Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e302e302f31392d3234203d3e2039333034.roa
File: 3231372e3231362e302e302f31392d3234203d3e2039333034.roa (raw, json)
Hash identifier: y3HaVa29DndGw8qyraW4m0gyt2BKs+D+v0dG6PJKQqc=
Subject key identifier: 00:81:CB:91:7E:2D:0F:07:A7:B0:E2:41:CB:E2:76:5C:48:F0:E6:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23368D755B2632A494CE22BA06710A5D49A2A6F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e302e302f31392d3234203d3e2039333034.roa
Signing time: Thu 07 Aug 2025 07:51:24 +0000
ROA not before: Thu 07 Aug 2025 07:46:24 +0000
ROA not after: Thu 06 Aug 2026 07:51:24 +0000
asID: 9304
IP address blocks: 217.216.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:36:8d:75:5b:26:32:a4:94:ce:22:ba:06:71:0a:5d:49:a2:a6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 7 07:46:24 2025 GMT
Not After : Aug 6 07:51:24 2026 GMT
Subject: CN=0081CB917E2D0F07A7B0E241CBE2765C48F0E6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:0d:24:cf:5d:83:33:ea:1c:db:58:c9:b8:
85:02:d5:3d:07:15:91:7e:4b:c5:30:92:43:56:11:
09:0d:26:08:ed:97:06:01:f3:e6:01:6d:1d:f9:cb:
9b:3f:4d:00:87:9c:ee:8d:18:3c:13:38:05:83:93:
38:a4:2a:f7:18:3d:ec:51:e5:3b:ee:e4:05:11:bc:
ae:53:e7:89:9d:eb:fa:cc:52:51:dc:83:10:97:08:
7d:ee:82:cb:a3:96:ee:45:fc:f1:56:54:42:fd:b9:
7b:94:03:6d:2a:f9:46:18:f6:8a:33:ee:84:78:3b:
86:ad:1d:22:db:8d:d8:d7:25:05:04:c7:d0:1c:c0:
79:75:5d:40:9a:a2:23:7f:4a:15:4f:8c:5d:d2:ec:
ae:9c:85:c6:8e:35:37:c2:21:54:58:29:70:e1:9b:
4e:a9:80:db:0b:66:ee:e5:94:83:84:b8:b3:5f:19:
bb:af:cf:8f:5f:af:d7:3e:74:77:82:59:25:cf:50:
c2:e1:2b:8c:d4:f3:7b:53:04:d7:51:e7:e1:05:5e:
f7:32:7d:40:67:2d:3f:17:b3:e0:1d:ba:67:e9:23:
b4:be:54:4b:0d:e1:b8:c2:48:bb:62:68:68:6f:59:
1a:1b:47:37:73:47:cf:65:cc:50:c0:c3:76:d4:26:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:CB:91:7E:2D:0F:07:A7:B0:E2:41:CB:E2:76:5C:48:F0:E6:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e302e302f31392d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.0.0/19
Signature Algorithm: sha256WithRSAEncryption
95:be:0a:5f:ff:f9:af:59:5f:5f:bf:2c:13:a9:af:de:96:7c:
74:c8:00:40:7d:fc:5b:92:e4:6a:b1:ad:bf:d7:16:ea:6a:84:
5d:6d:7f:17:b7:41:2a:df:bd:db:2b:74:a6:ac:53:65:35:18:
c1:8d:d8:99:2f:80:80:d0:5d:eb:e0:5d:53:b3:06:f6:f2:ce:
72:3b:f3:93:9f:d8:7f:52:b6:03:06:72:d4:72:ea:26:b0:a9:
7e:e0:7a:b4:56:a6:45:52:97:25:fc:7c:f8:9c:9a:58:46:68:
e7:1b:ea:b3:76:03:6d:77:6f:ed:c1:f4:a1:6b:d8:cf:27:f5:
24:f2:e4:44:f0:51:d3:ae:80:13:0d:b1:50:cc:e2:22:ac:c7:
a0:2b:65:8f:9c:69:dc:85:65:7d:e0:47:21:2a:3c:de:e0:28:
4d:be:c9:57:5c:2e:18:46:df:f6:b9:9a:e8:33:2a:ea:aa:c5:
29:13:2d:2d:a8:0a:0d:8a:36:ad:57:23:1d:29:a7:ca:b1:0a:
9e:ab:38:7d:c1:da:2d:1f:20:dd:86:95:97:42:a7:da:1c:5e:
16:01:34:92:1f:d0:6e:e9:bc:76:0e:34:2c:ae:1a:33:f9:82:
9e:b1:70:c9:27:4e:90:f6:13:5a:c9:a2:07:91:ed:bf:87:a1:
e2:ba:17:b7
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUIzaNdVsmMqSUziK6BnEKXUmipvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MDcwNzQ2MjRaFw0yNjA4MDYwNzUxMjRaMDMxMTAvBgNV
BAMTKDAwODFDQjkxN0UyRDBGMDdBN0IwRTI0MUNCRTI3NjVDNDhGMEU2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWQ0kz12DM+oc21jJuIUC1T0H
FZF+S8UwkkNWEQkNJgjtlwYB8+YBbR35y5s/TQCHnO6NGDwTOAWDkzikKvcYPexR
5Tvu5AURvK5T54md6/rMUlHcgxCXCH3ugsujlu5F/PFWVEL9uXuUA20q+UYY9ooz
7oR4O4atHSLbjdjXJQUEx9AcwHl1XUCaoiN/ShVPjF3S7K6chcaONTfCIVRYKXDh
m06pgNsLZu7llIOEuLNfGbuvz49fr9c+dHeCWSXPUMLhK4zU83tTBNdR5+EFXvcy
fUBnLT8Xs+AdumfpI7S+VEsN4bjCSLtiaGhvWRobRzdzR89lzFDAw3bUJvYPAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUAIHLkX4tDwensOJBy+J2XEjw5qEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMw
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXZ2AAw
DQYJKoZIhvcNAQELBQADggEBAJW+Cl//+a9ZX1+/LBOpr96WfHTIAEB9/FuS5Gqx
rb/XFupqhF1tfxe3QSrfvdsrdKasU2U1GMGN2JkvgIDQXevgXVOzBvbyznI785Of
2H9StgMGctRy6iawqX7gerRWpkVSlyX8fPicmlhGaOcb6rN2A213b+3B9KFr2M8n
9STy5ETwUdOugBMNsVDM4iKsx6ArZY+cadyFZX3gRyEqPN7gKE2+yVdcLhhG3/a5
mugzKuqqxSkTLS2oCg2KNq1XIx0pp8qxCp6rOH3B2i0fIN2GlZdCp9ocXhYBNJIf
0G7pvHYONCyuGjP5gp6xcMknTpD2E1rJogeR7b+HoeK6F7c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:33 2025 by rpki-client