Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3231312e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: ZB7uUE76PhMOS9BSvFGLq6szj23o0Y5rXDva0mmtWps=
Subject key identifier: E8:AB:29:5B:18:9C:28:05:45:D1:6A:D5:B0:78:EE:81:DB:1C:5D:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 617C445DFD08B996D59C87FFB7AA5125C66A19FF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:31 +0000
ROA not before: Thu 04 Sep 2025 06:58:31 +0000
ROA not after: Thu 03 Sep 2026 07:03:31 +0000
asID: 3257
IP address blocks: 217.217.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7c:44:5d:fd:08:b9:96:d5:9c:87:ff:b7:aa:51:25:c6:6a:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:31 2025 GMT
Not After : Sep 3 07:03:31 2026 GMT
Subject: CN=E8AB295B189C280545D16AD5B078EE81DB1C5D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:a7:5b:86:73:33:e4:12:dc:e0:d6:54:7a:
6d:8d:31:7e:21:70:a9:4e:c9:ce:e9:a3:11:67:4f:
2c:97:ab:7f:aa:7e:4a:2e:80:55:3a:b3:3c:b8:93:
d6:c6:89:98:03:4c:df:48:65:91:cf:9f:5e:06:ef:
ab:1b:22:f3:46:b5:35:6e:db:aa:14:a0:d2:10:63:
85:7b:b3:7f:d5:79:d7:3d:75:3b:df:81:b2:8f:74:
28:bb:93:82:e8:42:0f:30:07:06:2b:1a:b9:41:ce:
c7:88:4a:b3:33:c7:ce:dd:85:64:0b:09:af:c9:97:
9e:33:09:6b:56:16:26:65:21:e1:05:db:e9:4f:97:
e9:1e:54:2d:88:89:a8:ec:97:59:45:5c:b7:b5:1c:
2d:e2:fb:d6:9a:50:35:f9:78:e4:f2:fe:2d:ae:1a:
1e:b0:72:b7:93:08:9b:42:78:59:1e:cd:14:85:e8:
79:ca:74:ec:b1:82:f5:ab:0c:36:e6:f2:d5:a9:e0:
da:d5:4d:e4:c1:bf:af:23:1a:e3:56:3b:4b:41:76:
dc:f7:de:70:d5:71:86:f5:62:86:c8:c5:63:05:77:
a6:42:54:56:ad:55:e3:8c:57:68:c1:c9:59:a5:20:
21:45:cd:be:46:1a:ad:af:c3:c8:8e:13:3f:f9:9a:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:29:5B:18:9C:28:05:45:D1:6A:D5:B0:78:EE:81:DB:1C:5D:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231312e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.211.0/24
Signature Algorithm: sha256WithRSAEncryption
46:45:75:a1:c4:b1:54:16:57:1c:b7:59:13:3c:41:8f:c7:3c:
a4:07:b8:09:6d:5e:0e:c0:9a:e7:57:71:b3:19:ae:6a:1b:1b:
8c:6a:4a:1f:f7:6e:4a:5f:04:49:8d:2c:af:09:41:cb:80:77:
ea:31:09:07:9a:9d:d4:5b:99:7b:02:72:e7:de:44:5d:cb:e1:
07:c0:d0:49:ad:da:7c:f9:42:42:12:7e:89:bd:ab:a0:c5:ff:
12:b7:06:e8:6f:11:08:17:fa:2e:30:54:9c:78:88:8d:e8:2c:
73:3e:32:eb:e2:78:11:83:8d:de:e4:f8:5d:92:72:9c:53:56:
35:9b:91:0f:13:25:e6:51:73:43:82:93:54:0c:10:8b:78:16:
e2:92:1b:a5:31:ce:d2:57:4c:f4:2a:d5:30:ca:46:8e:22:b7:
08:fc:ab:22:7b:94:a1:e0:db:38:77:8d:d0:0d:ca:81:ba:27:
73:31:ca:e5:34:21:99:22:b9:7d:92:9e:4d:53:44:bd:ee:69:
ae:99:40:a6:40:0c:ce:6c:31:fe:ab:73:35:cf:e4:9a:54:9a:
e3:a1:50:f0:6b:7d:93:29:41:8b:0f:6f:16:27:f8:d2:4e:9d:
64:fc:fd:06:53:86:a3:5e:19:8b:7b:24:c3:0b:5b:e0:1b:80:
16:a8:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:09 2025 by rpki-client