Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3230302e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: pu/lZGXHbF+XRySHUb6dlb2ju//M51r2cF0bdvMKMyo=
Subject key identifier: C8:A3:27:46:89:5E:FA:9E:50:28:81:45:36:4B:00:05:24:D8:3F:EA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19FB2A01BA3B8491E601D7DC5369232B3A41B05E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:39 +0000
ROA not before: Thu 04 Sep 2025 06:58:39 +0000
ROA not after: Thu 03 Sep 2026 07:03:39 +0000
asID: 3257
IP address blocks: 217.217.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fb:2a:01:ba:3b:84:91:e6:01:d7:dc:53:69:23:2b:3a:41:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:39 2025 GMT
Not After : Sep 3 07:03:39 2026 GMT
Subject: CN=C8A32746895EFA9E50288145364B000524D83FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:76:2d:00:cf:9b:45:20:b3:52:e9:38:06:
2c:72:f8:cd:d4:b7:e6:b9:64:bb:85:f7:3d:76:60:
7e:73:4b:ba:4f:97:1d:32:3c:f9:5d:81:b0:ce:52:
c7:2b:4a:76:47:7b:9f:f4:8f:e8:c3:08:9f:58:1c:
f0:7f:0a:4a:6b:30:e2:b7:57:74:39:74:25:14:b8:
6e:86:46:50:4e:4a:66:a9:a0:f1:1a:7e:cf:02:da:
3a:88:ac:e1:e6:e0:d9:bd:e0:1d:c8:5d:08:06:dd:
49:48:16:ab:e6:0a:81:2e:3e:16:66:87:85:4c:33:
69:91:2c:62:a5:58:62:d8:d9:c8:b4:17:3d:4e:f5:
4a:b4:08:62:52:f2:c2:31:29:fb:21:18:f8:ed:6a:
89:7d:9f:60:73:96:21:46:a3:3e:03:55:90:8d:ee:
00:95:4e:d0:8c:a0:fa:06:c2:13:00:29:24:79:1a:
8a:dc:22:4e:b5:c2:72:bc:4a:e1:66:0e:b5:1d:e2:
fa:1c:8d:0d:90:35:0c:f7:27:aa:a2:f0:e7:6c:76:
9d:69:f5:b8:99:d6:ae:06:a4:1b:00:84:a4:99:10:
0b:9e:ff:c0:cf:40:c8:bf:95:9d:17:b1:5c:eb:b3:
6f:1d:31:3a:15:00:6c:83:5d:1a:0c:10:ca:f7:7a:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:27:46:89:5E:FA:9E:50:28:81:45:36:4B:00:05:24:D8:3F:EA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230302e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d5:85:61:0f:25:cd:81:ca:57:8e:f5:98:02:7d:dc:5b:32:
f8:e9:eb:6f:19:f5:73:d1:28:c3:16:9c:94:86:16:de:01:29:
b9:a9:81:40:dd:97:76:fe:23:58:2c:b7:5c:ee:ac:3b:a0:2f:
d7:a3:4c:d3:da:76:a2:95:40:d7:d7:c6:f5:36:99:cc:f3:99:
42:45:b0:53:52:0c:03:20:f2:b6:da:90:1f:e2:75:2f:c9:5b:
6d:43:2b:a3:2d:64:7b:12:8a:1c:80:a1:29:7f:b3:70:7a:65:
fd:e7:61:3c:3f:f5:a0:a9:c9:18:f3:cc:88:cf:dd:c1:41:11:
15:2b:3a:02:2f:56:59:6f:ba:8e:02:19:e4:de:70:30:57:ac:
47:d4:81:ec:c0:33:dd:b1:42:3c:94:94:e0:8c:86:55:58:81:
42:65:b7:6b:c8:50:6d:5f:f4:a9:07:90:88:a8:d3:7a:67:c8:
94:99:b9:13:46:a0:35:fa:f8:b4:a0:e1:e0:10:f1:08:b0:f7:
78:84:b6:e8:df:92:7c:d9:c8:a6:66:63:7b:e8:67:bb:fc:91:
17:ad:57:35:61:94:2d:e2:78:13:bd:21:9b:21:25:19:b0:ba:
8b:3d:5c:18:58:83:54:0d:a8:82:5e:ff:73:65:68:58:95:d3:
a0:24:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:51:14 2025 by rpki-client