Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e2032383536.roa
File: 3231372e3231372e36302e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: 8YEK69vIrLUxyWX2yronfPKzgIV+QRlvGjUFTdBaxxA=
Subject key identifier: 90:D7:BC:2B:0D:9F:B5:61:FB:7A:8A:39:E7:97:10:F8:F6:41:E6:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 684EDE4CA1605A20272C0DC7BB0894CAFB3E3FDA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e2032383536.roa
Signing time: Thu 17 Jul 2025 17:42:44 +0000
ROA not before: Thu 17 Jul 2025 17:37:44 +0000
ROA not after: Thu 16 Jul 2026 17:42:44 +0000
asID: 2856
IP address blocks: 217.217.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4e:de:4c:a1:60:5a:20:27:2c:0d:c7:bb:08:94:ca:fb:3e:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 17:37:44 2025 GMT
Not After : Jul 16 17:42:44 2026 GMT
Subject: CN=90D7BC2B0D9FB561FB7A8A39E79710F8F641E6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:81:5d:ce:3f:11:29:94:a3:26:0b:d2:35:
f2:5d:79:39:d2:90:a1:7e:a3:5d:9c:96:7e:60:5e:
08:97:38:8a:ba:44:24:b8:ad:c0:16:56:bf:c5:9b:
5f:29:90:9d:a2:fa:ad:ff:71:ca:ea:13:31:1a:18:
09:a0:a5:d6:e0:da:32:7f:8a:25:9e:10:f8:80:3f:
00:f8:31:f7:a5:bc:f9:9e:7b:91:89:e9:9c:27:72:
d2:c6:c8:de:b1:27:2e:27:7a:d8:57:d4:84:57:34:
63:15:a1:2e:16:05:b5:33:b8:76:01:e6:39:a0:ef:
95:f2:76:97:f1:49:6c:85:5e:6c:a3:67:5a:c5:af:
c7:1c:71:ac:a6:61:19:fc:1a:0f:ed:cc:ff:5c:16:
6b:e0:7e:a7:6c:2a:8f:54:5b:0a:01:e4:a0:ea:ca:
a2:3e:65:57:21:ff:83:26:6b:3a:3a:4e:6f:74:ae:
10:6c:0a:b9:a2:08:a0:b8:8e:6f:ec:77:d9:6d:b2:
e4:0b:62:c8:4b:74:f8:d8:be:77:7d:cd:89:db:31:
ed:dd:81:ee:a2:90:af:53:9f:51:7c:af:c3:67:0a:
d7:f5:a6:df:36:65:76:45:8f:70:68:30:79:fe:8b:
a8:df:79:2e:c0:f6:db:d9:e3:3a:1d:e7:2d:12:a3:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:BC:2B:0D:9F:B5:61:FB:7A:8A:39:E7:97:10:F8:F6:41:E6:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36302e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.60.0/22
Signature Algorithm: sha256WithRSAEncryption
34:23:18:49:68:dd:65:be:29:6f:5f:50:ee:f5:44:f0:cd:08:
8b:2c:e6:e8:2a:c6:13:e7:e8:b6:f1:ad:41:36:a4:92:07:a8:
bb:7e:98:3a:7d:6c:0e:fa:26:d3:70:c5:e9:72:2a:9b:90:92:
37:f8:e1:d9:2f:71:ea:b7:56:a5:cf:42:9a:a4:e8:a4:99:ea:
87:4d:69:92:51:b0:60:ca:aa:2d:c9:51:d1:32:6d:9e:e6:68:
c9:13:cd:4b:2c:53:fb:ad:9e:26:68:b8:d1:ef:8a:1e:99:30:
4d:b8:8a:a4:1f:3a:a7:4a:43:43:8c:c8:a2:36:e0:b1:62:b8:
4b:ef:49:8e:10:bd:44:ce:25:c1:39:99:f5:f1:71:9c:32:f1:
dd:59:8d:c6:09:d4:57:51:17:ba:d1:e6:1d:dc:4d:64:8d:5a:
f2:e7:fc:01:4a:70:3c:db:76:cc:cd:97:df:b0:4f:ad:a1:b3:
48:cb:8d:ad:07:a2:13:68:97:3d:12:f4:59:63:c3:59:fe:f3:
06:43:b4:34:c4:6e:8e:89:26:3d:b6:cc:78:79:e9:c6:00:f2:
03:f7:ce:be:b1:31:3c:b3:c3:df:79:08:44:ce:63:90:7d:45:
0a:ca:1c:d6:9b:21:64:d6:28:f2:4f:f1:65:65:a7:2b:97:c7:
a6:51:2d:fc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaE7eTKFgWiAnLA3HuwiUyvs+P9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MTcxNzM3NDRaFw0yNjA3MTYxNzQyNDRaMDMxMTAvBgNV
BAMTKDkwRDdCQzJCMEQ5RkI1NjFGQjdBOEEzOUU3OTcxMEY4RjY0MUU2RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxM4Fdzj8RKZSjJgvSNfJdeTnS
kKF+o12cln5gXgiXOIq6RCS4rcAWVr/Fm18pkJ2i+q3/ccrqEzEaGAmgpdbg2jJ/
iiWeEPiAPwD4MfelvPmee5GJ6ZwnctLGyN6xJy4nethX1IRXNGMVoS4WBbUzuHYB
5jmg75XydpfxSWyFXmyjZ1rFr8cccaymYRn8Gg/tzP9cFmvgfqdsKo9UWwoB5KDq
yqI+ZVch/4Mmazo6Tm90rhBsCrmiCKC4jm/sd9ltsuQLYshLdPjYvnd9zYnbMe3d
ge6ikK9Tn1F8r8NnCtf1pt82ZXZFj3BoMHn+i6jfeS7A9tvZ4zod5y0SoxwBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUkNe8Kw2ftWH7eoo555cQ+PZB5vMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTM2
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzUzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtnZ
PDANBgkqhkiG9w0BAQsFAAOCAQEANCMYSWjdZb4pb19Q7vVE8M0Iiyzm6CrGE+fo
tvGtQTakkgeou36YOn1sDvom03DF6XIqm5CSN/jh2S9x6rdWpc9CmqTopJnqh01p
klGwYMqqLclR0TJtnuZoyRPNSyxT+62eJmi40e+KHpkwTbiKpB86p0pDQ4zIojbg
sWK4S+9JjhC9RM4lwTmZ9fFxnDLx3VmNxgnUV1EXutHmHdxNZI1a8uf8AUpwPNt2
zM2X37BPraGzSMuNrQeiE2iXPRL0WWPDWf7zBkO0NMRujokmPbbMeHnpxgDyA/fO
vrExPLPD33kIRM5jkH1FCsoc1pshZNYo8k/xZWWnK5fHplEt/A==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:37 2025 by rpki-client