Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e34382e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: MV4azgRuCYHaSvjIGhPljR3Sm0aFo8k9d2D3VH1g2ks=
Subject key identifier: ED:6B:9E:B8:08:FA:3A:B7:57:F7:40:39:8D:5F:3A:57:B4:FB:9B:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31BA563996D63FDAED7129E12CC5B33DCF040825
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037303239.roa
Signing time: Thu 17 Jul 2025 19:05:32 +0000
ROA not before: Thu 17 Jul 2025 19:00:32 +0000
ROA not after: Thu 16 Jul 2026 19:05:32 +0000
asID: 7029
IP address blocks: 217.217.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ba:56:39:96:d6:3f:da:ed:71:29:e1:2c:c5:b3:3d:cf:04:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 19:00:32 2025 GMT
Not After : Jul 16 19:05:32 2026 GMT
Subject: CN=ED6B9EB808FA3AB757F740398D5F3A57B4FB9BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:ee:15:3e:d4:ad:3a:22:4c:ae:c7:71:fe:
41:b9:f8:93:82:a2:0a:6d:10:72:26:23:58:62:fa:
97:32:de:26:e2:a0:a8:a4:f1:29:b9:65:aa:68:15:
07:9f:4d:a1:37:b6:94:b3:ad:1f:f4:07:a0:86:e6:
e2:9a:ce:4e:48:40:1c:28:65:24:9d:e3:9a:20:63:
71:2e:df:c8:1d:71:2c:67:10:8b:88:7d:35:a4:39:
6f:de:73:6e:5c:26:d0:c2:52:57:4a:6a:3e:96:73:
a4:87:79:af:96:af:6c:69:94:18:47:15:e6:7b:d5:
28:50:88:23:9a:8d:36:45:e1:c7:64:78:11:e6:e6:
f5:b0:05:e2:b3:8b:a1:9d:c4:d8:7a:a3:29:18:36:
31:b5:12:49:e2:e0:1f:40:49:e2:63:9c:d0:a9:1a:
86:1f:42:3d:c3:50:7f:28:2a:31:45:4b:1f:12:44:
9b:0c:95:d2:9b:fb:33:27:7a:a7:e7:b3:04:55:6b:
0d:3c:07:29:73:b0:c8:94:c4:8a:4b:f1:94:df:a3:
b3:65:a5:1c:ea:b6:a8:7e:4f:b2:b3:59:aa:3f:36:
ef:01:9a:2a:2d:a8:82:bb:9f:27:0e:65:dd:03:09:
67:ed:e7:d8:ef:52:18:17:34:1a:cb:74:d9:62:14:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:9E:B8:08:FA:3A:B7:57:F7:40:39:8D:5F:3A:57:B4:FB:9B:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e34382e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:84:f7:3a:f0:e9:1b:49:19:36:c9:ab:9e:9e:1c:ef:23:16:
82:1a:69:29:0d:a1:79:90:44:cb:84:25:c3:3b:4a:65:b3:0e:
d1:65:52:e4:fd:1d:25:0a:8c:df:40:92:ce:1c:22:30:fa:b2:
43:b6:0c:ac:47:e3:48:a9:50:f4:83:38:3a:e4:68:63:0a:47:
88:4e:f1:7a:cb:00:be:18:de:6e:b2:25:b8:77:b1:6d:dc:d4:
2a:9d:92:ee:a9:22:3a:d1:e9:89:5d:40:b0:c7:d3:89:a0:39:
70:07:ee:c3:b4:8b:30:12:c3:a8:a4:9b:64:08:42:13:c6:ec:
7f:9c:6e:01:f4:dc:07:a9:d6:59:4d:c9:c4:61:b3:1e:79:83:
13:3f:6e:cc:2b:5f:42:21:9c:fe:f5:b1:81:84:1f:fe:77:72:
7f:e0:c3:5f:ea:c3:ca:4b:04:f3:20:98:65:f7:48:e1:17:35:
16:8c:ff:05:32:ca:22:72:be:43:62:e5:1a:e1:7b:27:58:e9:
76:00:1c:c6:b7:65:f2:d3:89:e5:8f:e0:ab:20:22:28:c2:65:
f7:0e:af:48:fe:32:1f:e9:80:eb:0e:47:ae:9e:af:48:0c:3b:
c3:a4:50:d1:bb:4c:05:f8:aa:38:a8:2a:e0:a1:fc:1a:49:23:
f2:b6:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:14:10 2025 by rpki-client