Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131342e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: SFWzJIuzha7mPj7Jllcmy81S1NcnZh+i5nnhURgGyiY=
Subject key identifier: E0:9A:DC:98:E2:32:2E:CC:6C:BC:81:AD:4A:62:D9:1A:DA:FD:B3:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1F44755C6813511102F8A9E69A409ED7988CFE61
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 09 Oct 2025 13:13:45 +0000
ROA not before: Thu 09 Oct 2025 13:08:45 +0000
ROA not after: Thu 08 Oct 2026 13:13:45 +0000
asID: 136787
IP address blocks: 217.216.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:44:75:5c:68:13:51:11:02:f8:a9:e6:9a:40:9e:d7:98:8c:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 13:08:45 2025 GMT
Not After : Oct 8 13:13:45 2026 GMT
Subject: CN=E09ADC98E2322ECC6CBC81AD4A62D91ADAFDB343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:f4:b7:40:c2:ff:66:48:6a:6f:8b:af:7f:
42:08:c7:1e:c4:4b:b3:e7:23:f0:76:d9:54:91:b0:
c1:3e:d1:be:d3:75:f3:85:5c:3e:e6:47:ce:98:57:
54:29:37:4a:55:12:e1:5e:ef:be:08:1c:95:d1:22:
1d:e8:76:c7:c7:a4:eb:f4:8c:58:7b:a6:eb:eb:4f:
ea:7e:2f:db:da:72:af:08:30:ed:f9:b8:52:fa:09:
5d:a3:fc:59:1f:84:02:24:2c:f8:7f:19:c3:4e:d3:
86:b0:0d:86:b3:3e:d8:88:07:f3:c3:c4:0c:de:ac:
22:4f:a7:19:95:52:8d:87:5c:f5:1f:e0:c4:a9:c8:
1a:2f:32:04:fa:9b:83:4c:cd:ee:5f:d7:bb:60:4a:
68:e1:75:57:a6:1e:bc:95:11:b4:48:7f:9e:28:6f:
7d:35:cd:2c:b9:6f:ed:5c:f0:3b:09:52:3a:ed:1c:
fb:36:51:84:bc:f1:ee:39:b9:12:79:6f:2b:16:3c:
36:ab:26:f1:44:f1:f9:33:c0:54:d8:b8:5c:74:6f:
0c:16:24:c6:c6:85:b5:1b:7d:58:45:d2:bc:1e:18:
79:dd:66:ea:19:61:23:f5:ff:ee:97:70:9e:9a:17:
ea:fc:a1:a3:44:b5:23:70:99:03:35:36:5d:50:d7:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:DC:98:E2:32:2E:CC:6C:BC:81:AD:4A:62:D9:1A:DA:FD:B3:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:12:61:8d:3d:c5:a5:d9:90:03:31:bb:7f:10:96:97:b1:6d:
5a:cf:15:ee:d8:6a:a8:c7:55:d0:13:45:aa:20:fb:62:b7:90:
b3:1c:3c:e9:a8:6d:25:72:cd:d0:02:94:c5:be:5d:6f:d6:8f:
e7:be:33:c2:85:06:1c:6e:bf:20:6d:8d:02:8b:71:c8:f0:70:
9d:d5:cc:8b:a6:f1:30:33:5e:78:75:5a:f6:55:1d:ca:8d:f0:
8c:7f:83:08:49:5a:81:8a:94:aa:1c:53:1b:87:b4:cf:7a:38:
57:bd:34:9b:44:1c:82:d8:f9:c0:7b:85:1f:42:11:13:cc:b2:
65:ea:3d:e7:66:d1:63:7e:63:90:a4:14:28:17:fb:de:0c:01:
98:8b:18:c5:97:8e:e8:9b:14:c1:ef:c4:af:b3:65:e6:d9:f2:
44:3d:e3:c7:c1:61:6e:e1:d8:b8:95:c6:e3:e1:38:9a:ed:1f:
47:e6:15:fd:5b:f2:0f:78:90:af:2a:65:82:95:5e:2f:d0:d1:
ac:99:f2:a1:89:4d:31:ee:82:d4:53:a3:b1:dd:c1:d9:0f:7d:
dd:5b:1b:18:27:e5:ea:aa:d5:e2:f3:b3:8c:37:c1:c2:41:35:
d2:30:67:d5:44:b5:d5:66:58:3c:dd:ab:67:30:31:8b:7f:0f:
5e:c3:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:37 2025 by rpki-client