Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36362e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e36362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: j1rNU5qBw184USK9bwutXcNiAoaxJ8itjuo3pdawZZE=
Subject key identifier: 97:9B:7D:2E:DA:89:D3:55:52:BF:0F:F8:C6:40:F0:ED:84:25:EB:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7601701ACB65A5FD8211CD160743DE2E69088031
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:27 +0000
ROA not before: Thu 28 Aug 2025 08:46:27 +0000
ROA not after: Thu 27 Aug 2026 08:51:27 +0000
asID: 212238
IP address blocks: 212.97.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:01:70:1a:cb:65:a5:fd:82:11:cd:16:07:43:de:2e:69:08:80:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 08:46:27 2025 GMT
Not After : Aug 27 08:51:27 2026 GMT
Subject: CN=979B7D2EDA89D35552BF0FF8C640F0ED8425EBB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:58:2c:d0:2b:b8:be:b3:e2:dc:65:da:1e:
02:a4:04:8f:ee:e9:f4:04:b3:dc:a0:e9:d7:94:1d:
01:b5:e5:92:98:ff:ac:4d:89:2a:44:da:fb:3e:1b:
ca:5b:ea:0c:4d:40:4c:ec:b5:c1:d5:92:19:a6:67:
94:49:ac:b5:cd:b1:86:04:c7:f5:e9:8d:a1:80:74:
c5:3e:93:03:5c:db:6e:c5:73:0c:e5:c3:ec:58:74:
bb:14:07:a5:36:46:35:5b:be:52:93:f7:eb:7d:65:
26:16:1d:fc:d5:f9:fb:a1:61:a8:e9:7a:7b:8b:10:
fa:ed:aa:f9:74:33:11:5b:37:19:3d:99:81:40:e7:
be:b9:24:90:b0:88:98:7c:f3:e7:1e:ac:49:c6:9a:
37:9c:a1:5c:96:fe:45:2a:8c:c8:4b:88:a4:d9:6b:
26:f0:b5:7b:6b:27:ac:3f:82:bb:e4:9d:a0:8a:66:
94:a7:ba:20:55:76:9d:7f:ad:14:8f:87:bb:66:d4:
30:de:03:3f:56:26:5e:ac:28:ee:d9:66:31:c4:76:
ef:ea:72:fa:a5:fe:e0:92:93:20:71:c4:e6:14:98:
61:de:29:f2:ba:f9:1e:3b:45:e9:d1:0a:35:b2:98:
04:aa:4b:89:ad:df:ee:b1:00:8d:aa:62:6b:c2:15:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9B:7D:2E:DA:89:D3:55:52:BF:0F:F8:C6:40:F0:ED:84:25:EB:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.66.0/24
Signature Algorithm: sha256WithRSAEncryption
29:59:43:45:00:d3:60:f8:39:c5:e2:b1:d3:a1:d3:5a:4d:01:
1f:40:a8:19:91:0b:ff:40:78:15:20:67:55:4a:37:f0:3d:de:
51:59:30:f2:7e:fc:52:ff:4a:b6:29:8d:ed:16:13:85:88:ef:
a8:a5:fb:b0:c0:31:14:ff:6d:1c:59:28:65:89:28:e7:23:9d:
b2:36:c4:2f:1b:cf:c9:18:f0:4e:1b:ee:31:cd:16:11:f5:de:
bd:30:21:0d:1f:56:8b:e7:62:6f:68:2d:45:39:28:f4:93:e9:
7c:e3:bf:6a:51:d1:10:49:ff:92:9f:9c:16:ab:94:ee:18:0f:
81:82:a6:43:b5:1c:a1:46:a5:83:7c:09:2f:77:10:f7:89:61:
f1:1e:1b:1e:f1:34:3e:c1:03:a9:43:81:b0:8f:21:21:22:b9:
42:8d:b6:f0:fa:46:2f:69:27:03:39:fd:1b:5d:35:4a:5b:e8:
2c:55:9e:b8:fa:c0:87:41:85:fe:d4:c4:e8:8d:c4:22:98:83:
14:45:0e:6a:e1:38:e3:9f:5f:e8:38:84:e1:7f:30:19:de:a9:
2c:83:f3:d0:ee:d6:f2:40:94:56:c8:3f:d2:06:5e:0e:40:ce:
53:15:7a:7a:57:e3:f2:5b:74:7d:c4:fb:a0:6f:56:68:84:78:
94:50:0f:c0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdgFwGstlpf2CEc0WB0PeLmkIgDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjgwODQ2MjdaFw0yNjA4MjcwODUxMjdaMDMxMTAvBgNV
BAMTKDk3OUI3RDJFREE4OUQzNTU1MkJGMEZGOEM2NDBGMEVEODQyNUVCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F1gs0Cu4vrPi3GXaHgKkBI/u
6fQEs9yg6deUHQG15ZKY/6xNiSpE2vs+G8pb6gxNQEzstcHVkhmmZ5RJrLXNsYYE
x/XpjaGAdMU+kwNc227Fcwzlw+xYdLsUB6U2RjVbvlKT9+t9ZSYWHfzV+fuhYajp
enuLEPrtqvl0MxFbNxk9mYFA5765JJCwiJh88+cerEnGmjecoVyW/kUqjMhLiKTZ
aybwtXtrJ6w/grvknaCKZpSnuiBVdp1/rRSPh7tm1DDeAz9WJl6sKO7ZZjHEdu/q
cvql/uCSkyBxxOYUmGHeKfK6+R47RenRCjWymASqS4mt3+6xAI2qYmvCFTdfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUl5t9LtqJ01VSvw/4xkDw7YQl67EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1GFCMA0GCSqGSIb3DQEBCwUAA4IBAQApWUNFANNg+DnF4rHTodNaTQEfQKgZkQv/
QHgVIGdVSjfwPd5RWTDyfvxS/0q2KY3tFhOFiO+opfuwwDEU/20cWShliSjnI52y
NsQvG8/JGPBOG+4xzRYR9d69MCENH1aL52JvaC1FOSj0k+l8479qUdEQSf+Sn5wW
q5TuGA+BgqZDtRyhRqWDfAkvdxD3iWHxHhse8TQ+wQOpQ4GwjyEhIrlCjbbw+kYv
aScDOf0bXTVKW+gsVZ64+sCHQYX+1MTojcQimIMURQ5q4Tjjn1/oOIThfzAZ3qks
g/PQ7tbyQJRWyD/SBl4OQM5TFXp6V+PyW3R9xPugb1ZohHiUUA/A
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:52:56 2025 by rpki-client