Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e35322e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: IDmRNPGdcO8F2agYvXQQjNKpFTXyGWXrIHUqewooAkc=
Subject key identifier: 21:12:45:3B:E5:4F:59:FF:80:71:D9:43:E8:DF:E1:CB:FE:1A:94:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B1A64161E24AFC600FD375F22904596DEEF482D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e203230313135.roa
Signing time: Fri 18 Jul 2025 19:14:28 +0000
ROA not before: Fri 18 Jul 2025 19:09:28 +0000
ROA not after: Fri 17 Jul 2026 19:14:28 +0000
asID: 20115
IP address blocks: 217.217.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1a:64:16:1e:24:af:c6:00:fd:37:5f:22:90:45:96:de:ef:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 18 19:09:28 2025 GMT
Not After : Jul 17 19:14:28 2026 GMT
Subject: CN=2112453BE54F59FF8071D943E8DFE1CBFE1A94C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:3b:76:7a:7d:79:a3:55:b4:dc:f9:a6:6c:
cb:31:97:81:a2:9b:30:77:53:fa:6f:1f:db:8e:40:
2b:3e:76:8d:b7:48:f0:d8:83:02:07:57:ba:10:40:
0d:a8:ab:17:c5:d1:fa:79:b2:c9:7d:ed:bd:ea:5c:
c3:dc:aa:6f:a1:0d:8d:b9:d9:9e:85:35:d0:b7:1d:
27:8f:39:63:15:0d:ae:73:47:43:46:db:9a:e7:20:
30:ba:d9:7a:d4:67:ed:40:02:9d:5b:43:8e:d7:2f:
2a:19:42:b1:66:5c:35:cc:2c:12:55:2d:16:3f:c9:
01:6d:66:a9:29:3f:7f:64:cd:c7:35:0b:62:21:8c:
77:b0:99:c8:ac:98:00:48:26:0f:1d:45:3d:95:7e:
3a:3f:26:ac:16:14:5a:35:94:12:45:20:2c:3e:b8:
71:6b:6b:23:ce:fa:27:f4:a3:e3:0e:b5:8e:14:5a:
bf:6d:29:9e:a2:86:84:1a:a7:d9:ea:59:fc:31:79:
17:62:83:c7:38:bb:50:20:ea:5f:ca:a5:1e:02:7e:
0a:07:05:b7:51:54:7a:1d:3e:00:c6:4f:71:80:6a:
af:fc:7b:07:70:b2:5d:a3:ec:15:d4:96:5a:0a:5b:
6a:0d:75:43:15:6b:e9:3e:06:9f:75:db:6b:dd:da:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:12:45:3B:E5:4F:59:FF:80:71:D9:43:E8:DF:E1:CB:FE:1A:94:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e35322e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a0:56:83:ed:fd:d2:0f:80:0a:b1:0a:39:a5:af:dc:03:00:
14:48:b2:6b:75:2c:88:a1:aa:6a:dd:b3:a5:eb:1e:fd:ea:e7:
f3:1f:80:40:da:ad:07:00:7a:74:19:f3:e0:ab:b4:77:ac:cc:
25:85:e1:ff:dd:dc:ac:3f:a6:23:3f:5a:f9:fe:b4:81:86:ed:
35:af:84:38:92:97:91:c5:8c:05:38:5c:00:44:ec:87:05:d3:
94:c0:38:4d:2b:05:7b:17:a4:81:04:4d:33:97:12:83:4b:53:
ef:a3:d8:12:90:76:05:ef:ec:f2:ce:ca:2a:b0:01:d1:c6:12:
20:7c:f8:8f:cc:30:ba:b2:3e:26:c1:23:36:c4:2e:87:da:9b:
43:ec:c8:95:4f:0b:c9:97:5f:96:9f:da:8d:2a:5d:9e:3c:6b:
94:78:36:c0:80:c0:d8:8e:60:9c:0b:de:37:ee:6f:4b:c0:1b:
47:17:3d:b3:78:b2:5d:34:e0:f1:07:0c:b4:ba:1f:4f:9a:0d:
7b:ae:0a:77:5f:e1:a7:30:ed:03:11:37:88:46:a1:16:5b:64:
9d:a3:48:ba:73:66:87:3a:36:f1:7d:1d:b3:15:46:44:28:22:
c6:1e:ed:7c:5e:c8:0f:0c:df:0e:0f:db:6d:5e:0a:6c:62:7b:
5b:24:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:06:44 2025 by rpki-client