Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131332e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: L3K5Iq2gMsCKeoKCWOMlj5Z5bDsovE1EnnwuStFLbNg=
Subject key identifier: 79:AE:91:74:1D:3A:87:A9:14:6E:0C:94:19:EE:37:48:7F:16:17:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62F2EFF6C8F31426B1B9DE786E158D688B10962F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 09 Oct 2025 13:13:44 +0000
ROA not before: Thu 09 Oct 2025 13:08:44 +0000
ROA not after: Thu 08 Oct 2026 13:13:44 +0000
asID: 136787
IP address blocks: 217.216.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f2:ef:f6:c8:f3:14:26:b1:b9:de:78:6e:15:8d:68:8b:10:96:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 13:08:44 2025 GMT
Not After : Oct 8 13:13:44 2026 GMT
Subject: CN=79AE91741D3A87A9146E0C9419EE37487F161713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:6a:96:9b:fb:fd:49:f0:8e:53:0b:3e:ef:
48:ce:06:b3:4d:40:5f:1c:fd:ab:3e:5f:97:c1:3a:
4d:72:22:5e:bd:2b:91:d1:d7:23:a5:0f:46:ab:7b:
ce:eb:6c:39:c2:1d:93:49:d5:e5:37:21:5a:0d:12:
7c:f1:f5:17:ff:65:43:61:23:88:4f:c8:63:0e:18:
b4:9b:6b:31:fd:4e:a8:c5:eb:40:e7:6a:d9:8b:22:
b1:00:28:8a:c7:e5:81:d1:c5:58:87:92:50:cd:e2:
c9:4a:4e:ec:d5:91:ec:59:c0:0a:12:cc:83:5c:a8:
70:34:8d:85:4f:18:8b:56:49:af:73:4c:a6:87:fc:
06:90:44:e7:c3:21:32:a0:ff:89:5c:84:14:77:80:
42:d0:a7:04:fb:c8:f2:0a:38:7c:c9:bb:a0:9d:97:
42:8c:0e:d5:69:c7:7c:58:6f:e8:44:2e:ef:04:b5:
01:d7:eb:0b:42:11:f4:db:e9:56:00:85:77:09:3d:
23:a0:22:a1:ef:05:df:4c:a7:53:17:e8:74:44:97:
9e:80:54:1c:89:1d:73:22:c9:0d:f4:90:c4:66:9d:
bd:30:ed:bb:ef:8f:1e:96:df:d4:8d:1d:87:ce:f0:
88:7a:c7:05:7b:ee:7a:46:63:b3:20:7e:d7:4e:5d:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:91:74:1D:3A:87:A9:14:6E:0C:94:19:EE:37:48:7F:16:17:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.113.0/24
Signature Algorithm: sha256WithRSAEncryption
32:84:b4:aa:88:c7:3e:03:11:78:63:25:e3:26:24:6c:30:7c:
36:b8:76:07:00:72:b1:df:d1:b2:4d:3c:27:01:0a:37:6f:7e:
35:4e:ac:d5:20:65:20:7d:f9:b6:61:f8:82:7a:b8:6a:e1:c5:
0a:b8:c5:59:3c:4d:c9:48:42:55:77:3a:a2:79:7e:b7:ce:30:
38:da:ff:1f:48:3a:b3:79:6d:d7:0e:97:ce:e4:50:73:76:53:
dd:92:ed:cf:aa:4c:00:76:ff:67:05:98:18:be:b6:7f:58:3c:
e4:4a:25:4f:29:67:b4:55:9e:9b:70:32:19:2a:8f:f5:56:15:
de:83:5d:d4:2d:97:6a:d1:44:29:83:9c:d9:a8:83:f8:ff:67:
98:e7:b9:3c:5b:90:3e:1c:bb:fe:16:e0:cf:e2:14:9c:47:17:
c3:be:11:3a:be:af:fe:a6:f3:ce:21:5f:28:28:c2:36:15:12:
d4:4d:18:29:81:44:53:9b:51:ba:9c:4a:d0:80:47:07:ef:d1:
94:84:b8:f6:22:12:c0:21:a7:a3:3c:3f:90:8c:30:42:65:14:
56:5a:95:4c:01:36:eb:84:7f:d1:55:39:0c:c2:1f:d9:eb:13:
00:3f:21:01:52:c7:56:c0:11:bc:40:d8:57:25:71:66:1e:f4:
50:65:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:43 2025 by rpki-client