Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3234203d3e203437353833.roa
File: 3231372e3139362e34382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: ad8+QMNLwoUAREBGDfi0DwCYyHLT9AcKJEMkaYpF2QA=
Subject key identifier: DB:84:E0:EE:14:55:6D:A1:94:1A:9F:6B:8D:B8:E9:0F:98:C6:E0:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23B88D608EDFFC8E154F68465C3C2D1DE26AE072
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:20 +0000
ROA not before: Thu 15 May 2025 10:41:20 +0000
ROA not after: Thu 14 May 2026 10:46:20 +0000
asID: 47583
IP address blocks: 217.196.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b8:8d:60:8e:df:fc:8e:15:4f:68:46:5c:3c:2d:1d:e2:6a:e0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:20 2025 GMT
Not After : May 14 10:46:20 2026 GMT
Subject: CN=DB84E0EE14556DA1941A9F6B8DB8E90F98C6E032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:d2:02:ea:1c:50:20:0b:bd:d1:4e:5a:71:
b8:c6:59:d5:5e:ec:79:97:8c:2b:40:a6:8f:3a:0d:
a4:a9:17:bc:21:80:e3:72:ce:ae:c0:27:53:b0:6e:
fc:85:60:9b:e6:64:53:0e:7e:1f:37:34:3e:4b:4c:
91:52:f0:33:90:fb:4a:0b:4c:94:79:8d:30:ab:69:
9f:65:41:aa:e5:a8:0c:38:6b:9c:53:9d:7e:02:a0:
93:b5:83:b4:ae:43:82:00:09:4e:51:43:01:0d:bb:
17:5f:43:1c:57:1c:f4:d3:07:75:1f:79:1f:ef:a2:
a4:3c:76:7c:43:2d:fa:b7:9e:3b:92:5f:05:09:fb:
25:d4:3d:1e:94:2d:30:d3:84:c2:d1:74:10:17:e9:
d8:a1:f1:08:a8:2a:ce:ac:04:7f:54:75:8c:d1:83:
c3:de:a8:e8:72:91:9c:09:c8:50:4f:be:fe:d0:1e:
4d:91:fb:5f:a3:af:52:5f:12:f3:70:07:7e:f3:41:
45:c3:59:7e:58:76:ec:96:db:a1:74:01:9a:c4:4a:
46:a6:ff:46:34:84:f8:9a:c5:64:d3:f5:71:17:d8:
53:24:da:ce:48:c7:c1:0c:dc:48:51:8f:bb:23:10:
d8:34:14:3f:8b:07:88:a2:a9:3e:14:9f:99:39:a4:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:84:E0:EE:14:55:6D:A1:94:1A:9F:6B:8D:B8:E9:0F:98:C6:E0:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.48.0/21
Signature Algorithm: sha256WithRSAEncryption
16:d6:e0:c7:a7:1e:69:6b:28:8e:bf:cc:7d:1c:84:ad:0d:72:
f0:b7:7f:be:83:4b:7e:31:57:b0:8c:71:eb:51:9f:97:ae:ae:
97:2a:91:da:fd:66:69:2b:4f:1b:de:07:ce:a5:73:70:b6:0d:
12:06:9e:ff:b3:f2:88:7a:25:62:c2:1c:e3:84:2b:20:c4:81:
1f:cf:af:57:c6:06:78:b5:23:63:25:5b:2e:8a:85:b8:2e:4d:
f6:14:0a:3d:29:06:24:84:ae:da:b5:3d:93:2e:fc:08:43:48:
9c:76:0e:de:5f:cf:80:ee:f9:a8:0e:7f:bf:15:bd:2c:42:0e:
e2:57:c0:c4:ae:26:d1:d0:4a:7b:05:e0:7c:f5:a1:9f:6d:ae:
ab:b2:61:21:90:51:1f:e3:b6:7d:ce:fb:bc:af:90:38:20:4d:
a5:34:13:aa:3d:55:61:9c:88:10:ce:1c:f4:4f:c6:f9:1f:a2:
de:c7:72:a7:d9:d5:e6:13:3c:1a:ee:0b:14:9e:c5:50:e9:dd:
bc:99:d7:01:be:c5:d9:fb:87:4a:02:ef:b8:9e:4e:fb:7f:8a:
9d:e4:a4:ce:4e:92:e6:14:fb:13:7c:27:d4:5d:c0:1f:c9:be:
91:93:2c:90:8c:13:b0:52:aa:ec:29:f7:f6:16:f1:7c:87:58:
9e:cc:9e:4d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUI7iNYI7f/I4VT2hGXDwtHeJq4HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MTUxMDQxMjBaFw0yNjA1MTQxMDQ2MjBaMDMxMTAvBgNV
BAMTKERCODRFMEVFMTQ1NTZEQTE5NDFBOUY2QjhEQjhFOTBGOThDNkUwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkE9IC6hxQIAu90U5acbjGWdVe
7HmXjCtApo86DaSpF7whgONyzq7AJ1OwbvyFYJvmZFMOfh83ND5LTJFS8DOQ+0oL
TJR5jTCraZ9lQarlqAw4a5xTnX4CoJO1g7SuQ4IACU5RQwENuxdfQxxXHPTTB3Uf
eR/voqQ8dnxDLfq3njuSXwUJ+yXUPR6ULTDThMLRdBAX6dih8QioKs6sBH9UdYzR
g8PeqOhykZwJyFBPvv7QHk2R+1+jr1JfEvNwB37zQUXDWX5YduyW26F0AZrESkam
/0Y0hPiaxWTT9XEX2FMk2s5Ix8EM3EhRj7sjENg0FD+LB4iiqT4Un5k5pFItAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU24Tg7hRVbaGUGp9rjbjpD5jG4DIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMTM5MzYyZTM0
MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
2cQwMA0GCSqGSIb3DQEBCwUAA4IBAQAW1uDHpx5payiOv8x9HIStDXLwt3++g0t+
MVewjHHrUZ+Xrq6XKpHa/WZpK08b3gfOpXNwtg0SBp7/s/KIeiViwhzjhCsgxIEf
z69XxgZ4tSNjJVsuioW4Lk32FAo9KQYkhK7atT2TLvwIQ0icdg7eX8+A7vmoDn+/
Fb0sQg7iV8DEribR0Ep7BeB89aGfba6rsmEhkFEf47Z9zvu8r5A4IE2lNBOqPVVh
nIgQzhz0T8b5H6Lex3Kn2dXmEzwa7gsUnsVQ6d28mdcBvsXZ+4dKAu+4nk77f4qd
5KTOTpLmFPsTfCfUXcAfyb6RkyyQjBOwUqrsKff2FvF8h1iezJ5N
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:13 2025 by rpki-client