Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37322e302f32312d3234203d3e203539363432.roa
File: 3231372e3231372e37322e302f32312d3234203d3e203539363432.roa (raw, json)
Hash identifier: hEUK8OgITl+BiP0ui6msI0LUfzH8c2fu8n4lXce2GwI=
Subject key identifier: 4F:8B:1D:23:7A:02:64:63:10:F5:80:A2:0A:A6:1D:BB:A0:08:18:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A5330273CA9D37A1742EFC4AD4850D6C71FA863
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37322e302f32312d3234203d3e203539363432.roa
Signing time: Tue 22 Jul 2025 09:27:06 +0000
ROA not before: Tue 22 Jul 2025 09:22:06 +0000
ROA not after: Tue 21 Jul 2026 09:27:06 +0000
asID: 59642
IP address blocks: 217.217.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:53:30:27:3c:a9:d3:7a:17:42:ef:c4:ad:48:50:d6:c7:1f:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 09:22:06 2025 GMT
Not After : Jul 21 09:27:06 2026 GMT
Subject: CN=4F8B1D237A02646310F580A20AA61DBBA00818C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:68:12:43:c7:6d:95:99:56:2a:a4:cc:4c:
32:20:88:fb:46:a7:42:52:63:44:92:06:3c:48:0c:
16:81:53:02:22:c0:30:93:24:6c:44:cf:ef:78:06:
0f:2a:e7:3d:df:c9:68:24:56:8d:21:58:63:79:45:
ce:76:ac:e6:fe:2f:55:e2:c9:87:3a:54:4c:39:c1:
55:63:6d:0b:9d:d0:09:65:ad:5b:18:5e:ad:3c:95:
4e:63:24:5a:3d:92:3f:82:2b:f7:df:f4:bf:2c:4a:
d9:d1:25:66:55:9d:47:af:36:33:99:e8:4c:d2:fb:
b6:4e:30:4a:be:89:aa:c7:8e:a4:5e:a0:b2:ba:a3:
5f:02:4d:33:bd:af:ac:4e:75:da:fd:78:6f:d4:84:
29:97:70:00:3e:b7:e8:66:f7:2f:ad:93:42:ae:96:
d4:21:33:2b:7f:6e:69:75:cc:10:51:09:25:f1:29:
0e:b1:ef:7a:1d:d8:62:74:9b:17:7e:f0:ca:46:14:
1c:eb:4b:77:2f:53:fe:d7:43:2f:a1:66:59:17:1b:
85:85:5e:6f:ea:d9:e4:4e:32:26:64:8f:45:43:21:
3f:4a:d3:1e:a4:a9:0a:43:8a:4b:c1:40:c2:0b:59:
c9:04:ef:b1:d5:42:2c:b6:ce:f4:c1:98:33:8b:df:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:1D:23:7A:02:64:63:10:F5:80:A2:0A:A6:1D:BB:A0:08:18:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e37322e302f32312d3234203d3e203539363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:06:c3:21:40:90:a7:7b:30:fc:bb:0a:a2:c7:fa:0e:26:8b:
ad:df:31:c3:ce:ed:25:8e:9f:67:e2:ad:f8:e7:e6:fc:22:dd:
9f:d4:74:4e:5d:28:db:58:35:fa:eb:08:4b:bc:5f:cd:94:8b:
8f:17:84:e8:7e:02:b8:47:db:ad:65:68:d5:7f:bd:8c:50:f4:
74:7b:05:03:b9:b5:8f:9a:b2:1b:e2:5a:49:b5:1f:5b:c4:08:
3c:11:da:94:b6:50:14:58:e8:4a:3d:d7:aa:65:31:53:19:47:
cc:27:b2:60:e5:84:7a:37:b2:73:25:3d:0e:00:4c:18:5f:9b:
78:9f:25:af:d1:2d:97:13:bb:b6:ea:34:b9:8b:76:7f:44:14:
e8:fe:2e:be:a2:b9:ed:c2:f9:3a:8e:02:4d:7f:aa:ac:e7:ef:
51:46:ea:0e:04:26:d3:c7:85:0b:eb:ff:a0:8f:f9:85:4e:62:
fe:a1:a0:fd:29:88:43:b9:48:df:d9:83:ed:3f:83:3c:9b:99:
97:d4:55:3a:a3:36:63:65:e7:e9:19:1e:45:6b:8e:9d:0a:37:
7b:5f:d1:bf:84:00:18:4a:b7:5f:4f:51:b9:97:a6:7f:a1:38:
d1:a4:58:3d:22:f5:e8:e1:7d:12:5b:d6:01:ea:7d:86:9e:7f:
02:12:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:45:39 2025 by rpki-client