Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3230322e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: 5qUtl9tdZbfO8Af16VWFmI//otCHj0xdI5mRvmXnApo=
Subject key identifier: 2A:ED:F7:78:E7:DF:9D:90:A0:07:C6:5A:06:30:92:50:9A:8C:3A:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 510897717BFD0689ED08411CAEBC879E22944CDF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:38 +0000
ROA not before: Thu 04 Sep 2025 06:58:38 +0000
ROA not after: Thu 03 Sep 2026 07:03:38 +0000
asID: 3257
IP address blocks: 217.217.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:08:97:71:7b:fd:06:89:ed:08:41:1c:ae:bc:87:9e:22:94:4c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:38 2025 GMT
Not After : Sep 3 07:03:38 2026 GMT
Subject: CN=2AEDF778E7DF9D90A007C65A063092509A8C3A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:92:15:57:10:f4:0c:c7:41:83:74:2f:30:
86:05:cd:42:35:8c:d1:cd:ae:92:aa:1a:62:fc:5e:
8b:95:af:17:c6:b3:94:15:83:08:51:5b:9e:87:fd:
f6:82:45:ff:0f:33:49:8a:1c:db:c8:d0:11:12:e3:
06:40:de:b9:d8:3d:f6:0e:e6:54:87:6c:0a:3f:3f:
46:15:02:33:f7:d4:ee:8e:7c:8c:bc:92:7a:64:72:
5e:f6:b5:fe:78:46:e1:4f:c0:bb:9d:03:ee:44:fb:
7b:15:f4:f5:92:c1:82:39:8d:c2:df:49:91:f4:ab:
3c:13:e7:36:4c:e4:91:4c:b4:19:ad:4e:df:32:b6:
ab:ad:85:60:c0:17:9a:e1:1f:ee:06:e9:da:c5:48:
15:18:44:91:2e:9b:24:cd:fc:31:cd:51:66:66:90:
af:9c:a8:36:95:a0:5e:e6:86:9e:62:51:34:c2:e8:
30:f6:79:0e:cc:d1:e6:a3:28:fb:01:21:6b:ff:09:
7f:85:28:7e:f1:2a:0d:f7:12:a2:35:87:3f:45:69:
86:75:f6:27:31:0a:b8:92:1b:a7:8c:92:ff:b1:7f:
e1:fc:e1:47:b3:38:9c:66:9e:ed:6a:3b:bc:3d:9a:
35:92:ac:7e:91:f1:6b:64:3b:00:83:4a:ce:a0:0e:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:ED:F7:78:E7:DF:9D:90:A0:07:C6:5A:06:30:92:50:9A:8C:3A:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230322e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8c:26:9c:99:f0:7d:f8:83:69:8c:66:8f:37:6b:2a:ae:41:
c5:97:df:4c:43:3c:80:c1:03:2a:70:a8:8c:fa:b1:6e:27:4f:
40:54:33:27:9f:55:27:f8:f6:e2:12:5c:6a:04:09:ac:5b:d7:
56:39:c8:84:11:44:f8:dc:d2:6a:99:5c:9f:d4:5f:bc:14:aa:
c9:c1:a9:69:40:c0:ec:64:0b:81:6f:d4:42:0f:08:67:d1:d8:
7b:01:82:35:17:df:06:82:af:fd:47:18:21:ea:96:5a:b0:31:
66:0e:ab:ab:e0:90:c4:90:27:9a:91:e9:c4:29:75:66:1b:31:
2d:3d:d4:e4:9d:85:1a:32:f8:44:4d:70:72:39:ee:9b:40:8b:
ad:4e:51:59:b3:bc:6e:ae:c3:41:55:fb:08:5f:95:f9:7f:92:
9f:3d:be:7d:38:12:01:b9:b1:dc:2a:b3:68:46:03:78:5f:39:
da:6f:20:b3:cb:34:5d:9a:81:90:b8:1b:fc:66:39:2c:0e:dc:
59:57:35:11:e8:6d:be:01:a2:27:b4:d1:49:50:fb:b5:c9:c7:
b9:e9:ac:b6:65:31:c2:e7:8b:10:e9:0e:21:eb:3e:00:61:c9:
e7:6e:7b:d6:cb:11:9e:9a:38:37:56:ec:6e:c7:42:ac:d2:54:
7f:81:37:91
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUQiXcXv9BontCEEcrryHniKUTN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDQwNjU4MzhaFw0yNjA5MDMwNzAzMzhaMDMxMTAvBgNV
BAMTKDJBRURGNzc4RTdERjlEOTBBMDA3QzY1QTA2MzA5MjUwOUE4QzNBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuepIVVxD0DMdBg3QvMIYFzUI1
jNHNrpKqGmL8XouVrxfGs5QVgwhRW56H/faCRf8PM0mKHNvI0BES4wZA3rnYPfYO
5lSHbAo/P0YVAjP31O6OfIy8knpkcl72tf54RuFPwLudA+5E+3sV9PWSwYI5jcLf
SZH0qzwT5zZM5JFMtBmtTt8ytquthWDAF5rhH+4G6drFSBUYRJEumyTN/DHNUWZm
kK+cqDaVoF7mhp5iUTTC6DD2eQ7M0eajKPsBIWv/CX+FKH7xKg33EqI1hz9FaYZ1
9icxCriSG6eMkv+xf+H84UezOJxmnu1qO7w9mjWSrH6R8WtkOwCDSs6gDgjRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUKu33eOffnZCgB8ZaBjCSUJqMOiQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dnKMA0GCSqGSIb3DQEBCwUAA4IBAQAGjCacmfB9+INpjGaPN2sqrkHFl99MQzyA
wQMqcKiM+rFuJ09AVDMnn1Un+PbiElxqBAmsW9dWOciEEUT43NJqmVyf1F+8FKrJ
walpQMDsZAuBb9RCDwhn0dh7AYI1F98Ggq/9Rxgh6pZasDFmDqur4JDEkCeakenE
KXVmGzEtPdTknYUaMvhETXByOe6bQIutTlFZs7xursNBVfsIX5X5f5KfPb59OBIB
ubHcKrNoRgN4XznabyCzyzRdmoGQuBv8ZjksDtxZVzUR6G2+AaIntNFJUPu1yce5
6ay2ZTHC54sQ6Q4h6z4AYcnnbnvWyxGemjg3Vuxux0Ks0lR/gTeR
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:03 2025 by rpki-client