Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3230342e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: c1DTxBb+P41y4TFCoy/96Nl7WK3SQ6sjmED7dWhmI2M=
Subject key identifier: F8:0A:AD:8F:6A:14:8C:02:2A:CB:5F:BD:80:4D:8D:32:F5:D9:AE:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 064230A5D05B87E9201B54F052F6BBB7EC471F74
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:37 +0000
ROA not before: Thu 04 Sep 2025 06:58:37 +0000
ROA not after: Thu 03 Sep 2026 07:03:37 +0000
asID: 3257
IP address blocks: 217.217.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:42:30:a5:d0:5b:87:e9:20:1b:54:f0:52:f6:bb:b7:ec:47:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:37 2025 GMT
Not After : Sep 3 07:03:37 2026 GMT
Subject: CN=F80AAD8F6A148C022ACB5FBD804D8D32F5D9AE03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:03:ed:c9:90:c1:16:26:c3:f5:e5:0d:e8:
83:17:4c:0f:de:b8:cd:97:7f:ac:0c:f7:4f:2b:cf:
50:16:99:fb:95:e7:33:e6:9b:a9:2f:af:dc:dd:13:
61:81:d0:f7:ff:0c:77:cd:63:43:86:6d:28:a3:6e:
45:54:c3:16:a5:16:dd:8e:c5:01:03:f0:06:4d:89:
c0:af:52:49:f6:02:5e:c2:ea:58:13:bc:da:74:04:
94:4a:ac:56:d8:d0:ab:9e:a7:7c:4e:a6:35:00:7e:
2d:ac:05:8d:da:e8:64:b2:95:34:99:c8:e1:7c:8f:
20:79:6b:2b:13:13:d9:99:c1:1a:a3:fa:63:dc:ac:
16:50:69:7d:ae:60:20:d8:3d:ea:25:20:33:50:7a:
01:3e:f4:4a:bc:05:b6:6c:ef:e4:b8:2c:8c:68:08:
ef:d2:ce:69:3f:7b:00:3b:0b:54:d9:be:06:b3:65:
5a:22:16:3e:ec:22:de:5d:2e:eb:50:88:39:a2:8b:
6d:48:0b:48:36:58:ba:72:89:17:9a:4a:30:3f:f0:
c2:a8:5f:47:ef:d3:8e:ad:50:d2:76:51:75:2f:58:
04:32:43:75:83:c0:ce:96:53:46:bd:d1:13:c7:b5:
64:b9:db:8c:0f:d0:c9:8f:76:b1:a2:d6:cc:c4:2a:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:AD:8F:6A:14:8C:02:2A:CB:5F:BD:80:4D:8D:32:F5:D9:AE:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230342e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:65:26:e9:00:04:e1:b4:a0:88:5f:1d:84:5c:3b:b0:04:d3:
a4:c7:28:3e:3a:01:5f:f1:d1:3b:c7:05:ce:cf:ac:d1:b6:44:
04:a0:2f:52:8b:46:72:cf:a0:33:15:c9:d5:e9:a6:19:12:f5:
be:3d:7a:7f:10:7b:40:4e:6d:0c:3d:fd:be:6e:de:3c:69:1e:
c2:41:a0:63:bf:5d:78:88:98:0f:75:1e:b7:0b:61:fa:0c:48:
47:16:c6:5b:93:dc:17:9a:c7:8f:df:62:c4:67:ef:d8:6d:5c:
82:17:23:f9:2e:bc:58:af:35:86:8f:58:58:8a:ac:af:27:57:
32:fa:33:a9:93:57:68:bf:62:58:8b:fd:b0:13:a8:fc:42:d3:
08:75:09:18:cf:a7:d2:37:be:96:a2:1c:2b:a3:84:53:bc:7f:
26:5b:61:cf:60:83:60:f2:75:01:c2:81:5d:82:45:3f:5b:d9:
31:4c:d4:a3:3f:81:a1:f0:9d:da:fe:c4:29:4f:2f:51:80:fe:
9c:41:7b:2e:c8:38:05:ab:84:e9:0c:8b:e7:6c:4b:01:e9:c2:
76:5e:c6:fd:a7:76:56:e0:89:5c:66:49:82:10:dd:33:07:a4:
7e:37:b0:89:36:1c:8a:1a:bb:6a:00:9d:94:af:0c:e5:ad:c0:
12:b7:8e:ec
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBkIwpdBbh+kgG1TwUva7t+xHH3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDQwNjU4MzdaFw0yNjA5MDMwNzAzMzdaMDMxMTAvBgNV
BAMTKEY4MEFBRDhGNkExNDhDMDIyQUNCNUZCRDgwNEQ4RDMyRjVEOUFFMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLQPtyZDBFibD9eUN6IMXTA/e
uM2Xf6wM908rz1AWmfuV5zPmm6kvr9zdE2GB0Pf/DHfNY0OGbSijbkVUwxalFt2O
xQED8AZNicCvUkn2Al7C6lgTvNp0BJRKrFbY0Kuep3xOpjUAfi2sBY3a6GSylTSZ
yOF8jyB5aysTE9mZwRqj+mPcrBZQaX2uYCDYPeolIDNQegE+9Eq8BbZs7+S4LIxo
CO/Szmk/ewA7C1TZvgazZVoiFj7sIt5dLutQiDmii21IC0g2WLpyiReaSjA/8MKo
X0fv046tUNJ2UXUvWAQyQ3WDwM6WU0a90RPHtWS524wP0MmPdrGi1szEKkSrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU+Aqtj2oUjAIqy1+9gE2NMvXZrgMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dnMMA0GCSqGSIb3DQEBCwUAA4IBAQBcZSbpAAThtKCIXx2EXDuwBNOkxyg+OgFf
8dE7xwXOz6zRtkQEoC9Si0Zyz6AzFcnV6aYZEvW+PXp/EHtATm0MPf2+bt48aR7C
QaBjv114iJgPdR63C2H6DEhHFsZbk9wXmseP32LEZ+/YbVyCFyP5LrxYrzWGj1hY
iqyvJ1cy+jOpk1dov2JYi/2wE6j8QtMIdQkYz6fSN76Wohwro4RTvH8mW2HPYINg
8nUBwoFdgkU/W9kxTNSjP4Gh8J3a/sQpTy9RgP6cQXsuyDgFq4TpDIvnbEsB6cJ2
Xsb9p3ZW4IlcZkmCEN0zB6R+N7CJNhyKGrtqAJ2UrwzlrcASt47s
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:06 2025 by rpki-client