Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130302e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231362e3130302e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: NGk9d41FSoeBApU16xfllR3pOid3aiS4lBi+Wf4cK4w=
Subject key identifier: 4C:2B:8F:E1:21:EB:F5:80:60:5F:DB:5E:40:84:3E:DF:F0:5A:FC:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36B36560B38D787023F67FC1387DD125A68572F6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130302e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 31 Aug 2026 14:28:30 +0000
ROA not before: Mon 31 Aug 2026 14:23:30 +0000
ROA not after: Mon 30 Aug 2027 14:28:30 +0000
asID: 137409
IP address blocks: 217.216.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b3:65:60:b3:8d:78:70:23:f6:7f:c1:38:7d:d1:25:a6:85:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 14:23:30 2026 GMT
Not After : Aug 30 14:28:30 2027 GMT
Subject: CN=4C2B8FE121EBF580605FDB5E40843EDFF05AFC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:68:4f:0b:76:5b:04:74:fe:64:3a:40:27:
61:8e:40:bf:4e:8e:3d:eb:6c:28:bc:9c:af:5d:fc:
df:ed:62:90:46:88:7a:a3:5f:c3:be:58:8d:0e:39:
55:30:ac:bf:f7:b8:7c:6c:b2:eb:82:41:40:b7:4b:
25:c0:2d:62:3f:b5:3c:d4:cf:7b:d1:d7:bf:7d:fd:
aa:1b:b3:72:83:8b:29:b6:c5:92:84:f7:86:62:48:
11:21:25:a5:02:38:1c:9d:da:b5:e2:f4:e3:d6:a3:
8e:f1:6a:5c:c2:9f:58:35:27:99:9f:82:d5:08:0f:
35:0e:32:f7:33:6f:fc:43:d8:a9:56:2a:c1:ae:e7:
d4:4b:53:01:c4:ad:9b:a2:a1:8b:23:a6:55:c6:df:
60:a9:62:02:49:02:f6:7f:0f:1b:6a:6b:b7:b4:8f:
19:51:17:28:4f:28:3b:8a:9b:9d:26:4c:e1:db:d2:
0f:dc:d7:85:1c:79:7f:df:21:d5:12:d4:80:6e:96:
65:43:19:30:78:96:34:b1:61:a0:04:d7:fa:20:51:
43:f4:fa:1a:63:7a:2e:e5:ea:48:ec:7f:41:a6:38:
be:0d:81:65:86:19:76:d5:d2:f4:62:65:e8:28:a1:
02:93:54:73:6a:ae:57:b5:c7:b2:ad:6a:f5:d7:02:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2B:8F:E1:21:EB:F5:80:60:5F:DB:5E:40:84:3E:DF:F0:5A:FC:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130302e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e2:ed:37:72:0d:1e:0a:5b:42:63:48:f3:1e:9b:25:94:0f:
09:4b:4f:db:dc:78:15:84:f0:2d:da:0d:aa:b9:0e:1f:a0:1c:
fb:ab:63:e3:8a:09:8e:1a:ff:4d:4a:e6:d4:07:7d:d0:db:6c:
a7:d1:77:7b:db:47:83:24:48:b9:17:33:ab:c0:9b:9e:02:e3:
80:ff:5d:a1:af:04:af:36:45:f4:b1:31:a8:62:64:d9:6c:61:
58:04:ff:88:5a:fb:e0:4d:c2:1c:03:4c:e1:cd:63:d5:c0:87:
89:8e:bf:23:36:5e:93:c8:7b:71:53:5f:82:1b:3a:92:a3:f7:
08:a5:b1:ae:3b:07:86:7b:6f:37:87:d0:8b:a6:ce:20:ac:72:
f6:c7:b2:97:53:f6:cf:bf:6b:6e:13:63:f9:cd:f3:cd:a1:fa:
76:73:fe:3c:96:d2:18:ea:63:07:cb:67:c0:84:7a:65:92:76:
4d:27:be:0a:58:21:40:db:c7:4d:22:2f:8a:e9:4d:ad:12:ab:
25:d7:21:6f:43:3b:4f:3b:8a:2d:1e:e8:26:47:e4:91:a6:b1:
aa:87:87:4b:97:11:3f:58:b7:43:ca:aa:9e:ec:04:1e:42:d1:
59:d7:5e:60:ef:1f:c6:07:95:20:b7:41:d1:f3:77:0f:67:f3:
ad:37:75:ef
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNrNlYLONeHAj9n/BOH3RJaaFcvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MzExNDIzMzBaFw0yNzA4MzAxNDI4MzBaMDMxMTAvBgNV
BAMTKDRDMkI4RkUxMjFFQkY1ODA2MDVGREI1RTQwODQzRURGRjA1QUZDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UWhPC3ZbBHT+ZDpAJ2GOQL9O
jj3rbCi8nK9d/N/tYpBGiHqjX8O+WI0OOVUwrL/3uHxssuuCQUC3SyXALWI/tTzU
z3vR1799/aobs3KDiym2xZKE94ZiSBEhJaUCOByd2rXi9OPWo47xalzCn1g1J5mf
gtUIDzUOMvczb/xD2KlWKsGu59RLUwHErZuioYsjplXG32CpYgJJAvZ/Dxtqa7e0
jxlRFyhPKDuKm50mTOHb0g/c14UceX/fIdUS1IBulmVDGTB4ljSxYaAE1/ogUUP0
+hpjei7l6kjsf0GmOL4NgWWGGXbV0vRiZegooQKTVHNqrle1x7KtavXXAurBAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUTCuP4SHr9YBgX9teQIQ+3/Ba/DgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYZDANBgkqhkiG9w0BAQsFAAOCAQEAM+LtN3INHgpbQmNI8x6bJZQPCUtP
29x4FYTwLdoNqrkOH6Ac+6tj44oJjhr/TUrm1Ad90Ntsp9F3e9tHgyRIuRczq8Cb
ngLjgP9doa8ErzZF9LExqGJk2WxhWAT/iFr74E3CHANM4c1j1cCHiY6/IzZek8h7
cVNfghs6kqP3CKWxrjsHhntvN4fQi6bOIKxy9seyl1P2z79rbhNj+c3zzaH6dnP+
PJbSGOpjB8tnwIR6ZZJ2TSe+ClghQNvHTSIviulNrRKrJdchb0M7TzuKLR7oJkfk
kaaxqoeHS5cRP1i3Q8qqnuwEHkLRWddeYO8fxgeVILdB0fN3D2fzrTd17w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:12 2026 by rpki-client