Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137392e302f32342d3234203d3e20313431373530.roa
File: 3231372e3231362e3137392e302f32342d3234203d3e20313431373530.roa (raw, json)
Hash identifier: 5O4ryjJFfv7R8AAWVglQYKlMtVg/O+HsdYaBWWswLJE=
Subject key identifier: 53:71:A5:D7:1F:5B:5C:CF:8A:63:D8:3F:CA:84:17:80:21:44:84:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55E599C39AB12163962742BB2FFA50B6459C58DB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137392e302f32342d3234203d3e20313431373530.roa
Signing time: Mon 05 Oct 2026 09:25:35 +0000
ROA not before: Mon 05 Oct 2026 09:20:35 +0000
ROA not after: Mon 04 Oct 2027 09:25:35 +0000
asID: 141750
IP address blocks: 217.216.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e5:99:c3:9a:b1:21:63:96:27:42:bb:2f:fa:50:b6:45:9c:58:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:35 2026 GMT
Not After : Oct 4 09:25:35 2027 GMT
Subject: CN=5371A5D71F5B5CCF8A63D83FCA8417802144848F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:e5:78:83:d2:04:2a:1d:6e:3b:16:a6:2a:
88:05:df:59:89:f8:c7:14:2c:36:d3:6c:99:e2:b2:
23:94:8c:69:55:ad:fc:5a:ed:9e:af:0c:8b:da:eb:
a4:d7:b0:e4:7d:90:2f:33:fe:09:56:47:ef:c2:0f:
ad:6e:84:47:25:a2:ca:16:00:6c:b8:b1:c1:e9:52:
18:80:76:e3:fd:9a:e8:a6:6d:11:4c:5e:af:18:af:
1e:91:d7:7a:01:ff:87:c1:6a:87:e9:7c:4e:b5:1c:
3b:49:f9:5c:2f:ed:fd:9c:9e:b2:b4:df:f5:a0:cd:
39:40:63:1f:c3:57:d8:ff:03:15:20:2b:87:57:cd:
71:7c:7e:74:a6:8f:51:d6:ed:0f:8d:b0:a5:5c:4d:
42:80:6b:fd:c1:61:b0:dc:75:32:9c:86:62:14:11:
28:6d:8f:b0:f5:7a:69:b5:da:68:1b:6e:60:ae:33:
75:f2:ae:77:18:6f:fc:db:ad:73:45:db:1d:27:56:
26:ed:9a:74:2c:05:f6:15:4c:5e:ee:f9:57:1c:18:
87:3e:57:db:08:b9:25:c8:f7:51:dd:b8:1f:45:9b:
c4:72:57:9d:19:d2:9f:1e:b1:93:67:0e:c1:dc:d4:
70:d5:ea:60:a1:85:13:68:98:f4:96:46:7a:e1:54:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:A5:D7:1F:5B:5C:CF:8A:63:D8:3F:CA:84:17:80:21:44:84:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3137392e302f32342d3234203d3e20313431373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a2:95:68:f6:d2:7c:46:47:ea:92:20:c6:0f:3e:97:32:2f:
bd:47:db:80:b9:7a:bc:98:60:aa:4c:93:a6:dc:55:ee:f8:d4:
ef:91:07:5e:f0:c8:3f:97:a8:ca:58:1a:a6:da:2c:62:ab:62:
25:4d:a5:5b:80:ad:f5:25:a7:43:06:4c:00:0a:cf:39:fd:34:
a2:25:01:a8:71:95:90:fa:19:8c:27:1c:3a:29:c7:99:3c:79:
2d:7c:fb:3d:ce:21:46:8a:41:47:d7:3d:43:12:1f:88:41:71:
39:55:22:68:09:0b:e0:dd:e3:75:78:b1:6c:b6:04:a2:81:53:
50:b9:79:e9:0a:9e:ee:4d:4d:86:51:ed:ff:7b:99:99:63:af:
9c:78:07:3d:2b:73:3d:19:80:8e:3c:87:f7:8d:dc:37:10:17:
38:60:f6:5f:1b:8d:20:1a:66:e2:e9:a5:31:7b:7b:13:ab:cf:
ae:1a:71:02:bb:49:d9:d9:15:90:8f:8e:a5:6c:a0:b4:e6:00:
38:91:05:9b:b9:e7:c8:d3:e5:a1:0d:41:4a:56:1e:1b:38:51:
f1:4a:c7:0a:1a:80:85:cb:53:cb:ab:74:2e:f6:33:9f:e9:cb:
ff:9b:86:42:fe:9d:91:53:8a:01:eb:f9:c1:b7:aa:0d:7a:18:
e9:f9:f6:ee
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUVeWZw5qxIWOWJ0K7L/pQtkWcWNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDUwOTIwMzVaFw0yNzEwMDQwOTI1MzVaMDMxMTAvBgNV
BAMTKDUzNzFBNUQ3MUY1QjVDQ0Y4QTYzRDgzRkNBODQxNzgwMjE0NDg0OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWiuV4g9IEKh1uOxamKogF31mJ
+McULDbTbJnisiOUjGlVrfxa7Z6vDIva66TXsOR9kC8z/glWR+/CD61uhEclosoW
AGy4scHpUhiAduP9muimbRFMXq8Yrx6R13oB/4fBaofpfE61HDtJ+Vwv7f2cnrK0
3/WgzTlAYx/DV9j/AxUgK4dXzXF8fnSmj1HW7Q+NsKVcTUKAa/3BYbDcdTKchmIU
EShtj7D1emm12mgbbmCuM3XyrncYb/zbrXNF2x0nVibtmnQsBfYVTF7u+VccGIc+
V9sIuSXI91HduB9Fm8RyV50Z0p8esZNnDsHc1HDV6mChhRNomPSWRnrhVC3vAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUU3Gl1x9bXM+KY9g/yoQXgCFEhI8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTM3MzUzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYszANBgkqhkiG9w0BAQsFAAOCAQEAnqKVaPbSfEZH6pIgxg8+lzIvvUfb
gLl6vJhgqkyTptxV7vjU75EHXvDIP5eoylgaptosYqtiJU2lW4Ct9SWnQwZMAArP
Of00oiUBqHGVkPoZjCccOinHmTx5LXz7Pc4hRopBR9c9QxIfiEFxOVUiaAkL4N3j
dXixbLYEooFTULl56Qqe7k1NhlHt/3uZmWOvnHgHPStzPRmAjjyH943cNxAXOGD2
XxuNIBpm4umlMXt7E6vPrhpxArtJ2dkVkI+OpWygtOYAOJEFm7nnyNPloQ1BSlYe
GzhR8UrHChqAhctTy6t0LvYzn+nL/5uGQv6dkVOKAev5wbeqDXoY6fn27g==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:08:45 2026 by rpki-client