO7FkRyaDi7KLzK9ZUhWCdyJEixGUcXt3UeHVXht3
27SEqRP1OT8WVy3cgatrQi8PsiKT3NPp0u0T5t53GQJM8L7M4CBqK927pWpR/Q5N
KwkarGTycCv55KHX3FX0ucHfyk+gRJARwhC2+7eSpWezlsU=
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:21:48 2026 by rpki-client