Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e302e302f32302d3234203d3e203133333437.roa
File: 3231372e3231372e302e302f32302d3234203d3e203133333437.roa (raw, json)
Hash identifier: +q+iz6Bp0Pmh5niqWSx/EnqtxUFruwmS+US0Ksc5zKE=
Subject key identifier: 2F:11:0E:E2:AB:AE:F5:0A:8F:64:FC:F8:14:FD:2D:C1:B8:7C:EB:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B153107D7AD4950C57A562028B18FF7D22960A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e302e302f32302d3234203d3e203133333437.roa
Signing time: Sun 20 Jul 2025 18:29:11 +0000
ROA not before: Sun 20 Jul 2025 18:24:11 +0000
ROA not after: Sun 19 Jul 2026 18:29:11 +0000
asID: 13347
IP address blocks: 217.217.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 16:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:15:31:07:d7:ad:49:50:c5:7a:56:20:28:b1:8f:f7:d2:29:60:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 20 18:24:11 2025 GMT
Not After : Jul 19 18:29:11 2026 GMT
Subject: CN=2F110EE2ABAEF50A8F64FCF814FD2DC1B87CEBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:7d:e3:d1:a3:1d:3e:bf:28:06:b9:f3:1f:
77:a7:81:12:b6:01:39:67:9e:c0:e6:f5:a8:40:cb:
3a:75:fa:24:4c:74:e6:7a:a3:e2:49:94:c7:78:65:
0c:32:c3:c5:d2:8a:99:b8:73:e2:68:82:59:9f:56:
2e:e5:fd:0a:80:dc:41:8f:cb:29:f3:82:d7:3e:ea:
61:55:26:06:86:ba:a6:0d:e6:d7:ec:03:52:c8:be:
17:34:81:ab:bf:55:6a:f0:98:20:d1:f5:4e:a4:71:
76:53:dc:c9:46:15:63:07:e5:d7:df:bc:ce:81:52:
1e:5a:6e:17:7e:d6:86:66:e6:e9:8a:df:e4:c5:2d:
ca:0a:82:42:16:60:4c:63:21:8c:66:0b:d8:cd:e0:
05:42:ae:4a:e1:a9:28:fe:eb:e4:2c:6f:a9:fb:b8:
d7:35:00:5f:a7:4a:07:a8:c3:ba:68:45:40:e9:d0:
24:a1:95:6f:b9:7e:27:d3:6a:5b:39:58:56:af:f8:
fe:fe:af:0c:7c:aa:16:45:25:ca:37:06:fa:57:69:
af:1d:66:60:9d:ad:a5:76:a4:9d:7f:05:d2:b9:64:
12:a3:a4:48:42:35:c2:e6:69:f5:ed:c1:9b:5d:17:
59:45:f8:0d:a3:c1:41:fa:78:63:e3:d7:ae:58:b7:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:0E:E2:AB:AE:F5:0A:8F:64:FC:F8:14:FD:2D:C1:B8:7C:EB:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e302e302f32302d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.0.0/20
Signature Algorithm: sha256WithRSAEncryption
30:74:9d:67:7a:a5:5f:e9:6d:a6:e1:cc:03:dd:61:45:c9:4f:
12:52:88:8c:82:4d:9f:29:bb:eb:1b:c4:df:04:85:e4:ba:a5:
f5:b2:c7:f1:ac:48:d7:94:64:4b:9a:62:43:e9:31:86:ef:e6:
53:ff:cf:80:a3:b6:7b:24:b3:dc:cf:17:e8:03:69:ec:b3:3f:
9f:7a:3d:a4:76:fe:d5:4a:96:5f:69:c8:ad:72:68:da:36:02:
76:0e:dd:8a:a6:2f:04:d0:a4:18:87:e4:36:35:07:2f:86:0c:
9f:03:12:a7:ca:72:57:ff:16:40:5e:db:dc:2a:37:20:8d:68:
bf:ae:0f:50:c5:8d:f1:ae:83:7c:74:37:61:ab:a4:55:75:11:
c9:21:c9:b8:1f:30:e6:cd:5d:80:b8:ab:32:0a:e8:45:7e:19:
7b:4d:96:57:20:e5:b6:3f:98:81:59:65:9c:ef:28:32:23:d2:
df:dd:1a:8c:ef:c7:24:82:41:c4:10:2b:76:34:a9:c1:45:cc:
4e:d2:7b:24:9f:09:89:aa:06:33:95:a5:90:c3:4f:72:4a:5e:
84:44:0a:44:81:47:43:b1:58:0e:59:38:00:ad:f0:06:6c:27:
aa:fc:b6:89:0e:8d:6e:c6:f8:2b:4f:36:5c:51:e7:fe:b4:a8:
69:54:83:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGxUxB9etSVDFelYgKLGP99IpYKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MjAxODI0MTFaFw0yNjA3MTkxODI5MTFaMDMxMTAvBgNV
BAMTKDJGMTEwRUUyQUJBRUY1MEE4RjY0RkNGODE0RkQyREMxQjg3Q0VCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53X3j0aMdPr8oBrnzH3engRK2
ATlnnsDm9ahAyzp1+iRMdOZ6o+JJlMd4ZQwyw8XSipm4c+JoglmfVi7l/QqA3EGP
yynzgtc+6mFVJgaGuqYN5tfsA1LIvhc0gau/VWrwmCDR9U6kcXZT3MlGFWMH5dff
vM6BUh5abhd+1oZm5umK3+TFLcoKgkIWYExjIYxmC9jN4AVCrkrhqSj+6+Qsb6n7
uNc1AF+nSgeow7poRUDp0CShlW+5fifTals5WFav+P7+rwx8qhZFJco3BvpXaa8d
ZmCdraV2pJ1/BdK5ZBKjpEhCNcLmafXtwZtdF1lF+A2jwUH6eGPj165Ytyt1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQULxEO4quu9QqPZPz4FP0twbh866gwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMzMzMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNnZ
ADANBgkqhkiG9w0BAQsFAAOCAQEAMHSdZ3qlX+ltpuHMA91hRclPElKIjIJNnym7
6xvE3wSF5Lql9bLH8axI15RkS5piQ+kxhu/mU//PgKO2eySz3M8X6ANp7LM/n3o9
pHb+1UqWX2nIrXJo2jYCdg7diqYvBNCkGIfkNjUHL4YMnwMSp8pyV/8WQF7b3Co3
II1ov64PUMWN8a6DfHQ3YaukVXURySHJuB8w5s1dgLirMgroRX4Ze02WVyDltj+Y
gVllnO8oMiPS390ajO/HJIJBxBArdjSpwUXMTtJ7JJ8JiaoGM5WlkMNPckpehEQK
RIFHQ7FYDlk4AK3wBmwnqvy2iQ6Nbsb4K082XFHn/rSoaVSD0w==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:47 2025 by rpki-client