Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232302e302f32342d3234203d3e2033323537.roa
File: 3231372e3231372e3232302e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: LEF+/xcCB0OCeOcL6ndS3sCYRpmwqAlIoFkHUpfrkOA=
Subject key identifier: 4C:95:8C:50:96:1E:94:84:8E:37:A2:98:48:57:4E:EC:28:9E:FD:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 768674B6426EC883FAE77ACF2B48B4B87CFB2986
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232302e302f32342d3234203d3e2033323537.roa
Signing time: Thu 04 Sep 2025 07:03:25 +0000
ROA not before: Thu 04 Sep 2025 06:58:25 +0000
ROA not after: Thu 03 Sep 2026 07:03:25 +0000
asID: 3257
IP address blocks: 217.217.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:86:74:b6:42:6e:c8:83:fa:e7:7a:cf:2b:48:b4:b8:7c:fb:29:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 06:58:25 2025 GMT
Not After : Sep 3 07:03:25 2026 GMT
Subject: CN=4C958C50961E94848E37A29848574EEC289EFD4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:77:7e:cc:a0:54:9a:28:38:d5:bf:96:c3:
98:bf:05:61:a8:78:1a:05:73:88:58:68:39:8a:95:
b0:a3:0f:bc:9d:e5:18:f5:d2:8f:31:c7:c5:ea:df:
0b:8a:e2:a5:01:1f:c3:49:7a:ee:38:52:e1:8f:a5:
47:b7:65:55:2f:e6:57:06:2f:a5:e7:6c:51:fc:4e:
ab:2f:18:2e:30:c1:ee:5c:1e:85:c3:a6:a9:f7:56:
c8:b5:fc:47:e5:fe:74:75:e7:9e:44:62:fe:d2:f2:
f6:8f:7a:55:ec:97:30:0f:e7:4b:b6:86:78:7c:d6:
7c:5b:eb:34:ff:65:91:59:74:74:2f:e9:67:77:3d:
dc:f8:01:96:93:be:00:f9:c4:3d:c4:d2:e3:04:8b:
3e:07:e3:04:ae:81:f0:e4:20:ae:25:bc:5f:90:2d:
a9:e2:1f:16:83:82:eb:5b:21:a2:a1:b3:42:7a:77:
af:f0:c1:d1:dc:44:1b:a6:04:58:f0:8e:7c:b2:4f:
9b:c6:0b:a8:ab:83:8f:77:36:32:2f:29:f9:9f:fc:
65:c6:a7:02:5f:fb:34:db:da:19:15:9e:4f:4a:e1:
e7:87:6e:e4:b3:4f:7a:13:9e:c8:c3:31:dc:a1:9e:
2d:25:73:df:f1:42:01:07:92:8f:d0:bc:e2:3d:c4:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:8C:50:96:1E:94:84:8E:37:A2:98:48:57:4E:EC:28:9E:FD:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3232302e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.220.0/24
Signature Algorithm: sha256WithRSAEncryption
64:87:60:8a:a9:8d:0d:a9:0d:88:49:1d:86:7f:33:f9:01:22:
f3:64:73:51:75:d3:be:8c:a8:3e:1a:28:82:d4:19:60:a9:d3:
aa:8b:cb:88:9e:06:4a:68:2b:8c:cf:c7:df:9d:bc:4d:ec:cb:
f3:3e:7b:5f:f0:f9:e5:9b:e9:4c:49:45:85:9c:1f:4a:9a:bc:
30:55:3b:f7:b0:01:03:5e:8c:fe:0c:94:ea:74:04:b6:e2:a6:
91:d8:2e:d7:2a:21:d7:df:3f:91:74:d5:a6:ef:47:83:ca:f3:
31:ea:c9:87:82:8b:e9:33:f2:9b:6f:f5:d1:3b:96:75:35:da:
9f:96:e6:c8:4e:ac:69:f5:63:9e:1a:0a:ca:f0:a7:ed:b5:15:
d3:46:13:56:5c:66:36:4a:72:46:90:e5:14:4c:01:a8:da:6a:
1e:14:e5:14:dd:38:02:5f:cd:37:15:3e:66:a8:f4:75:e4:fa:
4c:f4:7b:7c:5f:13:f7:ec:47:8d:77:d8:76:63:c0:90:16:d9:
ef:dc:ac:55:98:a4:4a:50:39:06:b8:a7:94:8a:b3:a8:f0:11:
ff:d1:4f:44:1d:f1:6e:00:55:cb:39:57:80:ae:ee:81:99:22:
33:97:6f:62:9b:54:72:e5:2c:b6:1b:6c:2f:d7:6d:9b:68:33:
68:f2:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:44:35 2025 by rpki-client