Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39302e302f32342d3234203d3e20313939353530.roa
File: 3231372e3231372e39302e302f32342d3234203d3e20313939353530.roa (raw, json)
Hash identifier: oWaPwjcsuvNP2jwf7OLJswIrZMb77eqWFBGXE1gIE/g=
Subject key identifier: DC:4B:24:37:4F:F4:95:1A:F5:CA:E5:72:EA:30:3C:52:9F:CD:CB:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2EC54075516A8167C1A77FAED7C6953BABBE600C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39302e302f32342d3234203d3e20313939353530.roa
Signing time: Tue 13 Oct 2026 20:11:37 +0000
ROA not before: Tue 13 Oct 2026 20:06:37 +0000
ROA not after: Tue 12 Oct 2027 20:11:37 +0000
asID: 199550
IP address blocks: 217.217.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c5:40:75:51:6a:81:67:c1:a7:7f:ae:d7:c6:95:3b:ab:be:60:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 20:06:37 2026 GMT
Not After : Oct 12 20:11:37 2027 GMT
Subject: CN=DC4B24374FF4951AF5CAE572EA303C529FCDCB5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:c8:8d:70:c5:69:99:b0:3b:22:b1:47:02:
dd:48:e8:98:f9:be:01:57:6f:38:aa:ec:bb:75:f8:
10:63:6c:ad:60:90:e1:0d:4a:6b:e1:38:6b:7a:16:
80:16:cc:09:ce:5c:16:5c:24:6c:36:74:f6:86:f6:
51:6a:e8:99:d8:c2:11:97:63:3b:fd:92:ba:5f:c6:
17:b0:41:1b:3a:82:50:c9:1b:24:6e:a8:b2:98:e3:
b9:b1:28:f0:b5:9e:8b:6e:b6:00:89:05:81:22:9f:
ba:b3:49:51:64:f7:58:1c:25:96:23:5d:29:b4:83:
a3:43:3a:12:35:a1:86:ec:d5:b5:0f:b0:34:8e:b4:
25:25:36:4e:97:f9:43:f6:10:9e:77:a5:e6:b9:e6:
5d:48:88:04:4a:6d:28:55:94:bb:bf:8c:d0:90:53:
b9:c1:0c:64:7b:7f:c0:01:82:bd:b9:49:69:3f:cc:
69:80:a7:b0:8c:35:3b:b4:02:1f:ca:25:53:b9:32:
02:5a:c3:be:3f:ee:d5:78:f9:60:a4:fa:5b:bd:36:
68:48:aa:25:4c:59:87:18:f5:9f:de:5c:ca:3d:44:
63:bd:43:90:55:18:34:b6:3b:99:24:ab:c0:7b:80:
6f:aa:3b:7b:f2:8b:18:a2:6e:40:61:d8:c3:9f:e0:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:24:37:4F:F4:95:1A:F5:CA:E5:72:EA:30:3C:52:9F:CD:CB:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e39302e302f32342d3234203d3e20313939353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.90.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:ac:40:68:f1:7b:32:30:22:51:d1:be:be:ef:2e:ec:55:
8c:c2:04:2e:18:0b:e3:dd:f8:bb:d5:f3:7a:29:85:d1:bc:5f:
8d:8f:20:72:e5:e0:dd:9c:1e:ca:28:f9:b2:6e:59:ff:ea:1d:
80:2e:f3:98:2f:33:b9:d5:dc:9f:1b:b6:50:a1:0f:93:4a:33:
eb:a6:65:cc:ed:65:17:5b:50:13:b9:4d:59:53:c7:91:68:84:
f7:a7:0f:0a:21:81:53:c3:89:81:16:de:5e:d0:d7:47:36:9f:
36:57:e3:dd:21:b9:b2:4b:27:90:0a:5d:b5:25:65:9e:75:e5:
ec:dd:10:3b:98:13:ce:20:1c:5d:e2:bc:57:06:24:63:66:71:
60:ed:9a:93:f5:6c:41:4b:81:6b:68:d1:7f:00:a4:00:30:76:
9c:21:1d:a1:56:61:88:fc:35:f1:37:1b:8b:3c:ea:01:fd:90:
8f:90:71:56:a8:be:3e:03:dd:76:b5:dd:3f:b1:11:14:49:15:
59:73:f9:27:c4:86:99:d5:4d:fe:0d:ef:ee:c9:8f:31:eb:69:
63:0f:69:5d:b9:aa:13:18:fd:f6:77:20:77:e1:32:18:a4:c4:
7d:94:a7:b2:9d:3d:a7:5c:70:4b:a2:a4:0f:38:98:b9:1b:5a:
e0:da:cc:13
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULsVAdVFqgWfBp3+u18aVO6u+YAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTMyMDA2MzdaFw0yNzEwMTIyMDExMzdaMDMxMTAvBgNV
BAMTKERDNEIyNDM3NEZGNDk1MUFGNUNBRTU3MkVBMzAzQzUyOUZDRENCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorciNcMVpmbA7IrFHAt1I6Jj5
vgFXbziq7Lt1+BBjbK1gkOENSmvhOGt6FoAWzAnOXBZcJGw2dPaG9lFq6JnYwhGX
Yzv9krpfxhewQRs6glDJGyRuqLKY47mxKPC1notutgCJBYEin7qzSVFk91gcJZYj
XSm0g6NDOhI1oYbs1bUPsDSOtCUlNk6X+UP2EJ53pea55l1IiARKbShVlLu/jNCQ
U7nBDGR7f8ABgr25SWk/zGmAp7CMNTu0Ah/KJVO5MgJaw74/7tV4+WCk+lu9NmhI
qiVMWYcY9Z/eXMo9RGO9Q5BVGDS2O5kkq8B7gG+qO3vyixiibkBh2MOf4DFfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU3EskN0/0lRr1yuVy6jA8Up/Ny1wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM5
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzNTM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2VowDQYJKoZIhvcNAQELBQADggEBAJVkrEBo8XsyMCJR0b6+7y7sVYzCBC4Y
C+Pd+LvV83ophdG8X42PIHLl4N2cHsoo+bJuWf/qHYAu85gvM7nV3J8btlChD5NK
M+umZcztZRdbUBO5TVlTx5FohPenDwohgVPDiYEW3l7Q10c2nzZX490hubJLJ5AK
XbUlZZ515ezdEDuYE84gHF3ivFcGJGNmcWDtmpP1bEFLgWto0X8ApAAwdpwhHaFW
YYj8NfE3G4s86gH9kI+QcVaovj4D3Xa13T+xERRJFVlz+SfEhpnVTf4N7+7JjzHr
aWMPaV25qhMY/fZ3IHfhMhikxH2Up7KdPadccEuipA84mLkbWuDazBM=
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:32 2026 by rpki-client