Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136342e302f32322d3233203d3e20323036343931.roa
File: 3231372e3231362e3136342e302f32322d3233203d3e20323036343931.roa (raw, json)
Hash identifier: XEfThSMdfMIaiP+RiUQhOeNQV0GdeP4mcDAeJwQ5zcs=
Subject key identifier: 6E:AA:68:C6:D4:34:D2:60:55:05:1B:53:8B:F1:75:3E:EE:19:01:9D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28634873E11B14E8008F2AFA3CAF99B8237D1D8D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136342e302f32322d3233203d3e20323036343931.roa
Signing time: Tue 21 Oct 2025 10:11:32 +0000
ROA not before: Tue 21 Oct 2025 10:06:32 +0000
ROA not after: Tue 20 Oct 2026 10:11:32 +0000
asID: 206491
IP address blocks: 217.216.164.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:63:48:73:e1:1b:14:e8:00:8f:2a:fa:3c:af:99:b8:23:7d:1d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 10:06:32 2025 GMT
Not After : Oct 20 10:11:32 2026 GMT
Subject: CN=6EAA68C6D434D26055051B538BF1753EEE19019D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:43:3e:ae:f7:4e:64:36:33:f7:12:64:63:
b1:2f:d1:86:8c:dd:1e:b2:1c:fb:d2:67:5c:9b:af:
05:b6:50:b2:91:dc:40:79:4e:ec:e3:ef:c9:20:c1:
12:97:4f:54:fc:a6:7d:2e:a8:c7:23:b7:66:a5:1f:
26:fc:be:22:a1:7f:71:a7:c4:0f:5f:4f:b9:3f:7a:
b0:39:cb:61:72:3d:b6:18:21:05:25:50:2c:3c:6d:
ec:bb:90:7d:72:0c:69:b4:95:b6:bf:2f:1f:7a:f2:
ce:bb:8d:4e:e3:3e:1d:b6:b0:4f:74:4c:a3:c6:2b:
c3:ec:10:be:71:1d:03:57:dc:2d:12:bb:b7:d5:c2:
f8:f8:47:4a:8c:48:bd:32:f2:01:21:da:ce:37:29:
ef:51:df:58:94:87:a1:93:de:62:dd:88:f3:a3:63:
81:a3:bb:69:2d:db:27:5c:9c:69:85:95:53:55:b7:
ce:eb:a3:a2:32:09:8c:cb:07:ca:5f:c6:8a:68:5b:
46:d2:2a:30:85:78:19:7c:f2:a6:db:1b:d4:59:9b:
40:c1:9e:29:2a:6d:45:71:85:19:6d:b6:66:4c:53:
f3:68:89:9d:d7:4a:75:ec:17:5b:3d:07:8a:69:97:
81:a0:78:8b:74:80:f2:75:12:4e:dc:2b:65:e5:2a:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:68:C6:D4:34:D2:60:55:05:1B:53:8B:F1:75:3E:EE:19:01:9D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3136342e302f32322d3233203d3e20323036343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.164.0/22
Signature Algorithm: sha256WithRSAEncryption
13:ac:22:b8:8a:97:9b:e3:4f:3f:0b:41:5a:de:5b:c1:b9:f3:
d7:c9:a1:61:14:fa:5a:79:fb:3e:3e:bd:63:59:86:82:99:66:
50:0a:93:f0:b7:73:ca:03:c2:90:c5:e8:14:aa:e7:e7:be:15:
84:13:cb:7a:46:dd:91:e7:6b:76:0d:4d:d3:d5:2e:54:d5:35:
50:85:60:0c:b3:2c:b0:9f:94:a2:5d:7b:9b:33:99:ba:49:c8:
de:a0:5c:b3:71:1a:7f:1c:43:8e:90:db:7e:5d:52:79:53:03:
9d:ec:db:68:a6:51:e4:30:8c:70:83:a5:3f:c2:9e:fb:1d:71:
43:2f:a2:b4:07:c7:53:ae:59:78:c5:63:54:83:e1:c2:7a:00:
a0:8e:7d:d1:bd:7b:df:b2:82:3f:69:75:bb:ef:60:4b:82:89:
ab:95:7c:25:0d:d9:3a:32:82:dd:4c:e8:fd:27:29:78:d3:a3:
07:66:1d:e1:bd:c5:a1:d9:be:0f:ab:48:0b:f3:e4:42:1a:81:
eb:f5:69:2f:fb:54:0a:54:4b:a7:d4:1d:9b:0f:f2:e3:43:e8:
e3:dd:23:50:d4:5b:cc:e8:11:3b:6f:b8:a1:5f:bb:78:09:4f:
ac:2f:48:d3:86:19:9f:d9:5f:cc:86:2e:03:09:e7:d0:c1:76:
12:70:27:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:39:08 2025 by rpki-client