Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa
File: 3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: sMqmDnpqg8NvpVpNQufcwg6D6VH6wa5b8QHb6v4/MKA=
Subject key identifier: 69:03:68:E4:BB:B2:F3:0B:20:51:BF:75:76:27:FC:23:20:32:1B:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 751E539A1662F9803B8DFC9B6478A83D85B2E251
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa
Signing time: Tue 15 Jul 2025 19:22:46 +0000
ROA not before: Tue 15 Jul 2025 19:17:46 +0000
ROA not after: Tue 14 Jul 2026 19:22:46 +0000
asID: 141995
IP address blocks: 217.217.248.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:1e:53:9a:16:62:f9:80:3b:8d:fc:9b:64:78:a8:3d:85:b2:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 15 19:17:46 2025 GMT
Not After : Jul 14 19:22:46 2026 GMT
Subject: CN=690368E4BBB2F30B2051BF757627FC2320321BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:f3:dc:1e:d7:b0:22:38:5e:6e:25:62:86:
42:41:1e:b7:3b:48:49:3f:05:37:b8:9e:54:7a:94:
bc:02:d5:36:06:00:0c:3f:94:0b:14:8c:84:5e:5e:
94:e4:37:43:60:48:ad:4e:ce:f8:5f:4f:9a:ad:8d:
d6:69:02:33:a0:14:ae:47:7d:b5:c1:34:09:4a:e5:
38:de:ff:3e:8c:f5:e7:d0:62:d8:4b:ba:ab:33:4a:
83:d1:45:f0:72:8a:51:24:99:da:d3:e6:58:f8:4c:
cc:e7:0f:d1:bf:d4:9e:e6:32:57:a1:c8:c6:25:d5:
1f:a1:aa:ee:86:ac:ce:46:f2:49:4e:72:3c:01:55:
d8:88:31:1f:cb:83:4b:af:ec:17:30:ee:1d:77:82:
cf:38:62:cb:e0:7c:e4:52:ef:cd:b6:39:ea:96:a4:
1e:e9:f9:ad:e3:ad:2b:e0:c0:e2:2b:db:0b:77:bb:
81:bb:00:56:a8:db:9d:8b:46:75:99:30:f8:07:82:
6e:8f:bd:73:4d:7f:5f:7e:68:c1:66:b1:03:9c:78:
d8:13:67:b1:56:1b:20:14:8a:25:92:e8:e0:d9:c7:
a1:0b:28:37:a2:02:cd:3b:5c:ff:ef:ae:0e:9c:1d:
c9:22:79:2b:e6:25:19:d6:bb:dd:d0:ba:8e:6b:d0:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:68:E4:BB:B2:F3:0B:20:51:BF:75:76:27:FC:23:20:32:1B:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234382e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:63:7b:c1:10:97:a7:fa:27:1d:f6:58:f1:16:01:1e:43:77:
8a:9d:2b:31:c4:13:40:2c:a3:5d:f1:9b:c4:94:6a:47:8a:a7:
26:4d:9c:09:03:84:c5:0f:a8:8e:7e:6a:ce:d3:bf:81:c0:5b:
f1:a4:3c:d1:e3:f0:b9:b1:7d:7a:1b:60:12:24:29:7c:15:99:
e5:e3:4e:ab:81:b4:11:0a:be:2f:fb:50:24:04:7a:82:b0:6a:
58:ca:1c:cf:3f:f7:59:85:9a:43:e8:16:bd:3d:2c:6d:72:36:
ec:0d:b2:fb:bb:3d:4d:ef:ed:af:38:bf:ab:2a:22:69:5f:78:
87:ad:38:3f:63:5f:dd:19:27:f1:c6:f8:41:ee:03:6f:ba:53:
0c:0f:da:84:e3:26:e0:c0:f1:65:41:2f:23:8f:46:6f:d0:3c:
af:f4:80:bc:b9:78:f9:4a:ea:34:03:0a:1c:1f:f3:f6:d7:6f:
05:97:b1:04:11:2b:3e:16:98:3a:d0:91:30:f8:7a:27:7f:5f:
c9:00:d5:50:d4:06:84:24:1a:23:57:a3:3e:fb:c3:ac:c6:da:
bb:6a:30:3f:99:fd:ad:76:5d:aa:57:23:2e:50:23:f0:e7:5b:
18:56:57:2b:af:d3:8e:20:3d:1e:3a:c3:b8:ed:0e:41:97:e6:
cc:00:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:26:21 2025 by rpki-client