Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234392e302f32342d3234203d3e203230343733.roa
File: 3231372e3231362e3234392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: ZPXejo/mPQgNDRkapMjtQh8PmvaePYqZQADvMQ3W9F4=
Subject key identifier: 4C:2F:E3:94:2D:BD:1A:84:E5:EC:0A:47:9B:65:98:3B:6D:AB:CB:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 587D18A3A866E6DC55B77890FCEE8154E857FC82
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234392e302f32342d3234203d3e203230343733.roa
Signing time: Wed 28 Oct 2026 12:02:39 +0000
ROA not before: Wed 28 Oct 2026 11:57:39 +0000
ROA not after: Wed 27 Oct 2027 12:02:39 +0000
asID: 20473
IP address blocks: 217.216.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7d:18:a3:a8:66:e6:dc:55:b7:78:90:fc:ee:81:54:e8:57:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 28 11:57:39 2026 GMT
Not After : Oct 27 12:02:39 2027 GMT
Subject: CN=4C2FE3942DBD1A84E5EC0A479B65983B6DABCBE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:16:fb:41:5f:11:12:30:b8:e1:ac:45:aa:
06:ef:c0:c3:6d:86:3f:11:9b:e2:be:64:20:32:85:
87:73:9e:ff:79:a6:17:7b:38:06:e7:30:97:aa:5d:
34:b7:08:d0:34:03:e4:f4:d1:9a:48:f6:df:07:ca:
f6:70:2c:79:fd:6e:5f:03:94:bb:ab:ec:55:d0:b0:
d5:32:56:4b:4d:51:42:79:b3:20:43:82:30:75:d3:
ae:24:4f:6b:4e:3d:f7:1e:9c:e0:e1:e9:96:a5:af:
11:a2:f4:7c:2e:a6:27:82:c7:71:a8:e4:a9:74:71:
53:47:81:4b:f3:0c:e9:6b:d3:4f:ce:c5:0e:2b:74:
92:4f:5f:fc:61:ae:20:cc:24:14:45:9f:2f:80:93:
0a:2f:c3:54:26:46:44:78:df:73:2c:79:d5:c4:0c:
5d:0c:4a:de:bf:61:6e:b6:51:dc:d6:6a:11:10:65:
9e:e3:ff:4a:f1:a7:b6:de:18:b2:4c:2f:06:f5:85:
69:5c:9a:fa:8c:d8:39:32:fa:45:67:ab:39:e5:27:
7b:7d:86:6c:42:97:72:73:5d:8d:55:76:2e:e7:d4:
9d:aa:3c:69:3f:b5:89:7c:34:e5:a8:2c:e4:23:20:
6f:95:23:33:63:fc:ca:48:76:5c:c5:d9:ea:e2:3c:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:E3:94:2D:BD:1A:84:E5:EC:0A:47:9B:65:98:3B:6D:AB:CB:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3234392e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4b:25:d2:99:50:ae:17:ae:5d:a9:69:b7:5f:63:40:85:4b:
53:6a:62:dd:bc:1a:82:55:cf:0f:1e:16:25:49:57:08:2c:c7:
d3:73:03:9d:e7:3a:44:c6:cc:06:22:18:04:fd:df:65:6b:18:
3b:c7:ba:8c:ef:26:56:c4:76:5d:84:7d:f8:3a:14:b3:db:3a:
3b:06:a9:06:e6:9f:56:d1:c8:7f:50:f3:fc:d7:0f:94:c6:e6:
1a:87:50:b7:89:18:dc:7d:ef:57:75:4f:e1:a7:23:6d:e4:3b:
ab:ce:ec:0e:d6:39:6b:e4:5d:84:06:f8:ab:f6:27:c2:69:9f:
c4:e8:6d:e4:38:27:79:c3:83:bf:4c:18:6b:46:6b:97:4b:df:
05:2f:44:a3:7b:3f:b9:dc:63:eb:bf:78:6e:ee:bc:fd:20:f1:
c0:6b:d5:50:af:2f:d4:19:9c:7d:65:8d:6b:ac:72:a2:e4:11:
3d:e2:45:13:84:af:d7:84:1e:f8:af:00:b0:dd:3a:d9:41:71:
06:10:61:41:0a:ac:83:52:a0:ed:f7:61:ca:c4:da:23:74:fc:
41:88:c6:70:91:8b:41:c3:b6:68:0c:94:58:37:5b:04:7a:5e:
fd:82:a7:1f:eb:ed:bb:df:71:6c:a2:d1:ed:26:44:52:05:2c:
be:0b:a2:dc
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUWH0Yo6hm5txVt3iQ/O6BVOhX/IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMjgxMTU3MzlaFw0yNzEwMjcxMjAyMzlaMDMxMTAvBgNV
BAMTKDRDMkZFMzk0MkRCRDFBODRFNUVDMEE0NzlCNjU5ODNCNkRBQkNCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7hb7QV8REjC44axFqgbvwMNt
hj8Rm+K+ZCAyhYdznv95phd7OAbnMJeqXTS3CNA0A+T00ZpI9t8HyvZwLHn9bl8D
lLur7FXQsNUyVktNUUJ5syBDgjB1064kT2tOPfcenODh6ZalrxGi9HwupieCx3Go
5Kl0cVNHgUvzDOlr00/OxQ4rdJJPX/xhriDMJBRFny+Akwovw1QmRkR433MsedXE
DF0MSt6/YW62UdzWahEQZZ7j/0rxp7beGLJMLwb1hWlcmvqM2Dky+kVnqznlJ3t9
hmxCl3JzXY1Vdi7n1J2qPGk/tYl8NOWoLOQjIG+VIzNj/MpIdlzF2eriPPDpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTC/jlC29GoTl7ApHm2WYO22ry+gwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMy
MzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2PkwDQYJKoZIhvcNAQELBQADggEBAIlLJdKZUK4Xrl2pabdfY0CFS1NqYt28
GoJVzw8eFiVJVwgsx9NzA53nOkTGzAYiGAT932VrGDvHuozvJlbEdl2Effg6FLPb
OjsGqQbmn1bRyH9Q8/zXD5TG5hqHULeJGNx971d1T+GnI23kO6vO7A7WOWvkXYQG
+Kv2J8Jpn8TobeQ4J3nDg79MGGtGa5dL3wUvRKN7P7ncY+u/eG7uvP0g8cBr1VCv
L9QZnH1ljWuscqLkET3iRROEr9eEHvivALDdOtlBcQYQYUEKrINSoO33YcrE2iN0
/EGIxnCRi0HDtmgMlFg3WwR6Xv2Cpx/r7bvfcWyi0e0mRFIFLL4Lotw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:35 2026 by rpki-client