Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e31362e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: 2ejQYGvNfqkbm217TKIs38v6iMWyZtDwELZRG31+XUk=
Subject key identifier: 91:EA:32:42:32:60:9A:80:53:B3:95:05:F8:63:AE:7F:A5:78:E6:E1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1214AF5F43463208B1B338290ED6586ECEFA197F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2037303239.roa
Signing time: Wed 23 Jul 2025 18:15:33 +0000
ROA not before: Wed 23 Jul 2025 18:10:33 +0000
ROA not after: Wed 22 Jul 2026 18:15:33 +0000
asID: 7029
IP address blocks: 217.217.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:14:af:5f:43:46:32:08:b1:b3:38:29:0e:d6:58:6e:ce:fa:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 18:10:33 2025 GMT
Not After : Jul 22 18:15:33 2026 GMT
Subject: CN=91EA324232609A8053B39505F863AE7FA578E6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:ff:c2:b6:44:35:c9:23:cf:a6:e1:61:df:
9f:79:23:1c:7f:bf:2e:cd:d4:14:2d:fe:9e:57:06:
8c:fe:a2:84:da:79:2e:83:77:05:03:22:ca:76:13:
8f:14:23:3f:8b:bf:c6:74:b6:2e:3f:90:19:d6:7a:
a4:e4:a1:aa:03:3b:3c:ac:53:13:d8:32:e5:9c:73:
9c:37:1c:c4:09:2e:7c:bb:3a:08:08:f7:d4:af:25:
3e:d2:04:e6:20:2f:2f:13:49:3f:ce:04:e3:a0:c9:
57:e1:08:e8:93:54:9a:16:cb:f2:a5:0e:8b:45:66:
6e:dc:2c:eb:c3:c4:0d:c1:c3:5a:36:1f:ea:4b:0f:
84:bf:06:1e:7a:6e:f4:9d:30:1e:3b:27:8b:75:2d:
f3:68:3c:f3:63:2e:a2:1e:16:fd:18:ff:91:27:e1:
c2:72:2e:b0:f3:a6:61:58:d7:37:9d:82:0b:cc:1b:
fa:19:fc:43:37:e2:74:7d:79:33:e0:78:fe:ac:c6:
ec:2a:fd:63:36:63:18:3a:5d:cc:3d:4b:e8:46:a5:
e7:df:f3:dd:4b:cd:d5:df:cf:fc:8d:d0:a1:c8:17:
38:41:cb:f8:03:0e:e0:63:df:b9:94:26:7c:9d:25:
58:50:88:79:9c:3e:bf:11:86:cd:d0:78:c2:56:38:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:32:42:32:60:9A:80:53:B3:95:05:F8:63:AE:7F:A5:78:E6:E1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e31362e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.16.0/22
Signature Algorithm: sha256WithRSAEncryption
15:3a:3e:37:8e:6f:7c:db:6e:ee:7c:4e:da:7b:a7:4f:63:65:
fa:3b:f1:c6:a6:b9:87:6b:c9:5d:1d:82:d8:12:02:29:a3:2c:
46:cb:1d:97:c2:71:55:2c:3a:4f:68:d0:36:a5:6f:39:db:da:
b7:67:57:0d:3e:55:1b:7e:3e:29:36:65:5b:89:6e:66:0a:99:
c7:11:6c:12:58:68:2f:7b:5f:3e:03:ee:8e:f6:7f:ff:5a:8b:
47:c4:a0:e5:ff:25:6e:b5:70:77:33:25:cf:d1:2c:02:61:f7:
51:8b:42:cd:51:b4:b5:4e:82:d3:4b:86:78:cc:ea:7d:6b:4e:
20:8d:d2:1a:f1:5c:e1:b4:5e:72:4e:d3:7a:08:66:0b:31:ee:
95:5d:68:30:3b:46:d6:c7:48:63:ae:11:79:f0:c1:30:3a:5f:
dc:e6:70:31:97:a7:f3:14:7e:aa:3e:9e:4f:e2:b8:61:ac:5e:
ae:77:8b:3d:0a:81:74:8e:8d:17:4b:24:45:a9:d7:c5:c4:ba:
c4:5d:d8:78:5e:7e:36:fc:bb:fe:2a:23:7f:82:a2:51:f0:15:
a8:1b:90:28:b5:cb:69:c4:7b:e4:0c:1c:f6:37:48:33:14:1f:
94:01:1c:90:20:48:a9:e8:4a:b0:98:7d:b1:9f:92:0c:85:4f:
b0:db:ef:cb
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUEhSvX0NGMgixszgpDtZYbs76GX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MjMxODEwMzNaFw0yNjA3MjIxODE1MzNaMDMxMTAvBgNV
BAMTKDkxRUEzMjQyMzI2MDlBODA1M0IzOTUwNUY4NjNBRTdGQTU3OEU2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAf/CtkQ1ySPPpuFh3595Ixx/
vy7N1BQt/p5XBoz+ooTaeS6DdwUDIsp2E48UIz+Lv8Z0ti4/kBnWeqTkoaoDOzys
UxPYMuWcc5w3HMQJLny7OggI99SvJT7SBOYgLy8TST/OBOOgyVfhCOiTVJoWy/Kl
DotFZm7cLOvDxA3Bw1o2H+pLD4S/Bh56bvSdMB47J4t1LfNoPPNjLqIeFv0Y/5En
4cJyLrDzpmFY1zedggvMG/oZ/EM34nR9eTPgeP6sxuwq/WM2Yxg6Xcw9S+hGpeff
891LzdXfz/yN0KHIFzhBy/gDDuBj37mUJnydJVhQiHmcPr8Rhs3QeMJWOLENAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUkeoyQjJgmoBTs5UF+GOuf6V45uEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
EDANBgkqhkiG9w0BAQsFAAOCAQEAFTo+N45vfNtu7nxO2nunT2Nl+jvxxqa5h2vJ
XR2C2BICKaMsRssdl8JxVSw6T2jQNqVvOdvat2dXDT5VG34+KTZlW4luZgqZxxFs
ElhoL3tfPgPujvZ//1qLR8Sg5f8lbrVwdzMlz9EsAmH3UYtCzVG0tU6C00uGeMzq
fWtOII3SGvFc4bReck7TeghmCzHulV1oMDtG1sdIY64RefDBMDpf3OZwMZen8xR+
qj6eT+K4YaxerneLPQqBdI6NF0skRanXxcS6xF3YeF5+Nvy7/iojf4KiUfAVqBuQ
KLXLacR75Awc9jdIMxQflAEckCBIqehKsJh9sZ+SDIVPsNvvyw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 17:22:19 2025 by rpki-client