Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36392e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e36392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NtF5rSvt4preucG23rvT+TeJuV1YbRv+mHSGWZrJQ2I=
Subject key identifier: 83:33:FE:59:D1:27:61:8F:E1:08:20:BA:BB:75:91:A9:4E:7A:E0:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45FFB25C1A4E504E811883BF70A609FB6569CB84
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 03 Jul 2025 19:58:31 +0000
ROA not before: Thu 03 Jul 2025 19:53:31 +0000
ROA not after: Thu 02 Jul 2026 19:58:31 +0000
asID: 212238
IP address blocks: 212.97.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ff:b2:5c:1a:4e:50:4e:81:18:83:bf:70:a6:09:fb:65:69:cb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 19:53:31 2025 GMT
Not After : Jul 2 19:58:31 2026 GMT
Subject: CN=8333FE59D127618FE10820BABB7591A94E7AE0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:20:9b:78:1c:2a:ed:05:3e:51:4f:b7:1c:
03:9f:23:ad:65:8f:6a:39:c1:d0:c6:27:bd:75:1d:
e8:64:d0:48:72:97:57:0d:f0:fa:2b:e8:e2:f6:fc:
6b:1d:2c:3e:a7:56:ae:40:e0:08:97:eb:8f:69:12:
3a:85:ee:d2:ac:df:b4:f0:a2:26:27:23:1a:ce:30:
ef:65:fb:4b:63:c3:bb:eb:38:84:92:10:5c:9c:1a:
69:34:ea:a2:88:a2:cf:7b:1c:e9:55:4b:84:63:57:
1f:2e:1f:1c:07:cb:4c:d3:77:67:05:59:34:1c:e7:
80:31:0b:81:7d:15:b9:dc:77:84:98:17:a2:90:4b:
06:a0:28:53:06:dd:05:ff:25:89:bd:83:3b:94:40:
23:d9:3b:ef:91:c6:17:a7:ea:31:8a:44:94:67:b6:
f2:ad:3d:42:9f:e5:f0:34:18:05:34:ed:4c:0d:3c:
59:b9:d4:83:29:a5:03:5c:5b:18:37:24:bd:a0:d9:
29:d4:9c:38:65:a3:5b:0c:35:e0:db:b1:3b:a2:8c:
a3:96:92:20:a9:55:74:9e:75:a9:c0:c6:a2:a3:e7:
49:de:aa:01:1d:c4:79:6f:f8:d7:c5:aa:67:4b:ba:
f1:0a:0f:47:ce:5d:96:70:82:03:db:92:e3:26:36:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:33:FE:59:D1:27:61:8F:E1:08:20:BA:BB:75:91:A9:4E:7A:E0:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.69.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ec:55:0e:10:50:a7:75:57:8c:d8:51:95:ce:f0:0a:71:cd:
e6:b7:38:8f:2f:b5:21:28:81:5b:ae:3c:2d:39:e6:f7:81:49:
e1:b8:4c:f9:2e:30:1b:0a:88:da:1c:1f:54:06:67:67:20:bb:
c6:5c:e1:bb:c8:3b:0a:f8:fb:5d:0d:f4:78:fc:d8:ec:f4:47:
61:a6:91:9f:3a:e1:52:34:25:19:9e:0a:07:11:3a:16:12:99:
ea:c8:26:40:d7:00:ab:15:e0:2e:1f:93:7d:ab:a8:90:00:f2:
62:9d:2e:9b:01:95:e8:dd:78:68:ee:c4:a3:2a:ee:65:71:c1:
9f:7b:62:78:b9:f9:f1:df:89:4f:d7:04:df:b5:87:aa:8a:5f:
8b:bd:87:62:50:82:b7:8c:54:1e:0c:0d:f6:fc:8a:f3:c5:5b:
8c:8f:f9:e4:b2:58:64:6e:98:e5:a6:b3:28:ee:ba:f3:a4:1d:
bc:7e:1c:b9:94:88:30:d8:84:c2:08:a2:cc:3c:eb:e6:38:e9:
6d:16:c4:94:2e:06:b8:1b:0a:99:34:22:9a:b2:41:ff:db:0b:
5e:42:87:1f:a5:ca:f7:e9:89:a1:02:c1:8d:8d:0d:ab:3a:5a:
7e:ca:91:be:5e:9c:4a:b2:9f:0b:0f:17:fb:be:2b:e4:8e:36:
a0:7c:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:10 2025 by rpki-client