Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231362e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3231362e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: 5GbfTsdlXz4ZfDftTk6qoY++ptDMgwwtUBiRQbEa9Qw=
Subject key identifier: 24:90:23:CB:60:6F:F9:1C:79:41:61:A5:4D:54:7E:93:48:6F:36:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78925A08F9ACAF755D17D3AF66FB4A445B58DE5E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231362e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:28 +0000
ROA not before: Thu 04 Sep 2025 06:58:28 +0000
ROA not after: Thu 03 Sep 2026 07:03:28 +0000
asID: 3257
IP address blocks: 217.217.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:92:5a:08:f9:ac:af:75:5d:17:d3:af:66:fb:4a:44:5b:58:de:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:28 2025 GMT
Not After : Sep 3 07:03:28 2026 GMT
Subject: CN=249023CB606FF91C794161A54D547E93486F362B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:c1:a7:c8:99:b6:6f:55:96:51:02:8b:7c:
b6:c1:db:36:d1:38:c9:51:5d:9c:15:dd:49:56:a2:
2a:63:7a:bb:16:3d:4a:d9:7e:70:d6:85:f4:89:d5:
68:cf:59:a6:fa:a8:96:34:a3:86:68:93:44:ff:fe:
a9:77:0a:47:59:0a:a7:8d:59:1d:de:0f:ad:42:10:
81:90:c3:3b:bd:82:15:65:de:a4:1f:c0:b1:09:04:
1c:ae:30:bb:19:bf:d4:95:1f:dd:5e:e9:7f:52:22:
21:cf:e7:6a:7a:dd:4d:3d:3d:5f:78:23:49:2e:29:
4d:61:cb:ff:b2:3d:c8:5e:f2:64:71:99:6c:74:29:
ba:a3:c4:c8:1a:03:d7:46:96:77:65:51:43:88:e3:
70:54:18:c1:9f:4d:52:19:9f:f8:25:ee:2c:b8:7d:
c9:17:4f:9f:6f:1c:8b:dd:4c:0a:88:de:ad:9d:81:
8b:82:a1:bc:29:fb:ce:fd:b3:1d:59:fa:89:99:93:
8d:34:2b:f4:33:98:d6:29:14:fb:f3:1d:cf:26:82:
9f:d5:a9:91:de:ee:07:d2:52:25:40:72:9f:91:74:
ed:6a:92:00:5b:27:1d:c7:24:bd:1e:1e:21:e0:2a:
c4:bf:2a:e2:6a:9e:bb:76:bc:a6:e7:3b:c5:c0:70:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:23:CB:60:6F:F9:1C:79:41:61:A5:4D:54:7E:93:48:6F:36:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3231362e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.216.0/24
Signature Algorithm: sha256WithRSAEncryption
88:03:2e:25:0e:99:e0:b2:d4:72:6e:a4:69:4f:64:44:6a:45:
d4:e5:f1:6a:2c:7c:4d:a8:7e:0c:7a:bc:5f:0f:c8:f5:c3:e1:
e5:af:0f:46:1d:7b:d4:d9:48:3d:b7:ed:26:3a:ec:e4:59:4b:
cb:fc:1d:4c:ef:76:dc:92:0e:7a:e0:e7:28:35:ec:1c:ae:9b:
6c:01:ac:c3:02:cf:74:8e:94:17:4a:d5:5e:28:89:34:eb:b1:
d6:22:a9:a6:a1:2b:cf:62:75:38:8f:39:59:3b:5a:49:1c:31:
43:82:cc:9e:5d:92:2c:cf:7a:97:5c:a4:6f:79:1c:b3:b2:ee:
70:29:3c:0a:3e:64:fb:a7:6e:1c:29:23:64:04:ef:a9:47:63:
56:e7:58:23:6c:cf:be:d2:d7:74:c2:a6:ad:d3:9e:30:63:8c:
57:f9:85:73:86:1f:84:fe:8c:af:fb:24:e6:cc:36:1a:19:96:
3f:dc:f4:c3:ee:22:dd:7f:07:49:08:3f:44:70:ba:97:37:9c:
5f:70:5c:78:46:29:fc:28:a7:af:05:7a:9e:2b:19:77:ec:e6:
f5:54:30:44:24:2a:9a:ff:99:ce:57:7a:ed:ce:c6:48:9b:51:
09:5f:32:41:8a:21:41:9e:57:07:30:55:86:32:32:74:c7:a9:
c0:d8:45:73
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeJJaCPmsr3VdF9OvZvtKRFtY3l4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDQwNjU4MjhaFw0yNjA5MDMwNzAzMjhaMDMxMTAvBgNV
BAMTKDI0OTAyM0NCNjA2RkY5MUM3OTQxNjFBNTRENTQ3RTkzNDg2RjM2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMMGnyJm2b1WWUQKLfLbB2zbR
OMlRXZwV3UlWoipjersWPUrZfnDWhfSJ1WjPWab6qJY0o4Zok0T//ql3CkdZCqeN
WR3eD61CEIGQwzu9ghVl3qQfwLEJBByuMLsZv9SVH91e6X9SIiHP52p63U09PV94
I0kuKU1hy/+yPche8mRxmWx0KbqjxMgaA9dGlndlUUOI43BUGMGfTVIZn/gl7iy4
fckXT59vHIvdTAqI3q2dgYuCobwp+879sx1Z+omZk400K/QzmNYpFPvzHc8mgp/V
qZHe7gfSUiVAcp+RdO1qkgBbJx3HJL0eHiHgKsS/KuJqnrt2vKbnO8XAcCa/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUJJAjy2Bv+Rx5QWGlTVR+k0hvNiswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2dnYMA0GCSqGSIb3DQEBCwUAA4IBAQCIAy4lDpngstRybqRpT2REakXU5fFqLHxN
qH4MerxfD8j1w+Hlrw9GHXvU2Ug9t+0mOuzkWUvL/B1M73bckg564OcoNewcrpts
AazDAs90jpQXStVeKIk067HWIqmmoSvPYnU4jzlZO1pJHDFDgsyeXZIsz3qXXKRv
eRyzsu5wKTwKPmT7p24cKSNkBO+pR2NW51gjbM++0td0wqat054wY4xX+YVzhh+E
/oyv+yTmzDYaGZY/3PTD7iLdfwdJCD9EcLqXN5xfcFx4Rin8KKevBXqeKxl37Ob1
VDBEJCqa/5nOV3rtzsZIm1EJXzJBiiFBnlcHMFWGMjJ0x6nA2EVz
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:06 2025 by rpki-client