Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130322e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231362e3130322e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: HkbcHqnC7ZuA39pPNLFTEOGpJAW0F+n0i30OMaSmEjE=
Subject key identifier: DE:AC:E1:BC:6E:58:5D:13:8B:AD:A0:65:EA:F3:BA:C5:66:A1:40:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FEBF4E43CB9837612284657C4A3437D259727AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130322e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 31 Aug 2026 14:28:29 +0000
ROA not before: Mon 31 Aug 2026 14:23:29 +0000
ROA not after: Mon 30 Aug 2027 14:28:29 +0000
asID: 137409
IP address blocks: 217.216.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:eb:f4:e4:3c:b9:83:76:12:28:46:57:c4:a3:43:7d:25:97:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 14:23:29 2026 GMT
Not After : Aug 30 14:28:29 2027 GMT
Subject: CN=DEACE1BC6E585D138BADA065EAF3BAC566A1400E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:95:3f:a2:75:61:aa:29:85:35:36:e5:0c:e7:
67:1b:31:81:45:23:08:40:48:b3:bc:1d:96:ba:51:
da:51:5a:1a:59:c9:57:af:97:8e:db:b0:11:0c:97:
91:21:0f:de:c8:96:b7:85:78:12:fa:f6:c7:6b:27:
31:1b:54:a8:26:20:d3:5d:0b:70:a7:54:7a:14:ae:
50:4c:a6:97:94:99:1c:36:61:6a:7c:77:3e:04:60:
96:69:3c:83:cf:21:c5:21:f7:9d:fa:74:95:29:1d:
f7:52:10:fa:c1:0e:43:6f:f5:ce:e2:76:8a:dc:19:
32:d9:54:6e:e7:81:93:bd:e7:f6:d7:1d:16:77:1c:
07:62:98:18:76:7a:db:18:27:be:f4:5f:27:1d:33:
ed:f1:4f:fd:7a:90:90:88:92:84:c3:d0:97:ac:60:
1b:41:30:d4:16:6d:e8:cc:7a:af:f5:ec:3c:b8:25:
de:2c:5e:06:fe:2e:f2:ab:ee:fc:ba:75:e3:c7:51:
69:60:ac:1f:52:b1:91:c2:1c:ad:f0:01:c5:7a:f0:
7c:68:4b:ed:35:6d:ff:5f:07:8b:c8:c7:54:06:0d:
a6:cf:d1:4f:e7:ca:44:27:7d:2c:20:67:47:9c:63:
d2:b7:7d:9f:cf:21:e7:9e:61:5a:bc:4a:8a:0a:7c:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:E1:BC:6E:58:5D:13:8B:AD:A0:65:EA:F3:BA:C5:66:A1:40:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130322e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ea:c8:01:bb:c0:72:79:f9:cc:83:26:cf:c3:d4:2e:e3:81:
3e:09:c2:52:28:68:ce:51:f8:03:a4:b4:41:1f:23:8c:2c:42:
f2:e4:8f:9e:77:48:34:8b:86:df:75:c1:bb:93:90:95:90:c6:
a9:f1:1b:77:d7:2a:6d:06:8b:c3:62:4d:94:7c:96:a1:19:71:
2f:59:60:ff:2e:aa:9d:f4:20:98:27:a6:73:e3:9f:78:57:28:
5d:19:d8:75:ad:61:f1:0f:ab:46:b5:2f:ec:94:ba:f0:0e:1b:
2f:55:0c:1b:03:68:e2:b9:cb:b1:29:53:9a:fc:83:b0:6f:64:
36:59:3a:02:00:1b:ca:d4:75:95:ee:1d:ef:e8:08:1f:26:be:
35:50:42:f8:36:6d:ce:0f:c6:97:fa:26:93:43:f7:2f:9d:d2:
2e:a9:33:e5:43:5e:86:24:4a:33:f9:4b:a9:b0:41:6e:23:f5:
9e:ed:4b:47:f0:bb:b0:a1:b7:71:df:f1:13:6b:ea:9f:cd:e4:
df:98:5e:35:3d:a8:cc:1e:51:7f:19:98:fc:4c:a8:6e:26:fe:
d1:2a:9e:6b:a5:e3:a2:89:28:30:90:66:d7:87:7a:1e:da:13:
c9:15:c0:c7:7d:50:ea:9b:cc:40:8e:0a:26:64:cd:e1:73:30:
c9:31:2d:a0
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUb+v05Dy5g3YSKEZXxKNDfSWXJ68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MzExNDIzMjlaFw0yNzA4MzAxNDI4MjlaMDMxMTAvBgNV
BAMTKERFQUNFMUJDNkU1ODVEMTM4QkFEQTA2NUVBRjNCQUM1NjZBMTQwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIlT+idWGqKYU1NuUM52cbMYFF
IwhASLO8HZa6UdpRWhpZyVevl47bsBEMl5EhD97IlreFeBL69sdrJzEbVKgmINNd
C3CnVHoUrlBMppeUmRw2YWp8dz4EYJZpPIPPIcUh9536dJUpHfdSEPrBDkNv9c7i
dorcGTLZVG7ngZO95/bXHRZ3HAdimBh2etsYJ770XycdM+3xT/16kJCIkoTD0Jes
YBtBMNQWbejMeq/17Dy4Jd4sXgb+LvKr7vy6dePHUWlgrB9SsZHCHK3wAcV68Hxo
S+01bf9fB4vIx1QGDabP0U/nykQnfSwgZ0ecY9K3fZ/PIeeeYVq8SooKfEezAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU3qzhvG5YXROLraBl6vO6xWahQA4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYZjANBgkqhkiG9w0BAQsFAAOCAQEALOrIAbvAcnn5zIMmz8PULuOBPgnC
UihozlH4A6S0QR8jjCxC8uSPnndINIuG33XBu5OQlZDGqfEbd9cqbQaLw2JNlHyW
oRlxL1lg/y6qnfQgmCemc+OfeFcoXRnYda1h8Q+rRrUv7JS68A4bL1UMGwNo4rnL
sSlTmvyDsG9kNlk6AgAbytR1le4d7+gIHya+NVBC+DZtzg/Gl/omk0P3L53SLqkz
5UNehiRKM/lLqbBBbiP1nu1LR/C7sKG3cd/xE2vqn83k35heNT2ozB5RfxmY/Eyo
bib+0Sqea6XjookoMJBm14d6HtoTyRXAx31Q6pvMQI4KJmTN4XMwyTEtoA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:36:48 2026 by rpki-client