Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233342e302f32342d3234203d3e203633393839.roa
File: 3231372e3231362e3233342e302f32342d3234203d3e203633393839.roa (raw, json)
Hash identifier: iEeXsR9ZcG+vHtYS/dDNLSFinBAvNr/KWgFBzkfavvc=
Subject key identifier: 85:98:09:A0:58:04:04:F4:06:19:F9:83:F0:1D:72:02:86:72:59:56
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1884F278F25BDC147DBA8E71A9299E01C46343BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233342e302f32342d3234203d3e203633393839.roa
Signing time: Mon 26 Oct 2026 12:52:43 +0000
ROA not before: Mon 26 Oct 2026 12:47:43 +0000
ROA not after: Mon 25 Oct 2027 12:52:43 +0000
asID: 63989
IP address blocks: 217.216.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:84:f2:78:f2:5b:dc:14:7d:ba:8e:71:a9:29:9e:01:c4:63:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 26 12:47:43 2026 GMT
Not After : Oct 25 12:52:43 2027 GMT
Subject: CN=859809A0580404F40619F983F01D720286725956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:af:9d:ee:b2:c7:c9:91:c5:05:91:9c:f9:
50:58:e3:b4:89:c3:ff:21:7e:d8:11:88:14:44:bb:
5b:a4:cc:1f:28:48:f3:fc:f8:62:46:71:63:91:fb:
a8:e5:33:29:31:35:50:b6:02:9a:db:95:1d:b0:1b:
51:22:e3:62:c7:1b:08:78:6d:92:df:10:83:b5:b5:
dd:df:ae:23:d7:54:98:6b:60:3f:85:2e:43:56:b6:
b9:e0:d0:c7:45:0d:b4:f5:ed:8c:f1:f2:4e:a5:32:
98:1a:c0:a0:69:9c:ae:bb:27:68:33:e2:7f:b1:0c:
29:3d:02:4d:f9:0f:b4:c6:9e:6c:f6:a2:aa:75:14:
f2:87:e5:09:bb:a6:9e:c4:12:f6:11:37:64:64:a6:
b5:91:c6:03:a1:54:2f:08:4f:e6:33:1d:e9:ea:02:
0b:d8:66:66:6c:8d:a5:2c:65:72:4a:fd:d1:72:95:
fd:5a:91:e8:05:1a:4d:3c:2f:67:46:57:88:25:ab:
a8:5c:fa:87:bf:7a:ee:29:bb:35:98:23:9a:c7:35:
5c:36:3b:32:79:1b:19:96:ee:06:8d:10:f8:35:4f:
26:a6:29:b1:eb:bf:c3:0a:f7:38:a4:08:3d:01:5f:
e9:2e:5d:8e:6d:28:d2:7f:7e:44:d6:4e:34:f3:31:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:98:09:A0:58:04:04:F4:06:19:F9:83:F0:1D:72:02:86:72:59:56
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3233342e302f32342d3234203d3e203633393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.234.0/24
Signature Algorithm: sha256WithRSAEncryption
52:af:a6:fc:e0:50:15:60:0d:f0:02:0b:3f:97:26:fd:94:46:
58:ca:96:2d:ba:fb:83:ec:a0:ee:38:3a:79:bd:40:49:ee:9e:
36:5a:f3:f3:15:58:7e:e2:e5:17:35:bb:e0:dd:68:5c:34:d5:
17:ad:0e:c3:6a:08:cb:7b:12:06:ce:4a:53:9b:9a:78:f5:3d:
8e:e4:e1:c0:aa:a0:65:99:7b:12:0e:c5:57:1a:92:44:42:14:
55:e2:d1:97:6f:d5:f2:46:22:01:a7:34:02:e4:86:39:b5:e5:
a8:8f:26:05:5d:17:a6:6e:dc:78:ea:39:7a:2e:a3:7b:6a:a5:
c3:f7:a8:06:1c:fa:44:99:99:5e:aa:b5:1a:dd:0c:8d:69:5d:
b0:2c:fd:4b:a0:48:2d:e5:5a:8d:1a:b9:1e:f4:3a:35:31:7c:
0c:9d:38:54:31:0b:39:51:3e:83:00:f8:d9:6a:5b:f7:89:32:
73:67:cd:72:8b:09:b8:45:2b:4a:97:b2:23:03:6e:5b:d7:d8:
e7:21:81:91:72:fa:d1:b3:c0:9b:b3:0f:ce:3b:d8:a1:a7:83:
08:64:d2:49:2a:23:6a:c0:e7:07:90:ec:52:3b:8d:ca:17:fa:
45:79:bd:ec:66:df:50:e7:a7:63:dc:d6:3c:0c:61:2f:9a:1a:
cc:20:49:1e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGITyePJb3BR9uo5xqSmeAcRjQ7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMjYxMjQ3NDNaFw0yNzEwMjUxMjUyNDNaMDMxMTAvBgNV
BAMTKDg1OTgwOUEwNTgwNDA0RjQwNjE5Rjk4M0YwMUQ3MjAyODY3MjU5NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMU6+d7rLHyZHFBZGc+VBY47SJ
w/8hftgRiBREu1ukzB8oSPP8+GJGcWOR+6jlMykxNVC2AprblR2wG1Ei42LHGwh4
bZLfEIO1td3friPXVJhrYD+FLkNWtrng0MdFDbT17Yzx8k6lMpgawKBpnK67J2gz
4n+xDCk9Ak35D7TGnmz2oqp1FPKH5Qm7pp7EEvYRN2RkprWRxgOhVC8IT+YzHenq
AgvYZmZsjaUsZXJK/dFylf1akegFGk08L2dGV4glq6hc+oe/eu4puzWYI5rHNVw2
OzJ5GxmW7gaNEPg1TyamKbHrv8MK9zikCD0BX+kuXY5tKNJ/fkTWTjTzMdMXAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUhZgJoFgEBPQGGfmD8B1yAoZyWVYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzOTM4Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2OowDQYJKoZIhvcNAQELBQADggEBAFKvpvzgUBVgDfACCz+XJv2URljKli26
+4PsoO44Onm9QEnunjZa8/MVWH7i5Rc1u+DdaFw01RetDsNqCMt7EgbOSlObmnj1
PY7k4cCqoGWZexIOxVcakkRCFFXi0Zdv1fJGIgGnNALkhjm15aiPJgVdF6Zu3Hjq
OXouo3tqpcP3qAYc+kSZmV6qtRrdDI1pXbAs/UugSC3lWo0auR70OjUxfAydOFQx
CzlRPoMA+NlqW/eJMnNnzXKLCbhFK0qXsiMDblvX2OchgZFy+tGzwJuzD8472KGn
gwhk0kkqI2rA5weQ7FI7jcoX+kV5vexm31Dnp2Pc1jwMYS+aGswgSR4=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:40:53 2026 by rpki-client