Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3230312e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: 4BQxAIWjGZaFEKlgiBYLM17/Z8E07gkmlRhsyooEL7M=
Subject key identifier: B9:1A:C6:D8:D4:42:44:D5:B4:F9:26:E6:1D:9E:3A:EE:6F:2F:B0:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 453C1ED344CF842CDFC6CEC4D3C2E4402C104491
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:39 +0000
ROA not before: Thu 04 Sep 2025 06:58:39 +0000
ROA not after: Thu 03 Sep 2026 07:03:39 +0000
asID: 3257
IP address blocks: 217.217.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3c:1e:d3:44:cf:84:2c:df:c6:ce:c4:d3:c2:e4:40:2c:10:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:39 2025 GMT
Not After : Sep 3 07:03:39 2026 GMT
Subject: CN=B91AC6D8D44244D5B4F926E61D9E3AEE6F2FB0D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:02:fc:2f:07:1d:74:9f:52:17:d7:ef:32:
33:ca:39:dd:ba:01:7e:e4:cd:74:9a:e3:ae:c4:cd:
d3:e0:fc:8a:72:43:1e:45:fe:46:73:b7:a6:7d:6e:
d6:60:88:30:0d:9a:7a:b6:43:c7:73:bf:01:7c:f8:
36:6f:84:33:11:3a:a4:79:3a:6e:06:64:c4:39:15:
66:20:0c:a2:bf:9e:1e:8f:40:26:42:be:b1:0c:b5:
e4:43:c1:70:87:c0:36:31:3b:dc:42:6d:2d:c8:1a:
22:aa:4b:e9:5c:0c:51:88:8e:4f:e4:ec:45:ef:7b:
96:cf:24:d0:18:80:35:73:36:82:19:19:8c:3b:39:
41:06:80:15:cc:83:84:07:08:80:06:fb:25:9e:54:
53:a8:ab:a8:9b:59:18:36:fa:8b:4f:5d:9a:2a:09:
97:8a:b2:c3:d6:ff:fa:59:80:73:17:b3:ed:14:6d:
62:6e:47:7e:ac:bc:0b:87:e4:5f:95:e6:4b:99:6e:
f7:94:5d:82:49:79:39:79:5d:ff:73:97:bb:f2:c0:
52:87:f2:e0:92:78:d0:a5:21:a6:09:c9:83:60:be:
fa:d9:67:23:e5:af:02:c0:33:c9:f4:a4:51:79:af:
ab:79:eb:3b:1c:58:e7:47:eb:75:02:d6:1b:94:ae:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:C6:D8:D4:42:44:D5:B4:F9:26:E6:1D:9E:3A:EE:6F:2F:B0:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230312e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.201.0/24
Signature Algorithm: sha256WithRSAEncryption
17:42:ef:33:b0:f2:62:c8:b7:be:38:47:55:0d:6a:88:7c:b5:
99:49:c0:03:01:57:f7:5a:94:11:f2:c0:69:87:d2:d8:85:06:
7b:8d:69:7b:c8:0c:d4:3b:ca:57:54:47:29:53:ac:7e:c5:e6:
23:d7:4f:17:d5:fa:7c:cb:75:63:74:0f:03:73:cf:55:02:df:
14:54:66:a3:75:85:a9:ec:ce:49:4c:a3:eb:fa:9b:86:5a:10:
2e:f5:47:fc:11:eb:30:00:c5:5e:2e:71:eb:f2:c6:94:d9:fb:
08:84:7f:fd:c5:d9:83:3e:75:f4:b8:dd:80:9e:bd:e9:39:90:
ae:ae:c6:22:91:3a:80:15:df:79:9b:28:61:27:78:99:71:4a:
d4:38:d9:13:53:8b:aa:ee:d0:34:83:4d:3c:eb:c2:4c:4b:f0:
24:23:73:c9:ca:81:99:13:c3:5d:e1:b8:6b:fa:df:13:f7:db:
88:66:2b:7a:f7:e3:56:1c:f7:10:79:f6:b6:7e:24:1c:0b:2b:
85:74:cc:7c:a5:bc:33:26:f2:fc:14:24:77:7e:ca:4c:85:87:
26:ea:25:8d:ff:c6:25:9e:8b:f5:ca:ab:ec:18:48:0d:75:0a:
4f:11:17:02:96:b0:58:17:20:cb:c7:ef:85:0f:ae:6d:07:85:
a1:0c:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:05 2025 by rpki-client