Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132342e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231372e3132342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6Hr9JemmXNMcrIWUKt9V4xHCz8f7qoaXhFfm58mnZuQ=
Subject key identifier: D7:E5:69:E3:E3:44:EC:5F:46:73:0A:09:C1:7E:22:10:85:5E:27:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FE36E574BBBA4B56B3006575888772F87FE6C71
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132342e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 16 Jul 2025 17:40:03 +0000
ROA not before: Wed 16 Jul 2025 17:35:03 +0000
ROA not after: Wed 15 Jul 2026 17:40:03 +0000
asID: 136787
IP address blocks: 217.217.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e3:6e:57:4b:bb:a4:b5:6b:30:06:57:58:88:77:2f:87:fe:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 16 17:35:03 2025 GMT
Not After : Jul 15 17:40:03 2026 GMT
Subject: CN=D7E569E3E344EC5F46730A09C17E2210855E274F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:c4:de:b1:95:d4:1e:5f:7d:c2:06:97:14:
65:6b:79:11:4e:93:9c:cd:04:e0:3b:79:89:79:a7:
52:9a:68:20:a6:b9:90:15:35:00:ac:40:7f:ea:82:
eb:b5:f9:1e:2d:d0:dd:a9:17:9e:31:71:34:ee:3a:
0a:69:4e:29:79:74:db:31:12:0e:1b:04:38:ae:b0:
b3:9d:b4:8c:8b:fe:99:7b:f0:82:5c:56:5b:19:70:
66:82:3d:ca:78:00:6c:90:e5:4a:36:e3:64:9a:aa:
93:f3:44:1f:cd:86:f3:ca:75:cc:d6:ab:37:d8:05:
2c:61:b9:c6:08:fc:da:0c:03:75:6b:d4:26:e0:e6:
51:d4:38:b3:6c:42:0b:f9:5c:a0:4c:20:c3:c5:8a:
98:e3:35:19:89:be:1e:77:02:91:33:1e:0d:45:c0:
ee:24:36:07:04:1d:01:0a:ab:8a:4a:1b:c8:70:e5:
93:ca:0e:d0:60:c9:db:bd:53:e0:bc:05:7b:eb:06:
39:46:da:5f:7d:25:f9:3e:3a:8e:a5:5d:69:11:4d:
0d:d6:28:c5:90:6b:58:45:6c:d8:00:08:8d:46:1e:
35:24:b8:9f:e6:f8:bb:b3:e1:34:f3:f2:b6:d4:d4:
9f:c1:07:37:61:19:f8:77:45:1a:9e:52:ba:7f:44:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:69:E3:E3:44:EC:5F:46:73:0A:09:C1:7E:22:10:85:5E:27:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3f:9e:34:6f:0d:58:79:81:ea:57:e0:86:a8:96:b0:5a:5c:
42:e5:86:f2:ec:f5:42:c3:d0:c9:d0:d0:b5:2a:db:73:9d:38:
7d:39:d8:9a:e3:6d:50:97:32:7b:48:34:76:44:31:b2:65:33:
02:80:69:7c:61:b2:2d:82:e7:4d:32:58:4b:e6:47:0c:08:5b:
df:33:a2:49:2c:37:ca:c3:1d:34:d6:4d:60:b2:4e:7a:cf:55:
93:09:7a:f9:eb:92:3f:06:71:5c:4e:9a:33:da:d9:ee:be:32:
31:d7:a7:39:65:ee:b9:91:d4:13:d2:a9:35:dc:b0:e2:5d:8a:
40:43:9f:0f:41:b7:b4:c2:a4:98:73:11:1a:8c:e8:72:ea:52:
1f:89:e4:56:f6:2e:33:85:89:26:40:1d:e7:c3:66:e3:47:db:
81:63:c2:f4:b1:52:1d:7d:ed:13:07:9a:a6:73:47:c1:c7:16:
89:bc:20:f5:05:29:45:c3:e2:d2:38:e7:33:c4:3f:7e:8d:c5:
44:00:d1:c0:cf:2e:65:99:7b:19:93:d1:cf:0e:cb:a8:5a:5b:
b2:47:23:06:b8:da:1c:52:f6:76:8d:fb:b7:d7:e3:60:f5:b3:
18:0d:92:77:ba:7a:72:37:92:b1:a8:23:14:41:b2:e8:c3:ca:
b6:90:55:0e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUL+NuV0u7pLVrMAZXWIh3L4f+bHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MTYxNzM1MDNaFw0yNjA3MTUxNzQwMDNaMDMxMTAvBgNV
BAMTKEQ3RTU2OUUzRTM0NEVDNUY0NjczMEEwOUMxN0UyMjEwODU1RTI3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUcTesZXUHl99wgaXFGVreRFO
k5zNBOA7eYl5p1KaaCCmuZAVNQCsQH/qguu1+R4t0N2pF54xcTTuOgppTil5dNsx
Eg4bBDiusLOdtIyL/pl78IJcVlsZcGaCPcp4AGyQ5Uo242SaqpPzRB/NhvPKdczW
qzfYBSxhucYI/NoMA3Vr1Cbg5lHUOLNsQgv5XKBMIMPFipjjNRmJvh53ApEzHg1F
wO4kNgcEHQEKq4pKG8hw5ZPKDtBgydu9U+C8BXvrBjlG2l99Jfk+Oo6lXWkRTQ3W
KMWQa1hFbNgACI1GHjUkuJ/m+Luz4TTz8rbU1J/BBzdhGfh3RRqeUrp/RHIxAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU1+Vp4+NE7F9GcwoJwX4iEIVeJ08wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnZfDANBgkqhkiG9w0BAQsFAAOCAQEALz+eNG8NWHmB6lfghqiWsFpcQuWG
8uz1QsPQydDQtSrbc504fTnYmuNtUJcye0g0dkQxsmUzAoBpfGGyLYLnTTJYS+ZH
DAhb3zOiSSw3ysMdNNZNYLJOes9Vkwl6+euSPwZxXE6aM9rZ7r4yMdenOWXuuZHU
E9KpNdyw4l2KQEOfD0G3tMKkmHMRGozocupSH4nkVvYuM4WJJkAd58Nm40fbgWPC
9LFSHX3tEweapnNHwccWibwg9QUpRcPi0jjnM8Q/fo3FRADRwM8uZZl7GZPRzw7L
qFpbskcjBrjaHFL2do37t9fjYPWzGA2Sd7p6cjeSsagjFEGy6MPKtpBVDg==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:15:17 2025 by rpki-client