Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 7YTyc/58WWuzVC+DMoHLLBtv2kqMautiS3Fxsii2g7o=
Subject key identifier: 2E:BD:D2:51:5A:75:65:0F:F3:97:7E:4F:E5:64:0D:00:1B:80:B0:82
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35BFE6A8A3252C0BACDAEB64A1422FE988A15171
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 11 Jul 2025 19:29:08 +0000
ROA not before: Fri 11 Jul 2025 19:24:08 +0000
ROA not after: Fri 10 Jul 2026 19:29:08 +0000
asID: 137409
IP address blocks: 217.217.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bf:e6:a8:a3:25:2c:0b:ac:da:eb:64:a1:42:2f:e9:88:a1:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 19:24:08 2025 GMT
Not After : Jul 10 19:29:08 2026 GMT
Subject: CN=2EBDD2515A75650FF3977E4FE5640D001B80B082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:14:8d:1d:a2:a3:21:5b:c6:cc:4a:38:ee:
f2:f2:80:90:48:7a:2a:04:40:22:ef:3b:71:49:b5:
5d:6e:92:30:4d:a2:f9:2a:9b:48:1f:75:8d:8a:df:
ef:40:e5:52:dc:23:0e:a1:4c:1d:c1:d5:d0:60:55:
1a:6a:36:70:b8:fb:da:4c:24:7a:5a:af:37:50:5e:
c6:8d:54:57:f8:91:24:f6:d0:1b:30:a1:4f:7e:cd:
18:24:3b:c8:c0:3d:3d:8b:f9:c4:e6:a6:2c:8e:4d:
2f:57:56:e9:d7:e8:02:af:c9:c3:58:87:16:02:21:
f3:e4:63:3a:85:e3:c0:a9:16:9a:a1:a4:77:08:dd:
51:f0:cf:e9:ea:e2:cb:70:3f:3e:4a:c0:dd:28:84:
e6:cf:3b:c2:b8:3b:88:58:0a:4b:10:3b:fc:b8:b0:
dc:e7:f2:b6:7a:71:eb:a1:5a:21:1f:a7:f1:e4:33:
4c:e8:43:de:cb:1c:16:51:b4:a4:71:5e:c8:1f:30:
31:d5:6f:48:85:52:33:f4:61:2a:ae:c7:24:0c:3d:
87:a1:32:c1:91:09:36:ba:a5:5b:32:54:63:d3:aa:
db:03:9b:51:d4:9f:9c:5a:31:e8:54:54:b0:39:ec:
82:35:a1:eb:36:65:83:c3:b2:b5:28:9d:11:01:4e:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:D2:51:5A:75:65:0F:F3:97:7E:4F:E5:64:0D:00:1B:80:B0:82
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131342e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.114.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a1:a7:15:2d:1c:44:13:27:2e:08:ee:32:21:cd:6f:23:37:
3d:87:34:b6:0a:95:8c:30:80:95:1b:39:8f:10:5d:b0:e9:06:
5d:de:3f:31:b1:f9:14:78:01:80:43:50:ce:ea:1f:e6:16:86:
53:3a:2e:03:bc:dc:b4:70:c8:eb:d2:7d:2a:20:56:3a:d2:46:
9e:78:82:29:60:e1:73:03:8d:d3:4f:23:ac:c3:3f:34:49:fe:
b7:ef:71:a5:89:21:92:c6:70:8d:11:8f:bb:55:88:8f:9d:50:
d1:1d:2e:c1:34:8e:ad:8e:26:7e:1a:2b:fe:54:7a:f1:99:5c:
be:f0:0a:4e:5b:17:89:93:3a:50:5e:1f:ed:e3:da:2b:f8:7d:
c3:f1:a6:2b:8d:3f:da:3d:c3:bb:99:a0:81:c5:f5:2a:c3:3d:
a0:ce:94:4c:a2:12:fd:d3:7d:81:a6:0c:62:af:75:56:70:87:
56:c0:c8:a4:0d:90:fa:5c:d0:33:e2:7b:f3:36:5c:71:02:d6:
47:26:7c:6d:bc:cb:f0:c3:8e:5e:77:93:bd:66:58:00:73:b5:
39:a4:1f:c9:1d:60:1c:f2:4a:97:10:fa:c9:0b:d7:c1:d9:38:
dc:0d:9b:9b:03:3c:9e:db:06:0f:9d:2c:a2:df:58:f9:33:91:
27:98:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:16:43 2025 by rpki-client