Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203230313135.roa
File: 3231372e3231372e36342e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: 9pwUubcbWPi8UJ1WwAwI/gRl/x5Iz3qTkm5r/boWQEk=
Subject key identifier: 07:AD:B3:44:F8:8B:1E:80:4F:CF:51:BF:04:1E:F1:EE:E9:11:CB:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7766E9EB21053B735200D4797A0B87ECEDD35ACE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203230313135.roa
Signing time: Wed 23 Jul 2025 18:15:30 +0000
ROA not before: Wed 23 Jul 2025 18:10:30 +0000
ROA not after: Wed 22 Jul 2026 18:15:30 +0000
asID: 20115
IP address blocks: 217.217.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:66:e9:eb:21:05:3b:73:52:00:d4:79:7a:0b:87:ec:ed:d3:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 18:10:30 2025 GMT
Not After : Jul 22 18:15:30 2026 GMT
Subject: CN=07ADB344F88B1E804FCF51BF041EF1EEE911CBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:52:5e:46:81:51:ed:8c:2e:2b:84:12:89:
1d:88:10:3c:e9:ce:a2:71:c8:5a:61:21:c4:80:19:
0e:e7:0c:4b:9d:4d:a7:03:09:3c:01:85:fa:b4:a1:
85:e0:b6:76:2c:38:9e:04:90:10:b2:14:98:db:c7:
a9:38:14:65:3c:78:16:2b:21:8d:eb:d9:9e:b2:45:
bd:0a:fb:72:7d:0e:62:16:51:22:7f:05:dd:27:da:
59:47:26:26:26:52:11:95:fa:15:53:2e:1a:96:90:
94:2c:7b:47:f1:08:da:4e:79:45:1e:58:5b:ce:0d:
f3:c2:05:f0:c0:84:11:21:f7:c3:ca:23:b2:53:78:
c8:9d:50:03:5d:94:e2:97:38:8f:f0:64:00:9c:65:
3a:59:95:f5:5f:57:1e:20:52:47:25:42:10:db:36:
06:59:5d:69:ea:08:03:fe:24:06:b8:5c:d8:d5:80:
35:c7:16:0c:1f:8d:9d:23:70:4a:de:71:cf:10:b3:
e2:95:2c:29:dd:f5:07:92:7b:4d:8f:dd:30:c0:e5:
a0:c4:db:f2:6a:10:93:88:c7:88:3f:e6:de:d4:a7:
a4:c9:30:e1:bc:70:18:68:66:d2:60:4b:dd:b3:04:
9b:b3:eb:2a:47:0f:6c:5c:a2:b5:04:e8:67:2a:69:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:B3:44:F8:8B:1E:80:4F:CF:51:BF:04:1E:F1:EE:E9:11:CB:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36342e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.64.0/22
Signature Algorithm: sha256WithRSAEncryption
70:62:00:00:a8:54:a7:79:b9:fd:1c:e8:8d:0e:5d:58:41:9c:
99:ec:20:82:8b:f4:89:7e:a8:3b:ff:38:af:55:dd:57:96:a2:
f6:18:a4:79:eb:19:e6:ad:c2:88:6d:bb:fc:19:50:fd:0b:64:
1d:8c:62:6d:18:f6:6c:31:ab:a4:bf:f4:f2:7d:63:e7:f2:aa:
9e:ae:76:d4:2f:d2:a1:3b:72:76:5b:94:35:42:95:d1:76:58:
f3:db:e0:9a:67:cd:b3:89:81:fb:e7:21:02:ba:1e:56:c3:f3:
a5:b0:9c:52:3c:b7:de:e0:86:dc:70:76:8c:c7:eb:34:a6:96:
cb:8d:72:d0:42:fa:d7:1c:f4:65:50:19:cb:8d:99:df:b0:d7:
da:50:b4:b7:5c:c9:95:27:62:d7:b7:3d:55:0e:ae:68:4e:c4:
c3:74:3b:fd:db:57:83:a2:03:e8:14:81:51:8a:eb:04:d5:8d:
38:11:fd:f4:cf:2a:8a:0e:ad:58:be:c7:11:85:e2:f7:5d:fc:
16:3b:e3:0c:73:68:8f:54:b5:34:20:34:ec:48:f3:42:69:a7:
a5:a5:7c:7d:96:9e:5d:fd:30:49:f3:1d:ad:99:4a:c5:d8:80:
6e:e7:68:33:bb:f1:07:94:cf:b8:02:a8:96:b7:0a:ab:fa:a4:
cb:2a:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:19:10 2025 by rpki-client