Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e302e302f31392d3234203d3e2036303739.roa
File: 3231372e3231362e302e302f31392d3234203d3e2036303739.roa (raw, json)
Hash identifier: ypZN3ieGXT7K7OGm/OepJx34WGZrjkni31yjBCfhbEo=
Subject key identifier: 49:F9:17:90:FB:69:FE:35:11:9E:F9:B7:35:0F:92:93:F5:E5:E7:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6942079021A02379D7FDA53D4A4E51234CAA3DC3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e302e302f31392d3234203d3e2036303739.roa
Signing time: Thu 07 Aug 2025 07:51:34 +0000
ROA not before: Thu 07 Aug 2025 07:46:34 +0000
ROA not after: Thu 06 Aug 2026 07:51:34 +0000
asID: 6079
IP address blocks: 217.216.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:42:07:90:21:a0:23:79:d7:fd:a5:3d:4a:4e:51:23:4c:aa:3d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 7 07:46:34 2025 GMT
Not After : Aug 6 07:51:34 2026 GMT
Subject: CN=49F91790FB69FE35119EF9B7350F9293F5E5E77F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:bf:51:f5:26:9b:c6:db:91:e9:e3:c3:da:
90:fd:a5:27:3b:76:31:e3:b4:c6:e4:04:ea:d6:3f:
95:14:5f:44:a0:8c:8e:a1:a0:e5:7f:1d:5f:68:62:
a5:0d:7c:98:b6:9e:5a:84:92:d2:5e:9e:d2:6b:d3:
59:51:49:4a:20:b3:3d:37:17:ae:7c:11:ee:59:b2:
2b:0a:2a:09:bf:c9:5e:22:32:cd:6f:64:da:e6:c8:
d8:63:29:e3:73:d1:e1:a1:c0:8b:05:38:d8:a2:40:
56:75:0b:1e:ca:9d:40:73:32:63:05:5c:65:5a:24:
2a:c2:86:ae:a9:6d:a4:fd:a1:85:dd:6d:9f:92:4b:
06:dd:1e:ad:6f:45:25:03:58:55:3e:4d:3b:06:12:
93:09:45:a8:0d:35:56:58:74:e8:3b:b8:a9:7a:b0:
1c:aa:86:d1:5a:ab:8b:95:85:a9:a3:2c:cc:99:6d:
cb:ef:fd:02:88:5e:53:6c:7e:49:bc:e6:e6:d8:b2:
d3:bc:d2:2b:7b:59:d2:2a:ca:0a:d1:2f:5d:cf:2a:
f7:fe:f8:ed:40:f0:91:61:03:43:bb:4d:38:10:1a:
f6:1d:cf:14:ac:76:57:23:a8:06:00:0c:bc:1e:93:
f9:07:18:91:69:0d:00:08:b1:f8:20:dc:5d:60:c7:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:17:90:FB:69:FE:35:11:9E:F9:B7:35:0F:92:93:F5:E5:E7:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e302e302f31392d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:a3:ab:50:51:cd:65:e1:35:27:49:0e:61:81:cc:75:ad:0f:
11:2c:e4:bb:72:3b:e4:fc:cb:44:ed:0f:48:4e:c1:f0:75:f4:
22:3c:da:a9:16:d2:90:3f:44:db:e3:2c:ef:8f:92:04:5e:39:
fa:69:a7:bb:50:91:26:10:a3:29:6c:de:26:66:a7:e9:57:0e:
3f:57:11:35:d7:0c:4c:d1:be:27:da:ff:ef:37:93:78:79:f3:
08:f2:df:be:9a:0a:f8:ce:3a:a3:f3:8c:20:3c:67:88:6d:0f:
30:71:d3:ea:42:26:01:ab:1a:61:35:d9:0b:1a:da:c7:11:59:
ee:d3:1f:6e:42:67:09:7e:89:18:d2:6a:c8:7e:6f:37:2e:30:
92:66:70:91:f8:3d:3a:02:5a:9a:63:7e:36:b3:ce:32:4c:1f:
44:55:ea:10:07:ff:fd:ad:5a:37:9e:01:93:a4:8e:d1:85:6a:
7c:be:50:06:d6:ea:b3:62:39:72:7d:c3:d0:ff:95:dc:f3:2c:
51:9b:ff:cb:80:59:b8:ce:f3:d2:06:9f:69:dc:4a:ad:67:e1:
c2:7a:0b:64:9a:d4:31:0e:3b:c5:b1:de:cc:d2:ae:5d:05:e2:
bf:b6:88:a9:08:81:74:69:cd:6a:65:01:89:39:19:73:b5:fd:
e7:9a:8e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:27 2025 by rpki-client