Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2035363530.roa
File: 3231372e3231372e31362e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier: qCJSCJ6ue0dqrIliG6yihA0f/AOKj07Gfxrw+mljOns=
Subject key identifier: ED:36:11:98:CD:73:42:2D:11:5F:96:EB:01:61:88:DC:0C:6B:7A:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E1988AD5C2AE83293B0D3E77AB490874DB37277
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2035363530.roa
Signing time: Wed 08 Apr 2026 12:34:29 +0000
ROA not before: Wed 08 Apr 2026 12:29:29 +0000
ROA not after: Wed 07 Apr 2027 12:34:29 +0000
asID: 5650
IP address blocks: 217.217.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:19:88:ad:5c:2a:e8:32:93:b0:d3:e7:7a:b4:90:87:4d:b3:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 8 12:29:29 2026 GMT
Not After : Apr 7 12:34:29 2027 GMT
Subject: CN=ED361198CD73422D115F96EB016188DC0C6B7ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:d5:2c:3f:17:21:c6:30:46:b2:de:ca:05:
33:19:bb:83:52:2b:09:77:75:33:b4:51:bb:f7:ee:
ed:c3:31:96:06:95:bb:e4:0c:a8:1d:d0:c7:66:76:
c1:a4:41:b2:9b:66:e3:bc:0a:56:27:9a:5a:f7:d0:
e9:8b:55:c8:2b:04:dd:fb:1c:25:70:87:67:38:61:
d1:62:c2:00:7a:df:bd:a7:bd:0c:3c:6e:77:60:9f:
9a:31:e7:aa:8a:4d:b9:e8:87:19:b5:4d:24:4b:2a:
32:ab:16:73:79:d1:e5:6c:20:2b:1f:97:62:da:46:
c2:4b:2d:3b:70:a4:87:87:98:b5:31:13:9f:18:d2:
3f:3c:5d:30:f6:5d:a0:d8:21:17:d6:96:ba:be:3a:
ae:9f:4b:07:6f:2c:92:0e:c5:ae:ad:df:1e:20:82:
74:f8:c2:a1:fb:0e:cd:c9:e8:00:06:37:f8:68:7a:
be:bb:2e:c5:12:bf:13:ac:34:86:01:e3:d4:17:47:
63:b4:64:bd:ef:5a:56:ee:9f:6e:57:bf:4e:c2:e8:
22:37:0d:3e:2e:50:97:77:22:2b:4e:ad:8f:04:c7:
ae:86:53:28:35:d8:26:aa:d1:40:de:31:35:60:60:
1e:59:d4:e6:69:c1:fa:95:a9:bb:9d:26:04:af:b8:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:11:98:CD:73:42:2D:11:5F:96:EB:01:61:88:DC:0C:6B:7A:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.16.0/22
Signature Algorithm: sha256WithRSAEncryption
49:4e:47:47:8e:56:3b:61:2c:a3:32:fe:87:4e:ea:6e:08:e9:
3d:9d:bf:62:68:31:35:5b:53:1a:58:9d:61:55:95:e9:81:6b:
de:98:32:c0:51:95:b9:21:8d:ac:64:c5:dc:25:6e:26:f6:64:
42:ac:5d:5c:30:16:37:70:85:e4:ca:36:f1:7d:58:f1:8c:39:
76:6c:c9:f8:91:ea:01:f0:01:e4:d8:9d:86:39:8b:a5:dd:36:
65:48:ba:8e:60:86:6b:8b:c6:0a:80:84:5e:f6:54:f5:83:cb:
c6:fd:db:8c:82:7f:11:eb:8b:d8:e4:d3:de:62:7c:f0:0c:5d:
c5:f1:db:c1:e9:9c:fc:46:78:ed:8e:f5:93:b5:37:47:6b:97:
c6:42:4a:04:cc:43:90:f3:45:e7:69:00:61:eb:da:da:c5:1a:
20:fb:44:ec:be:60:05:e9:42:55:f5:90:8c:71:4d:54:7e:96:
08:be:83:6c:92:9d:6e:8f:27:76:01:20:52:58:68:8d:f0:f4:
60:4a:0c:ef:97:af:10:34:12:91:97:20:f9:77:95:7b:64:08:
9f:03:42:2f:f6:e8:74:e8:16:af:04:d7:34:19:a6:36:a8:e7:
15:f2:bf:e0:36:70:ca:a9:b7:3d:f6:31:6a:f7:30:7c:58:b1:
b8:19:c5:52
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHhmIrVwq6DKTsNPnerSQh02zcncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MDgxMjI5MjlaFw0yNzA0MDcxMjM0MjlaMDMxMTAvBgNV
BAMTKEVEMzYxMTk4Q0Q3MzQyMkQxMTVGOTZFQjAxNjE4OERDMEM2QjdBQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6NUsPxchxjBGst7KBTMZu4NS
Kwl3dTO0Ubv37u3DMZYGlbvkDKgd0MdmdsGkQbKbZuO8ClYnmlr30OmLVcgrBN37
HCVwh2c4YdFiwgB6372nvQw8bndgn5ox56qKTbnohxm1TSRLKjKrFnN50eVsICsf
l2LaRsJLLTtwpIeHmLUxE58Y0j88XTD2XaDYIRfWlrq+Oq6fSwdvLJIOxa6t3x4g
gnT4wqH7Ds3J6AAGN/hoer67LsUSvxOsNIYB49QXR2O0ZL3vWlbun25Xv07C6CI3
DT4uUJd3IitOrY8Ex66GUyg12Caq0UDeMTVgYB5Z1OZpwfqVqbudJgSvuHrhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7TYRmM1zQi0RX5brAWGI3Axres0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
EDANBgkqhkiG9w0BAQsFAAOCAQEASU5HR45WO2EsozL+h07qbgjpPZ2/YmgxNVtT
GlidYVWV6YFr3pgywFGVuSGNrGTF3CVuJvZkQqxdXDAWN3CF5Mo28X1Y8Yw5dmzJ
+JHqAfAB5NidhjmLpd02ZUi6jmCGa4vGCoCEXvZU9YPLxv3bjIJ/EeuL2OTT3mJ8
8AxdxfHbwemc/EZ47Y71k7U3R2uXxkJKBMxDkPNF52kAYeva2sUaIPtE7L5gBelC
VfWQjHFNVH6WCL6DbJKdbo8ndgEgUlhojfD0YEoM75evEDQSkZcg+XeVe2QInwNC
L/bodOgWrwTXNBmmNqjnFfK/4DZwyqm3PfYxavcwfFixuBnFUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:37 2026 by rpki-client