Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e20383334.roa
File: 3231372e3231362e3138342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: yOWpV7bhYPDclwAB//GTjnFm7pZ6hr73MmYh/4fvLss=
Subject key identifier: FA:32:FD:F4:C2:1F:B5:36:E6:42:22:CE:1C:1B:7C:32:89:57:31:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 628350421E50A766111A052F96BD2AC6225A2915
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e20383334.roa
Signing time: Thu 10 Sep 2026 11:26:29 +0000
ROA not before: Thu 10 Sep 2026 11:21:29 +0000
ROA not after: Thu 09 Sep 2027 11:26:29 +0000
asID: 834
IP address blocks: 217.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:83:50:42:1e:50:a7:66:11:1a:05:2f:96:bd:2a:c6:22:5a:29:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 11:21:29 2026 GMT
Not After : Sep 9 11:26:29 2027 GMT
Subject: CN=FA32FDF4C21FB536E64222CE1C1B7C3289573174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:ca:df:5d:9c:bb:0c:f2:d4:1c:54:4c:a5:
e6:ac:e9:61:4e:4e:f8:2e:84:c7:fe:1d:09:7c:72:
df:1d:b5:51:9c:61:82:6d:d1:f9:73:45:45:84:c4:
8e:5b:c1:f6:5a:f2:cd:53:bd:36:78:a6:ab:10:92:
ea:10:16:60:00:b4:02:5f:56:dd:dd:f2:71:ef:cb:
3a:b2:b9:be:c9:5e:7f:dd:0a:e0:b0:76:89:ed:94:
35:39:40:99:2a:c9:4e:3c:3a:66:41:23:c7:ff:cf:
8f:a7:60:32:5e:6e:2e:d6:1e:c8:7c:dd:88:af:cb:
21:fa:03:a8:6a:04:3d:76:ca:00:10:bc:ee:09:94:
c5:c4:c3:03:0e:78:a0:86:6b:47:6a:be:6a:bb:f6:
6b:59:e9:6a:ca:2f:80:1a:f9:7f:2d:36:28:b9:c7:
3f:4a:bb:e6:de:da:7c:05:88:a7:ad:90:04:b2:bd:
33:c9:65:47:25:cc:8e:20:16:3d:76:fa:c1:43:d2:
02:b6:b0:ee:c6:99:41:11:bd:67:8d:0a:ca:93:68:
7d:f2:bb:24:e2:10:bb:c2:46:64:37:f2:b4:12:32:
c3:08:3e:12:7e:a5:c8:b3:eb:35:4e:df:c6:2f:4a:
11:b4:23:5a:3a:76:9f:9e:9b:c2:2c:db:c2:1e:49:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:FD:F4:C2:1F:B5:36:E6:42:22:CE:1C:1B:7C:32:89:57:31:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3138342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
13:d4:d7:1f:68:f6:2b:3d:d9:90:81:98:31:2a:9f:7e:30:35:
fd:d4:f6:15:ec:78:24:5b:55:48:43:9d:aa:34:ed:31:a8:56:
fe:dc:2e:83:3b:83:73:7f:4c:43:88:1a:4b:3f:05:31:66:ea:
f0:99:31:50:47:62:44:75:67:5b:ae:f7:0c:e1:24:92:0b:22:
c0:3d:1f:de:0c:99:7a:9a:1e:a0:d9:c2:b2:07:95:77:a9:02:
5a:64:66:97:a8:a6:b4:b7:1f:7b:bf:b7:45:37:5f:f3:bb:9c:
da:80:d8:a7:63:6c:fc:99:82:41:52:cc:3b:1c:5d:96:0e:38:
73:6d:21:69:24:7c:ad:5a:a9:95:5b:8f:4d:29:0f:50:cd:a7:
3f:b7:48:b7:db:7a:31:b1:4f:ad:ec:f1:48:aa:27:ce:ea:34:
46:5c:0d:ee:46:ba:c7:cf:df:aa:61:b1:74:6c:96:c8:28:d3:
7e:93:a1:0b:0a:e2:a6:c6:17:05:75:7d:4c:f6:d4:74:2e:89:
a0:cd:93:ee:a7:4b:5c:10:b4:11:9c:3e:1b:f3:10:36:ed:94:
5e:45:48:73:3c:1a:58:b6:cb:54:57:59:25:a6:4a:7c:3a:85:
02:94:c2:27:a4:c7:dc:3a:f4:09:32:17:b3:9e:d3:e9:86:a4:
ac:fd:b4:06
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYoNQQh5Qp2YRGgUvlr0qxiJaKRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAxMTIxMjlaFw0yNzA5MDkxMTI2MjlaMDMxMTAvBgNV
BAMTKEZBMzJGREY0QzIxRkI1MzZFNjQyMjJDRTFDMUI3QzMyODk1NzMxNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5MrfXZy7DPLUHFRMpeas6WFO
TvguhMf+HQl8ct8dtVGcYYJt0flzRUWExI5bwfZa8s1TvTZ4pqsQkuoQFmAAtAJf
Vt3d8nHvyzqyub7JXn/dCuCwdontlDU5QJkqyU48OmZBI8f/z4+nYDJebi7WHsh8
3YivyyH6A6hqBD12ygAQvO4JlMXEwwMOeKCGa0dqvmq79mtZ6WrKL4Aa+X8tNii5
xz9Ku+be2nwFiKetkASyvTPJZUclzI4gFj12+sFD0gK2sO7GmUERvWeNCsqTaH3y
uyTiELvCRmQ38rQSMsMIPhJ+pciz6zVO38YvShG0I1o6dp+em8Is28IeSa2jAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+jL99MIftTbmQiLOHBt8MolXMXQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzgzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9nY
uDANBgkqhkiG9w0BAQsFAAOCAQEAE9TXH2j2Kz3ZkIGYMSqffjA1/dT2Fex4JFtV
SEOdqjTtMahW/twugzuDc39MQ4gaSz8FMWbq8JkxUEdiRHVnW673DOEkkgsiwD0f
3gyZepoeoNnCsgeVd6kCWmRml6imtLcfe7+3RTdf87uc2oDYp2Ns/JmCQVLMOxxd
lg44c20haSR8rVqplVuPTSkPUM2nP7dIt9t6MbFPrezxSKonzuo0RlwN7ka6x8/f
qmGxdGyWyCjTfpOhCwripsYXBXV9TPbUdC6JoM2T7qdLXBC0EZw+G/MQNu2UXkVI
czwaWLbLVFdZJaZKfDqFApTCJ6TH3Dr0CTIXs57T6YakrP20Bg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:58 2026 by rpki-client