Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037303239.roa
File: 3231372e3231372e36382e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: VwiZ1CYMZr5nUjxfU6VpxO+kx33torddq3Rc+iMh9ZM=
Subject key identifier: 24:BA:76:CC:37:F0:9E:AF:60:36:1F:22:94:51:00:8A:62:58:1C:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26AE9B7A84C45436BA64BDE9D79C648CBD205FCE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037303239.roa
Signing time: Wed 23 Jul 2025 18:15:27 +0000
ROA not before: Wed 23 Jul 2025 18:10:27 +0000
ROA not after: Wed 22 Jul 2026 18:15:27 +0000
asID: 7029
IP address blocks: 217.217.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ae:9b:7a:84:c4:54:36:ba:64:bd:e9:d7:9c:64:8c:bd:20:5f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 18:10:27 2025 GMT
Not After : Jul 22 18:15:27 2026 GMT
Subject: CN=24BA76CC37F09EAF60361F229451008A62581C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:70:20:25:e8:63:52:87:22:af:cf:d9:00:
4a:f4:74:53:18:7f:10:95:5c:be:c7:2d:94:3c:37:
5a:71:16:fe:a8:88:55:9f:fa:b3:a3:b2:7c:ba:4a:
89:96:e5:b5:d6:c2:17:bb:a2:f6:60:96:46:1f:d0:
99:da:f0:8a:40:e8:c2:8b:30:38:c6:3f:94:00:ff:
91:54:99:95:48:06:59:7d:eb:f3:39:30:6f:60:33:
fc:5d:41:c1:7f:be:15:05:79:19:13:d6:2a:8e:aa:
87:e9:d4:ce:40:19:0d:d6:fc:ec:97:69:20:18:56:
c7:b0:0c:dd:6f:e8:de:50:c3:15:0b:eb:59:97:56:
b9:45:24:f2:cc:f5:e8:a4:18:65:cd:67:ec:bf:43:
ce:b7:09:9c:f2:0e:82:ec:de:8f:bc:5b:99:c2:a8:
aa:09:89:8f:66:32:e3:4b:b7:a9:89:c0:b4:f6:5a:
5c:e6:b4:92:8a:12:68:af:fa:52:12:73:e0:4a:5a:
5e:e0:72:44:f2:5a:62:09:bb:90:af:52:9e:e9:08:
13:82:28:ee:d8:49:f6:2e:dc:2c:e3:16:a8:c0:22:
30:4c:da:72:7d:69:3f:89:9c:ef:87:75:d1:26:be:
16:e5:21:28:a7:51:c9:95:76:14:6e:bc:9c:d3:b9:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:76:CC:37:F0:9E:AF:60:36:1F:22:94:51:00:8A:62:58:1C:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e36382e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.68.0/22
Signature Algorithm: sha256WithRSAEncryption
19:77:fa:17:4b:86:c7:f5:d3:80:2c:f7:96:2d:11:7a:8b:ad:
77:ce:c4:a0:44:1a:56:86:e2:8f:fd:c4:9d:5f:d6:1a:07:e4:
3c:a5:67:53:09:8a:6d:65:bb:49:a3:51:f3:e4:45:29:9a:d0:
3f:5e:49:3a:4b:62:b5:78:66:9f:08:78:b3:ff:d6:a3:d6:02:
c2:fd:0e:b1:35:7a:f0:49:0f:2b:5b:d1:7e:45:83:b1:32:54:
ae:e8:a4:63:f5:b7:25:49:87:78:ef:9a:13:c3:c3:2c:19:32:
cf:e2:58:91:0c:b6:b7:8e:20:67:bd:e0:46:b8:a5:ba:a2:21:
07:ca:7c:f2:82:5d:a3:54:13:e0:81:5f:df:78:0a:5e:52:2f:
ea:b4:e3:2e:67:b8:43:a4:0a:de:43:de:db:e9:4f:c8:07:96:
3a:c7:89:8e:67:05:9a:cb:c1:03:ec:c1:18:e7:b2:33:4a:68:
f0:b1:4e:af:55:04:3d:b3:51:71:cf:ed:72:c1:cd:1f:39:87:
3c:7f:e9:5f:b4:22:2d:c3:bc:9e:5f:71:d3:0e:0b:2d:b8:fc:
14:2a:16:3b:d4:27:c7:6d:a7:68:61:7c:5d:eb:44:aa:3c:5a:
00:24:bf:2f:82:ef:1d:09:9d:d0:74:36:af:77:9e:9c:1e:e7:
fc:cd:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:20:25 2025 by rpki-client