Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230362e302f32342d3234203d3e203332313637.roa
File: 3231372e3231362e3230362e302f32342d3234203d3e203332313637.roa (raw, json)
Hash identifier: I37Er+iLl47U5gXYERhg1ggcPYibGtltRaJ7Qhhw7ss=
Subject key identifier: A6:26:03:CF:E7:4C:96:1A:A9:F5:C5:76:97:47:0C:13:BF:12:B8:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1200B433E3D595C8FEED250D4A6838E4DD5ECAE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230362e302f32342d3234203d3e203332313637.roa
Signing time: Fri 18 Sep 2026 21:46:53 +0000
ROA not before: Fri 18 Sep 2026 21:41:53 +0000
ROA not after: Fri 17 Sep 2027 21:46:53 +0000
asID: 32167
IP address blocks: 217.216.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:00:b4:33:e3:d5:95:c8:fe:ed:25:0d:4a:68:38:e4:dd:5e:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 18 21:41:53 2026 GMT
Not After : Sep 17 21:46:53 2027 GMT
Subject: CN=A62603CFE74C961AA9F5C57697470C13BF12B880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:76:0e:db:07:29:bd:22:7d:b2:c2:de:d2:
96:a8:23:05:46:31:aa:58:7b:11:41:7f:64:48:81:
d1:17:7b:5b:9d:fe:9e:cd:a3:ea:62:2d:73:3a:8e:
ec:fe:4e:4f:5f:f2:11:08:b1:5f:1a:8c:e0:6c:4b:
6f:ab:16:9c:af:2c:54:dc:48:63:af:8c:6c:c6:8d:
91:3e:96:d8:d5:94:2e:c5:af:a3:0d:80:b8:05:89:
f6:b2:bb:02:07:52:0c:c4:99:1f:5f:02:4a:b4:65:
d9:fb:81:dc:30:df:e2:db:91:8a:83:a7:34:03:f5:
22:16:94:9a:78:cd:34:71:d6:3c:1c:a6:91:52:a7:
7d:94:75:2d:df:8d:8e:0c:85:e3:5c:28:65:49:c0:
ab:4e:36:59:2e:0e:8e:1c:8a:45:83:53:3e:06:c2:
ff:3b:9e:19:b8:6b:5e:3e:6d:b7:2d:50:61:a6:1e:
1a:93:92:ea:92:32:be:e9:42:b9:01:3e:68:0b:d2:
18:02:bc:25:b9:b4:ea:cb:4c:e2:ca:34:55:7a:27:
50:2a:1c:bf:20:d0:21:68:b6:88:85:9d:dc:c7:46:
81:97:10:f3:ce:08:20:65:6f:36:ba:7d:ba:1e:62:
3c:e8:04:5a:f1:38:4b:ad:30:07:8e:23:70:b1:80:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:03:CF:E7:4C:96:1A:A9:F5:C5:76:97:47:0C:13:BF:12:B8:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230362e302f32342d3234203d3e203332313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.206.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d6:38:35:60:40:2d:21:4b:bb:6f:39:60:38:c8:f3:15:b9:
eb:c5:da:a2:e0:2c:06:cc:c6:9d:3d:13:aa:12:11:27:db:f6:
e6:5b:d7:bf:96:d0:94:c1:63:70:3e:97:58:09:6e:81:9e:d5:
c7:e1:53:2c:34:5f:65:46:ad:9b:f3:07:fc:53:2c:34:11:86:
3b:19:b0:79:5c:dd:60:8c:88:a4:88:21:19:5a:7c:e5:b5:0e:
df:32:05:09:3d:be:af:9f:9b:5e:a8:43:2f:29:f1:e4:29:8d:
5c:bb:24:41:d3:48:3a:37:8e:da:e8:27:63:8a:51:88:0b:0a:
26:8b:73:71:b9:a5:00:80:c2:a9:c8:89:5a:86:73:d2:c4:68:
34:76:1b:7c:cf:ef:52:47:6d:78:48:ac:e4:7c:7b:45:32:07:
6b:78:91:7d:b3:8a:97:1a:22:44:cb:02:0e:28:70:8a:3a:41:
c6:99:e8:1a:81:f3:22:9d:c6:59:5b:aa:8c:56:af:41:55:ef:
fb:a9:be:a2:06:f8:52:ee:cf:bb:f4:05:cc:74:21:25:c2:b4:
7c:d3:96:af:f3:99:7b:f4:e1:79:ba:30:34:87:f1:b4:d4:c8:
87:b2:af:68:95:f5:27:04:dc:00:97:3c:75:0d:b0:6b:3b:80:
fd:e0:fe:09
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEgC0M+PVlcj+7SUNSmg45N1eyukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTgyMTQxNTNaFw0yNzA5MTcyMTQ2NTNaMDMxMTAvBgNV
BAMTKEE2MjYwM0NGRTc0Qzk2MUFBOUY1QzU3Njk3NDcwQzEzQkYxMkI4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZnYO2wcpvSJ9ssLe0paoIwVG
MapYexFBf2RIgdEXe1ud/p7No+piLXM6juz+Tk9f8hEIsV8ajOBsS2+rFpyvLFTc
SGOvjGzGjZE+ltjVlC7Fr6MNgLgFifayuwIHUgzEmR9fAkq0Zdn7gdww3+LbkYqD
pzQD9SIWlJp4zTRx1jwcppFSp32UdS3fjY4MheNcKGVJwKtONlkuDo4cikWDUz4G
wv87nhm4a14+bbctUGGmHhqTkuqSMr7pQrkBPmgL0hgCvCW5tOrLTOLKNFV6J1Aq
HL8g0CFotoiFndzHRoGXEPPOCCBlbza6fboeYjzoBFrxOEutMAeOI3CxgORVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUpiYDz+dMlhqp9cV2l0cME78SuIAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2M4wDQYJKoZIhvcNAQELBQADggEBAEXWODVgQC0hS7tvOWA4yPMVuevF2qLg
LAbMxp09E6oSESfb9uZb17+W0JTBY3A+l1gJboGe1cfhUyw0X2VGrZvzB/xTLDQR
hjsZsHlc3WCMiKSIIRlafOW1Dt8yBQk9vq+fm16oQy8p8eQpjVy7JEHTSDo3jtro
J2OKUYgLCiaLc3G5pQCAwqnIiVqGc9LEaDR2G3zP71JHbXhIrOR8e0UyB2t4kX2z
ipcaIkTLAg4ocIo6QcaZ6BqB8yKdxllbqoxWr0FV7/upvqIG+FLuz7v0Bcx0ISXC
tHzTlq/zmXv04Xm6MDSH8bTUyIeyr2iV9ScE3ACXPHUNsGs7gP3g/gk=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:42 2026 by rpki-client