Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3230382e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: kn3+pdReCzMpmoHdhN3KTBtMMzbWcZ4bNh0mO1PbXs4=
Subject key identifier: 5B:68:7E:C8:D1:36:64:D1:A6:A6:58:2F:F8:73:35:CB:3B:63:B2:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 01238D1106FCF3DD38A9E2A3B77655EE3A7D3118
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:33 +0000
ROA not before: Thu 04 Sep 2025 06:58:33 +0000
ROA not after: Thu 03 Sep 2026 07:03:33 +0000
asID: 3257
IP address blocks: 217.217.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:23:8d:11:06:fc:f3:dd:38:a9:e2:a3:b7:76:55:ee:3a:7d:31:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:33 2025 GMT
Not After : Sep 3 07:03:33 2026 GMT
Subject: CN=5B687EC8D13664D1A6A6582FF87335CB3B63B291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:67:e2:57:a4:12:06:75:4c:4c:e0:80:e8:
53:6b:25:83:a7:9a:c3:1e:1d:cc:10:46:0d:0e:0c:
e8:4c:ce:fa:0e:ad:c6:a6:21:c1:76:4e:df:b3:7a:
60:00:0a:fb:6e:c4:f8:85:66:42:6a:01:92:b0:b2:
08:6d:31:9e:ea:cc:c0:0f:02:31:9d:c4:c9:03:1c:
c8:63:eb:5c:64:bc:86:bd:57:3d:c4:3f:c7:91:63:
eb:9e:6a:c1:48:2e:58:ab:c0:e1:44:91:70:34:57:
27:3f:fe:64:9f:0c:8b:a5:a4:37:5c:54:18:4a:ad:
4a:bd:9d:8b:31:4d:52:3e:84:72:a4:a9:44:58:f7:
73:31:e8:9b:4e:72:e6:63:bb:ee:85:ae:17:1a:ec:
56:57:e1:6c:8a:16:b2:c3:f3:38:e7:b1:5f:db:8d:
14:f6:fb:be:45:d4:90:da:bb:02:be:18:57:3e:26:
46:8c:73:a7:78:17:06:b5:3c:c1:2e:4b:0c:37:1e:
fa:72:f7:e9:81:e9:10:e2:ca:a4:9d:16:19:56:2b:
e0:12:5b:dc:2e:7b:a8:60:21:76:fc:1e:c7:a5:37:
f6:36:b0:f6:81:54:49:91:45:68:b0:78:1f:6a:92:
9b:11:cd:cd:af:7c:f4:0d:7e:a7:ae:ed:4e:52:53:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:7E:C8:D1:36:64:D1:A6:A6:58:2F:F8:73:35:CB:3B:63:B2:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3230382e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1a:1e:84:30:c8:e0:af:52:c8:f3:7f:ec:0a:e0:9f:b2:f4:
08:2e:c7:56:12:bb:37:38:99:71:d2:fb:db:26:45:29:04:64:
c1:ba:be:a0:1b:28:b4:d1:5c:2f:9f:6d:bb:dc:4c:40:3d:96:
0e:95:a8:1c:41:81:33:e0:d8:4f:85:18:43:81:47:bc:d5:a6:
b4:3f:65:2b:22:cd:b1:da:01:f6:86:28:e6:01:ea:db:0c:a4:
b6:6d:2e:c1:79:ad:10:f2:95:35:17:bb:a7:fb:78:c0:6a:2b:
b3:99:70:ad:36:d0:c1:29:67:b6:80:8c:ad:12:11:c3:e4:80:
f6:6d:5f:3a:e3:51:6c:3d:11:fb:0b:55:1e:f6:15:56:1c:8d:
27:89:ee:36:7b:93:2e:fe:27:c5:f4:03:af:8c:6b:ae:60:d1:
08:77:1e:c3:91:cf:01:86:c7:24:f9:96:9d:e1:2b:9d:c7:12:
86:05:94:e4:d9:a0:b8:b0:49:fb:d9:cb:5f:36:e2:b6:c7:1f:
1c:ac:f1:0f:90:48:2d:56:88:be:21:cc:aa:2e:81:9b:1a:98:
39:98:c8:1c:b5:a0:7c:d2:11:11:1e:1a:3e:22:10:bb:3c:7d:
fe:7e:52:31:0b:b3:c4:70:8d:ee:88:4b:fd:63:db:bb:20:bf:
92:28:80:14
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUASONEQb88904qeKjt3ZV7jp9MRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDQwNjU4MzNaFw0yNjA5MDMwNzAzMzNaMDMxMTAvBgNV
BAMTKDVCNjg3RUM4RDEzNjY0RDFBNkE2NTgyRkY4NzMzNUNCM0I2M0IyOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNb2fiV6QSBnVMTOCA6FNrJYOn
msMeHcwQRg0ODOhMzvoOrcamIcF2Tt+zemAACvtuxPiFZkJqAZKwsghtMZ7qzMAP
AjGdxMkDHMhj61xkvIa9Vz3EP8eRY+ueasFILlirwOFEkXA0Vyc//mSfDIulpDdc
VBhKrUq9nYsxTVI+hHKkqURY93Mx6JtOcuZju+6Frhca7FZX4WyKFrLD8zjnsV/b
jRT2+75F1JDauwK+GFc+JkaMc6d4Fwa1PMEuSww3Hvpy9+mB6RDiyqSdFhlWK+AS
W9wue6hgIXb8HselN/Y2sPaBVEmRRWiweB9qkpsRzc2vfPQNfqeu7U5SU17dAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUW2h+yNE2ZNGmplgv+HM1yztjspEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dnQMA0GCSqGSIb3DQEBCwUAA4IBAQCMGh6EMMjgr1LI83/sCuCfsvQILsdWErs3
OJlx0vvbJkUpBGTBur6gGyi00Vwvn2273ExAPZYOlagcQYEz4NhPhRhDgUe81aa0
P2UrIs2x2gH2hijmAerbDKS2bS7Bea0Q8pU1F7un+3jAaiuzmXCtNtDBKWe2gIyt
EhHD5ID2bV8641FsPRH7C1Ue9hVWHI0nie42e5Mu/ifF9AOvjGuuYNEIdx7Dkc8B
hsck+Zad4SudxxKGBZTk2aC4sEn72ctfNuK2xx8crPEPkEgtVoi+IcyqLoGbGpg5
mMgctaB80hERHho+IhC7PH3+flIxC7PEcI3uiEv9Y9u7IL+SKIAU
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:51:07 2025 by rpki-client