Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32362e302f32342d3234203d3e203136323736.roa
File: 3231372e3231372e32362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: HMprDHiB/nJMM2pN+ajIcBnIvpICSzN5QKgO4Hove68=
Subject key identifier: 11:95:6C:70:28:F5:C8:A0:DB:C2:10:E1:68:70:72:29:23:57:E9:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7CD87B7CC8F5858ADA4BCD30805A188715B978
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32362e302f32342d3234203d3e203136323736.roa
Signing time: Wed 23 Jul 2025 11:46:46 +0000
ROA not before: Wed 23 Jul 2025 11:41:46 +0000
ROA not after: Wed 22 Jul 2026 11:46:46 +0000
asID: 16276
IP address blocks: 217.217.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d8:7b:7c:c8:f5:85:8a:da:4b:cd:30:80:5a:18:87:15:b9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 11:41:46 2025 GMT
Not After : Jul 22 11:46:46 2026 GMT
Subject: CN=11956C7028F5C8A0DBC210E1687072292357E9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:67:a1:90:ca:e3:85:b3:47:80:87:82:c0:
79:53:a4:60:2f:ff:2c:b5:99:37:18:81:5b:dc:c3:
4f:2e:13:33:7a:f6:fe:b8:0e:4f:ff:85:13:f7:a7:
37:e1:b1:8b:53:04:d8:33:a9:3c:73:a3:19:48:91:
67:55:1e:41:12:91:e5:43:e6:61:f6:b6:0f:64:c1:
b9:6c:a1:cc:48:f6:d6:7b:69:b7:1a:98:22:9d:d3:
f9:28:c4:0c:0d:cb:65:f2:29:30:d4:e3:a2:92:fe:
e4:9d:e8:7c:1a:7d:05:c8:e6:47:eb:2b:05:94:1f:
80:9e:e8:64:3b:e9:ed:0f:10:e8:d9:bc:e4:92:5a:
a1:c7:7f:10:56:58:61:c5:67:8d:7c:81:f8:ef:b6:
70:ef:4c:a8:96:88:70:9c:d8:11:f6:ba:e3:9e:93:
d8:e0:a0:01:85:df:c6:2b:0e:a5:69:0f:5b:90:78:
7a:17:b6:c5:25:a8:a1:a4:2d:d7:e4:ff:7a:d1:7a:
26:dd:1a:f3:e7:b0:34:56:70:e8:f6:0d:50:1b:d8:
b5:e4:76:61:9f:28:a4:7c:fe:69:43:e9:22:0c:c1:
3c:dd:3d:6e:6e:10:4c:1c:42:8c:11:56:49:85:33:
81:8b:50:c0:2c:b3:64:a5:3f:5b:c3:99:c7:6b:a0:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:6C:70:28:F5:C8:A0:DB:C2:10:E1:68:70:72:29:23:57:E9:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e32362e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:99:61:d8:ad:9f:61:f2:d4:a9:1a:b9:21:a1:c6:94:e3:70:
e7:86:82:55:38:82:46:dc:bc:a1:9b:c2:52:7c:86:31:68:ed:
5a:18:2d:57:b7:94:8e:8c:81:fc:fa:04:df:63:0e:d0:97:e8:
35:24:89:85:66:16:3b:57:8e:c3:fa:36:04:34:eb:b8:97:57:
bc:db:9f:0f:b5:41:86:6b:72:b8:11:29:a2:6e:62:42:ca:f4:
a4:20:8a:df:72:2a:3a:36:d5:6b:11:4d:be:0b:68:3c:76:e7:
40:a6:e5:3e:f8:eb:a8:05:b8:5e:d0:72:40:78:13:ae:90:c0:
c0:d6:73:da:9e:46:d9:ec:5a:4f:85:6c:12:9b:ff:77:0a:71:
66:bd:d2:98:12:ff:fb:7b:b1:8d:c5:55:94:bb:8f:95:e1:8e:
27:5d:1d:25:17:9e:83:c6:e2:6e:34:04:56:c1:b2:51:a2:a5:
b6:3e:13:8a:41:4f:a1:4f:c9:37:d3:cd:0f:f1:f0:27:99:24:
41:96:19:c0:64:48:f5:c4:f6:ed:e7:c4:4a:59:d6:97:1b:65:
ac:cc:20:4d:b5:13:ab:11:90:b1:c3:dd:cc:0d:73:c1:65:b4:
31:c7:5a:61:ce:09:66:b6:bc:a9:96:f9:2e:7b:1f:56:b2:ab:
f3:e6:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:22:52 2025 by rpki-client