Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e31362e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: sxJpbBBuqmPbnhmwilVeyC78FOuZCcddbuoDfdrLZa8=
Subject key identifier: 9E:C2:FC:45:F1:0F:A8:BF:EC:14:27:8D:7A:69:3E:B7:D2:3B:1B:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02E0B5A3DC1248BB70BC90B8A6C850628BC19A9A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e203230313135.roa
Signing time: Wed 23 Jul 2025 18:15:34 +0000
ROA not before: Wed 23 Jul 2025 18:10:34 +0000
ROA not after: Wed 22 Jul 2026 18:15:34 +0000
asID: 20115
IP address blocks: 217.217.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e0:b5:a3:dc:12:48:bb:70:bc:90:b8:a6:c8:50:62:8b:c1:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 18:10:34 2025 GMT
Not After : Jul 22 18:15:34 2026 GMT
Subject: CN=9EC2FC45F10FA8BFEC14278D7A693EB7D23B1B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:99:e9:c4:b9:8e:36:46:3e:57:7b:05:2a:
c0:74:b0:f3:95:6a:36:ea:c2:33:7e:5f:5c:c4:ec:
c8:84:70:46:13:86:3b:7e:f0:3c:f5:00:1c:4e:30:
fd:eb:44:77:8a:6f:72:1c:78:8a:a4:ed:06:6d:08:
71:c8:03:13:c3:90:77:7c:19:04:4b:cc:bf:da:b9:
a9:87:9d:5d:86:e5:4e:f7:03:b2:02:2a:a0:15:ad:
45:e4:73:e7:d5:a7:1d:10:e7:34:c4:4d:d0:95:0e:
52:9a:26:7b:9d:93:9a:33:5b:90:0e:fb:17:b4:dd:
f4:e0:e1:af:45:4c:f7:42:a1:f1:96:f7:fb:b9:5a:
e4:22:ae:3d:28:92:22:8c:e3:e2:f1:b4:04:2e:3e:
36:13:22:a7:a2:ee:7c:88:86:3a:fc:a3:c9:18:3c:
b7:29:96:95:41:9b:03:20:d6:f5:02:9f:eb:6d:14:
71:78:fe:fd:94:ba:30:da:ca:6e:10:04:6e:b5:f5:
72:66:98:11:3f:28:ef:ec:5d:fd:0e:cc:38:82:f1:
1d:c4:5b:11:a1:af:56:91:4e:a1:22:1b:61:51:bd:
76:32:54:2c:78:7e:c5:c5:1b:18:b3:a2:a1:10:52:
22:27:6c:15:5f:88:4a:e4:4f:45:38:f9:b5:c1:e3:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:FC:45:F1:0F:A8:BF:EC:14:27:8D:7A:69:3E:B7:D2:3B:1B:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.16.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ae:a9:51:57:09:48:44:b6:80:8e:69:5f:92:1e:1d:e2:a8:
30:eb:c3:57:19:41:5e:20:90:8f:10:bd:55:28:4f:07:14:f3:
94:3a:ee:7a:4f:2c:2d:df:46:7e:ed:2c:1a:68:e1:1e:48:76:
28:88:64:05:5a:cd:07:9b:a9:24:2b:b4:7a:95:fc:69:18:6a:
15:48:65:a7:8c:3e:cd:47:78:23:29:55:00:5d:06:ee:15:aa:
c3:5a:7a:b1:8d:cf:77:0f:03:b6:ff:a8:fa:40:61:08:24:4b:
d4:43:bf:a3:73:6c:43:97:1e:12:2c:99:87:15:5c:03:e2:b4:
85:6e:34:31:53:2f:9a:43:26:a1:89:3c:90:b5:67:58:ce:04:
7e:ee:05:7a:6d:63:5a:a4:90:16:d3:6f:a2:d9:22:f0:a1:3b:
f2:d5:74:b3:77:d4:24:5c:57:43:b1:8d:1b:51:f9:d8:04:6d:
9f:75:9c:b4:77:4c:26:0c:95:cc:2d:26:a4:05:ee:39:1d:33:
4b:3d:51:c6:d2:42:c7:2b:d6:e0:36:ce:c6:f0:14:48:a7:7e:
17:dc:e7:b4:e1:46:a6:51:04:db:a7:cc:48:58:07:d2:7e:4f:
ea:6e:cc:29:b8:e5:72:7a:5c:d5:7a:84:6c:bb:4a:fe:6b:58:
31:4c:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:20:27 2025 by rpki-client