Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3139372e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: MWXQ0DVrjlT1gERJZLdSzEhpabsXeMHAd/0+5hIKM7c=
Subject key identifier: D6:A5:93:D9:0C:42:2F:71:EB:CC:F0:E7:EE:8D:97:B4:C6:06:F8:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4AFE0AD1B559D3DA2BE21ECFBDF18CFF1ECBF50D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:42 +0000
ROA not before: Thu 04 Sep 2025 06:58:42 +0000
ROA not after: Thu 03 Sep 2026 07:03:42 +0000
asID: 3257
IP address blocks: 217.217.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fe:0a:d1:b5:59:d3:da:2b:e2:1e:cf:bd:f1:8c:ff:1e:cb:f5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:42 2025 GMT
Not After : Sep 3 07:03:42 2026 GMT
Subject: CN=D6A593D90C422F71EBCCF0E7EE8D97B4C606F863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:e4:7a:35:1a:55:08:75:ff:5e:19:43:71:
38:58:dc:a3:6c:7a:b9:ae:0d:8a:e6:d7:0e:83:2a:
95:c2:bc:51:c5:6e:7f:df:cf:a7:00:6d:a6:82:b3:
6e:2a:ec:9f:70:5f:cf:4c:b8:56:4f:6d:51:80:1d:
c1:84:98:3a:d2:d1:a0:a9:b6:90:ed:4e:1e:1d:68:
82:95:c4:29:53:59:61:c8:8c:1b:0f:16:f3:6b:b4:
13:14:8e:2d:00:71:6c:49:cf:2b:8d:b8:34:5b:dc:
fd:b1:a5:3f:82:e4:15:74:8e:07:46:81:2d:28:88:
85:8c:9f:19:29:b5:47:85:1b:51:c2:b2:11:13:e9:
a0:bc:d9:1a:af:fb:bc:23:05:6b:55:d5:e9:ce:fb:
e5:c0:bb:86:9a:21:d7:97:1d:93:16:a1:34:18:45:
10:3b:40:30:45:8e:e0:3e:0a:6d:fb:7c:8f:c0:75:
0e:54:ef:bb:47:e7:9d:83:2e:a7:a0:88:bd:77:6f:
cb:86:ea:cc:af:ba:44:71:c1:e2:3c:9e:8b:84:f3:
c6:9d:45:8c:2d:17:b4:53:2e:2e:cd:5b:36:4e:e5:
eb:4c:45:22:88:e6:f1:64:2c:f2:e0:c1:a4:0e:74:
37:60:bc:f0:f2:4e:65:e9:51:12:32:df:08:75:79:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:93:D9:0C:42:2F:71:EB:CC:F0:E7:EE:8D:97:B4:C6:06:F8:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139372e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9f:df:ee:98:1b:41:cb:82:00:3d:76:3c:3d:05:a1:fb:d2:
03:b1:a3:55:c3:b6:f6:98:89:7d:4f:81:05:e4:a8:d4:a8:f7:
33:8a:a8:57:db:78:ba:3e:50:c3:e2:2a:a9:8c:9c:4f:60:e0:
de:a7:a4:c4:a9:36:95:74:15:a1:27:35:39:da:cb:48:fb:85:
57:1b:7f:a8:d4:ad:02:9a:1c:4c:e5:f9:3f:00:ee:53:07:4e:
1e:21:6e:15:6c:6d:1e:ff:df:b2:83:18:07:2d:97:8d:d3:49:
2c:6c:84:ea:cb:0e:0f:88:80:34:85:21:f3:08:00:19:5d:5a:
74:d9:49:e6:62:38:9c:96:a1:7a:e8:f0:0d:ab:e5:40:7d:54:
36:b2:1f:27:1a:70:dd:27:f5:b7:f0:0c:7f:6f:c4:ef:78:7f:
a4:3d:0a:0c:f1:83:4a:91:69:8b:77:d2:f3:0c:0a:13:ae:52:
88:df:58:54:c2:21:9b:8f:4f:c0:da:fa:b5:84:b6:82:ef:ea:
b1:cc:ba:bc:52:8d:e1:04:cc:a0:df:fd:c8:e0:70:d9:33:56:
fc:45:13:e7:71:63:74:54:cf:d6:d7:67:16:99:70:3d:0f:d1:
4b:cf:d3:83:d6:0b:e2:58:64:14:b2:7a:76:46:e2:9f:f5:90:
4a:aa:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:44:28 2025 by rpki-client