Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3139392e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: He2r+qf0YashuCD/5RBMW18TKdr/v9tIRcnvnUfDKHg=
Subject key identifier: BB:55:F1:E4:81:62:59:BC:28:2F:D0:A9:63:96:CB:EA:55:D8:67:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EBD37AFC6A48946F1242F9321942D4484CAA227
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:40 +0000
ROA not before: Thu 04 Sep 2025 06:58:40 +0000
ROA not after: Thu 03 Sep 2026 07:03:40 +0000
asID: 3257
IP address blocks: 217.217.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bd:37:af:c6:a4:89:46:f1:24:2f:93:21:94:2d:44:84:ca:a2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:40 2025 GMT
Not After : Sep 3 07:03:40 2026 GMT
Subject: CN=BB55F1E4816259BC282FD0A96396CBEA55D867FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:55:7b:33:d5:93:69:97:5a:99:7e:b7:7c:
f4:b9:14:57:ec:0c:ac:35:d9:6d:ca:95:f0:19:90:
18:49:17:28:ee:69:6d:d3:e6:7c:be:c0:86:7d:1f:
34:ad:4c:cb:b9:67:f0:4e:f7:e3:97:09:a6:fe:52:
91:91:55:0d:d8:c9:8a:0d:0d:de:aa:68:61:5e:d4:
c6:9a:2b:1b:1a:df:14:9b:15:c8:4e:5a:9e:c2:83:
02:b7:80:ec:de:1f:af:fe:c2:a1:84:70:21:ad:7a:
30:12:b5:49:ea:84:d1:58:4f:46:d1:54:d3:05:0e:
9c:bd:d5:d7:05:79:7c:a3:ae:c2:3e:16:9f:8f:94:
1f:0f:15:1c:31:4c:b2:b6:6e:a6:85:00:bf:ba:3c:
3f:07:da:27:2a:39:22:a0:0d:29:f0:77:01:94:92:
5e:8b:62:ca:e3:9a:ad:6d:10:b5:d8:4e:3c:6d:94:
0c:fd:db:f2:66:a0:93:f8:50:7f:5a:b6:e6:4b:5e:
31:4d:91:9e:bb:dc:64:17:9a:8e:8d:fd:eb:3a:d8:
29:9c:85:fb:6d:28:76:f4:04:0d:20:99:47:24:5a:
11:56:40:91:21:d3:67:fa:86:40:c7:2b:99:8f:d2:
4e:b5:2e:ef:d6:6a:3f:ed:8e:a5:67:38:45:20:3b:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:F1:E4:81:62:59:BC:28:2F:D0:A9:63:96:CB:EA:55:D8:67:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3139392e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:03:c9:22:34:32:cb:44:a9:4f:f9:cf:c1:c2:33:33:75:93:
dd:03:8a:47:92:1d:0e:d9:fe:52:51:aa:96:96:ab:9d:d1:22:
ea:3a:36:38:dd:52:b5:83:cd:4c:1e:c3:94:3e:a1:72:4e:a8:
af:2f:e0:dd:b8:21:ce:f8:70:52:53:a2:01:21:f1:23:60:ef:
a7:12:d7:69:6a:92:0a:3d:5d:26:8d:a4:a1:30:aa:c7:6a:f1:
05:22:9e:ee:b1:a4:2a:f8:bf:5a:93:c4:bc:a6:83:f4:95:49:
c6:32:c8:b7:d1:5a:b3:31:aa:71:65:6f:eb:76:0c:0a:c5:c0:
34:5a:38:49:19:09:6a:8a:78:c3:eb:68:27:67:53:a6:11:73:
41:64:ec:e4:c0:62:ad:2f:01:94:b8:42:02:a2:f2:38:b6:95:
77:b8:61:75:b8:38:e5:27:ef:3d:22:11:5a:15:8e:c5:74:ce:
f6:fb:99:fa:f8:40:13:31:22:ab:64:35:01:e0:44:a4:8f:03:
ef:8b:d8:94:f4:ff:b0:c3:5a:c6:ff:f5:e5:85:9e:b8:85:5e:
21:eb:0c:87:95:09:1c:d5:11:e1:65:1c:3e:1c:46:dd:26:dc:
49:15:b3:4d:c0:b6:f0:ec:d4:1b:61:69:0b:79:4a:a2:08:61:
f7:6f:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:02 2025 by rpki-client