Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132372e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231372e3132372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: KkDIzLBRQpGu3oVpjJQPiq0Ma1OR3w4ebSIvD0ASqnI=
Subject key identifier: 59:34:48:4A:18:8B:2D:D4:B2:0F:E4:CC:C1:08:64:D9:C3:74:C1:72
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1754B6CB304EA2A3BA2D0AF65B818C62B5E92749
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 16 Jul 2025 17:40:32 +0000
ROA not before: Wed 16 Jul 2025 17:35:32 +0000
ROA not after: Wed 15 Jul 2026 17:40:32 +0000
asID: 136787
IP address blocks: 217.217.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:54:b6:cb:30:4e:a2:a3:ba:2d:0a:f6:5b:81:8c:62:b5:e9:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 16 17:35:32 2025 GMT
Not After : Jul 15 17:40:32 2026 GMT
Subject: CN=5934484A188B2DD4B20FE4CCC10864D9C374C172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:b9:1a:e5:c2:d1:6b:1f:65:d1:e7:70:4f:
81:49:fd:e8:98:d6:7d:10:77:57:23:ca:1d:a6:ae:
f7:18:db:bf:c3:ec:c8:d8:38:53:97:8d:c9:66:e1:
33:5f:ae:2c:b5:d7:41:42:35:dc:63:95:a8:29:f4:
15:d0:19:f4:9d:b0:6e:93:17:9f:b1:f4:8c:ea:6a:
78:62:51:d9:09:9a:47:d5:0c:89:c1:82:9a:cf:ab:
e3:43:a2:e9:42:8c:27:58:07:ac:2c:c1:d3:58:00:
ab:7e:03:b9:57:9f:6f:9c:c8:07:8b:e6:ca:11:9f:
b1:4f:0d:f3:55:e4:c5:da:9e:d4:33:d0:cd:48:06:
4d:92:9c:ae:57:83:b1:38:3c:35:d6:ee:7c:3e:0c:
25:2b:1b:e4:3f:52:4b:6b:ab:96:0b:10:c7:b9:11:
ee:04:a1:a3:24:a6:13:52:94:e5:bb:0b:dc:95:56:
bd:32:7d:fa:04:25:08:fa:81:17:ef:20:e2:4d:62:
74:b8:73:57:f3:71:cc:6f:ed:54:21:07:62:d7:53:
fe:0f:4b:ba:16:9a:49:b1:8a:b3:95:62:ac:91:3b:
cd:19:10:f0:88:ff:ff:01:73:f7:5e:c2:ca:96:3e:
81:c7:15:f0:79:64:7b:6e:61:97:bb:c9:b6:e2:79:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:34:48:4A:18:8B:2D:D4:B2:0F:E4:CC:C1:08:64:D9:C3:74:C1:72
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:89:3a:7a:c0:5f:c1:72:b7:91:e7:57:33:b4:c7:e9:9a:00:
b6:50:c6:bd:eb:35:fe:82:62:6b:8b:a4:08:16:48:7f:b5:a1:
14:9e:dc:e2:9f:de:62:1e:61:d9:52:d6:29:c8:22:9c:cc:4c:
26:23:85:22:8c:8b:c5:f8:b9:61:a9:b5:03:e7:a3:a5:80:88:
eb:7c:42:75:d0:41:39:1d:2a:9f:a3:83:ef:d7:1c:f4:05:99:
91:35:ee:15:c2:3c:56:2c:7e:76:c2:8f:e9:5a:6e:28:5e:1e:
93:8d:2a:d5:28:94:a2:01:81:54:f3:f9:9d:c6:d4:47:82:94:
f8:a5:ff:92:7f:9f:df:82:af:2f:01:0e:7c:a7:1c:ed:d2:f2:
18:ff:54:cc:4f:42:ba:4a:8e:4a:ad:79:2c:ac:19:c4:2c:67:
a3:25:ed:31:04:f7:48:f4:72:da:91:3f:dd:fb:11:d4:c4:e7:
3f:87:cc:4f:5e:72:14:8f:a2:df:50:98:ba:91:bd:5b:31:21:
73:fb:c3:ad:23:9d:f4:d2:04:f8:5a:dd:1c:ae:b7:ed:34:28:
49:2a:72:8d:56:d2:49:7b:63:4f:ba:9c:a3:2c:99:90:14:6f:
ee:72:9c:22:ea:98:d6:30:9a:9e:8d:84:20:ca:28:b0:6c:b5:
78:b2:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:34 2025 by rpki-client