Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131382e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231372e3131382e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: gaHb/StOaOIso5MiEMPgC51WecFVd/28MLLt7igawIA=
Subject key identifier: 12:87:FA:AF:88:F3:8F:D2:D8:0E:39:35:64:B7:60:8D:AF:74:15:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E7703CFF5A6B5F411B26D22F8C42AAE73E448E4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131382e302f32342d3234203d3e20313337343039.roa
Signing time: Fri 11 Jul 2025 19:29:37 +0000
ROA not before: Fri 11 Jul 2025 19:24:37 +0000
ROA not after: Fri 10 Jul 2026 19:29:37 +0000
asID: 137409
IP address blocks: 217.217.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:77:03:cf:f5:a6:b5:f4:11:b2:6d:22:f8:c4:2a:ae:73:e4:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 19:24:37 2025 GMT
Not After : Jul 10 19:29:37 2026 GMT
Subject: CN=1287FAAF88F38FD2D80E393564B7608DAF7415BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:23:a2:69:71:eb:f6:9b:4a:3e:19:18:06:
e2:d4:ec:ec:bb:65:bd:08:1a:4c:b0:ff:9c:b6:30:
72:2c:23:ac:2e:83:c6:af:ba:27:aa:36:f6:72:3e:
cb:c3:9d:b0:c0:0f:68:51:dd:6a:5e:9c:fc:94:a6:
15:34:9d:8a:cf:e3:08:df:88:b1:ff:8f:37:a0:9d:
2e:35:bc:ce:f1:6e:9c:8d:f4:10:e9:1c:71:15:7e:
45:03:93:0e:ee:9e:36:15:ce:67:90:10:78:f9:18:
f6:78:2d:fa:ff:bc:15:ae:bb:25:4f:14:cf:d0:98:
54:25:7d:2f:d9:03:47:69:4c:81:d2:60:e3:ea:c8:
12:f5:6a:95:4b:30:52:ac:11:0c:cf:05:33:7b:c4:
ee:7b:38:07:21:3e:93:4b:ac:f0:b6:8f:ff:7a:47:
73:48:8b:9a:8d:9a:5c:09:8a:f3:9c:0e:db:da:3f:
7c:52:69:69:28:0a:b3:ec:4c:b7:4c:ab:87:02:69:
47:4a:65:15:9a:18:9c:e1:32:9e:45:6b:0d:77:d5:
f4:f2:70:0d:57:63:fb:bc:f0:b7:0b:94:4b:03:f3:
af:0f:cb:53:e1:b7:d4:7b:12:56:e6:56:db:99:95:
40:7f:45:8f:9f:0a:96:e5:85:ba:ab:24:ea:a7:e0:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:FA:AF:88:F3:8F:D2:D8:0E:39:35:64:B7:60:8D:AF:74:15:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3131382e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a3:f3:e2:56:89:67:1a:55:ab:21:a6:57:5d:a2:f7:b8:32:
0e:6e:06:17:bb:73:31:68:4e:d6:96:3f:f2:3d:54:1d:a7:ee:
26:81:56:81:c7:b5:03:c9:15:c5:56:4d:0c:d7:26:e8:fa:d1:
0f:b7:ca:73:b0:4e:38:3a:6f:9f:c7:1e:34:41:3e:6f:52:b2:
40:dd:d2:73:d8:a4:0f:fa:af:5a:d6:66:f3:75:ca:e9:b5:9b:
3d:df:bc:8a:81:32:50:bb:cb:1c:bd:7b:41:2b:17:9b:db:4f:
9e:c1:a8:fd:c0:7a:4b:87:f5:68:ba:86:ab:33:18:23:22:dd:
2e:b0:2b:3b:a4:d3:20:41:67:16:59:36:1f:fe:ad:b9:02:79:
e6:3a:bc:26:20:b7:8b:51:6e:70:ba:cc:51:a8:76:8c:14:5f:
82:a7:a5:ca:bc:5b:df:20:2a:4e:3b:25:f5:76:7d:18:d0:0a:
6e:61:d5:b9:75:86:49:cf:6d:d1:f6:eb:15:eb:5f:b5:67:8a:
38:79:ae:c4:a5:8c:75:1f:e0:40:92:ef:50:30:a0:e4:39:f4:
41:a9:2f:bf:e5:02:94:6c:3f:95:61:c9:bf:15:ae:b4:3a:3e:
58:79:f7:d1:5f:f9:df:63:8a:94:6c:af:ca:77:c8:f9:47:64:
03:9b:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:02:38 2025 by rpki-client