Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131332e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3131332e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: NAT/h5CYQVHEoE286IVsbAv3JDtp3197PGdo9jy+8P8=
Subject key identifier: DA:85:6C:5F:D2:EF:A3:6E:98:37:E0:F7:78:E9:8F:37:3E:94:C5:77
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C8503B195092ECD7DAF858FE89A35473A007EAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131332e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 11 Jul 2025 19:28:59 +0000
ROA not before: Fri 11 Jul 2025 19:23:59 +0000
ROA not after: Fri 10 Jul 2026 19:28:59 +0000
asID: 137409
IP address blocks: 217.217.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:85:03:b1:95:09:2e:cd:7d:af:85:8f:e8:9a:35:47:3a:00:7e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 19:23:59 2025 GMT
Not After : Jul 10 19:28:59 2026 GMT
Subject: CN=DA856C5FD2EFA36E9837E0F778E98F373E94C577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:08:51:e5:a3:06:58:37:8a:9a:4b:d2:8a:
ef:ff:5d:d0:49:9d:57:a1:7e:84:ff:bf:33:f1:bf:
6f:fd:00:ac:4c:f7:77:64:48:69:63:6f:63:9a:de:
d6:f1:db:0d:a0:eb:07:57:5b:e5:fe:ec:dd:37:6c:
7f:45:07:4a:ba:fb:7a:30:58:01:43:6d:f1:b9:7c:
52:b5:b4:23:be:c6:55:d8:91:9d:50:46:cc:cb:aa:
e7:8f:45:46:6d:e3:40:36:c7:31:a0:99:c4:8d:62:
cf:c2:0d:d5:e9:1b:21:07:ee:f5:7e:92:48:cb:4f:
5e:cd:a5:50:17:f8:d3:74:24:71:3a:69:70:c1:77:
33:c6:68:b1:15:31:a3:b4:b4:35:db:41:35:f8:60:
97:1d:20:c0:43:05:ad:17:44:66:06:a4:2f:57:f2:
c5:2b:b8:1b:cf:98:83:c2:9b:44:df:fd:01:5b:fe:
90:a1:7b:07:20:4d:64:a5:da:ed:35:c9:cd:86:54:
9c:ce:1c:d7:df:32:0b:6f:f4:7f:49:d9:1c:de:f5:
3a:c8:dd:d2:78:9d:ad:c8:03:72:e7:e5:b7:65:43:
1f:95:7e:96:63:d9:ca:51:c3:d7:3f:24:ec:6e:47:
15:79:7c:39:ee:00:40:58:6e:8c:8c:ff:cf:18:46:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:6C:5F:D2:EF:A3:6E:98:37:E0:F7:78:E9:8F:37:3E:94:C5:77
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131332e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:13:41:63:4c:ce:c6:54:38:24:c9:8a:be:0b:6e:be:af:2c:
98:9a:3b:21:c7:9d:a8:68:ae:96:25:3b:35:df:17:6f:9d:bc:
b2:f4:2a:6e:98:de:38:7e:a0:cb:95:72:93:56:f7:5c:19:cc:
90:f3:86:8c:cb:7c:53:a4:17:d7:84:c6:0f:90:24:94:de:d0:
76:c2:e5:43:30:a0:30:74:0b:bd:05:50:c3:85:2d:59:f2:b9:
fd:ac:f7:78:a7:c5:23:1e:2a:b4:86:b8:24:61:fc:17:7d:21:
49:0c:f1:5f:dd:70:a9:71:e6:f9:4c:0b:46:ac:66:01:f5:54:
af:1b:06:80:16:4b:8e:da:c6:5c:98:e3:b9:d6:db:28:39:67:
68:38:e5:52:77:1b:45:f4:2a:2c:db:16:fd:05:3e:74:94:da:
8b:96:98:e9:ee:28:92:35:6a:bb:6c:6f:5f:0d:56:a3:db:35:
8f:a5:7b:57:50:4b:66:c1:3d:44:be:cd:b8:d2:e0:c3:83:62:
01:24:75:d0:d0:36:92:52:34:da:0a:38:c0:ee:dd:fd:d9:a7:
1d:17:a2:76:f0:fc:6a:ad:a3:32:8e:82:71:8c:6a:5d:95:af:
1e:9e:66:65:ba:b0:ff:e9:13:33:0c:37:2a:0e:5c:af:13:5e:
8e:45:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:02:31 2025 by rpki-client