Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3231352e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: If0BpgiawXWKhcI9NPPz8/hKlcDDEO6P484fTPj13Os=
Subject key identifier: 5A:A5:B8:2A:5D:BC:36:F3:14:69:DD:3C:B3:1E:55:79:11:5B:C2:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6171F1A9C544B47C0366F561F06C4F66D61C235F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:28 +0000
ROA not before: Thu 04 Sep 2025 06:58:28 +0000
ROA not after: Thu 03 Sep 2026 07:03:28 +0000
asID: 3257
IP address blocks: 217.217.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:71:f1:a9:c5:44:b4:7c:03:66:f5:61:f0:6c:4f:66:d6:1c:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:28 2025 GMT
Not After : Sep 3 07:03:28 2026 GMT
Subject: CN=5AA5B82A5DBC36F31469DD3CB31E5579115BC2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:ee:05:1f:7d:1c:a6:92:c1:53:be:62:fb:
1b:51:52:de:2b:7a:15:6a:9e:a4:9e:e9:f1:1a:7a:
3d:da:fd:b2:c3:4f:de:31:99:2b:f2:9d:fa:05:73:
1e:2b:0f:fb:fc:67:c9:f6:bc:dd:6e:c8:87:fe:3c:
6a:9b:92:30:75:17:3c:bd:69:99:37:ca:78:9d:4a:
27:15:2b:8d:c3:e4:6d:ea:a9:d4:d5:9a:02:30:cd:
5b:f3:ec:25:d6:33:d0:b9:32:aa:72:41:65:35:28:
9a:cb:c8:61:97:19:61:4c:21:36:a2:35:9b:bd:84:
a8:f7:0b:b4:13:25:07:f7:37:7d:99:74:c9:6f:cf:
90:bc:ea:aa:ff:15:05:cc:1c:a9:65:ed:7a:9f:28:
ae:51:c6:2e:83:b9:03:0b:99:a3:b6:7a:d6:a8:c0:
3c:c2:7a:ff:4b:03:f9:5b:08:32:b5:09:b8:1b:7d:
7d:0f:0d:9c:32:a2:c3:f6:67:8e:69:9a:3b:5c:38:
17:d2:ee:bc:9b:19:31:11:f0:1d:90:66:0e:8b:fb:
bf:35:a3:85:e0:70:0e:94:b8:a0:bd:1e:0c:62:71:
a3:34:63:5a:7e:32:68:91:e4:f9:0b:c2:c4:11:15:
3d:9c:3c:68:c5:6d:37:41:86:d8:93:4f:cd:01:01:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:B8:2A:5D:BC:36:F3:14:69:DD:3C:B3:1E:55:79:11:5B:C2:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231352e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:30:74:d1:97:d0:53:0a:0b:3a:17:f0:d8:3a:14:4a:c6:14:
eb:8d:3b:7f:8c:1b:17:4d:6e:60:91:0b:67:2f:0e:73:1a:9e:
d4:53:85:a8:87:15:22:b8:4e:5c:11:da:45:bd:07:ed:94:95:
d9:da:f6:9a:ff:b5:29:d4:ab:e9:2c:f6:cf:0a:54:8f:9b:9b:
66:b9:ac:18:e7:2d:ac:8d:6e:c6:38:a2:23:1e:2c:fe:a7:c6:
44:e3:10:ba:a8:66:9d:c1:90:63:63:09:b7:14:23:50:70:c9:
91:2b:df:80:49:01:c4:33:d4:24:d7:54:d2:1b:06:79:c0:aa:
82:69:d7:c7:47:c3:92:56:e7:ef:3e:31:7c:6d:6b:08:63:60:
d8:bc:08:4e:f2:79:7a:a8:b1:c3:a3:fb:e2:ad:4b:34:71:66:
74:ea:1c:59:40:ef:9d:2b:ee:10:85:23:c4:41:08:e5:4e:2d:
db:c0:85:88:00:07:98:a4:39:75:b0:8e:1d:83:fa:fc:49:fd:
6d:5f:a2:f5:26:56:f2:bd:64:d2:bb:8a:f7:08:37:59:1d:e1:
4f:4e:3c:f6:c8:34:13:22:2a:ff:f5:9d:a4:a4:4b:0f:8a:2c:
6f:3d:73:c2:f0:04:fd:37:b6:5b:6c:35:88:ff:49:0f:37:48:
6a:5b:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:08 2025 by rpki-client