Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: W97UZ2V6GLRpjn2vCfYnl/7Mn93fW5zJ4p3DLWiRnh0=
Subject key identifier: F2:CF:64:EA:86:9B:6E:70:ED:CB:BD:67:A1:D7:0A:11:E7:39:EC:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 435D41994235542EB6F1D11081DB3E2471A6E34C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 09 Oct 2025 13:13:46 +0000
ROA not before: Thu 09 Oct 2025 13:08:46 +0000
ROA not after: Thu 08 Oct 2026 13:13:46 +0000
asID: 136787
IP address blocks: 217.216.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5d:41:99:42:35:54:2e:b6:f1:d1:10:81:db:3e:24:71:a6:e3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 13:08:46 2025 GMT
Not After : Oct 8 13:13:46 2026 GMT
Subject: CN=F2CF64EA869B6E70EDCBBD67A1D70A11E739EC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:e9:70:67:a2:56:8b:0f:d6:f6:ca:65:27:
c6:03:b8:db:eb:93:62:26:07:5b:f5:83:1a:23:61:
05:c4:49:c5:ff:4e:ff:81:04:9d:4c:0a:bf:04:47:
99:4d:1b:3c:4c:9a:95:e0:4d:dc:a8:56:4f:1d:e4:
2b:50:c8:09:3e:2d:82:4c:d2:ee:e6:f8:d1:c0:0c:
12:78:1e:81:d2:7a:15:e3:6d:86:a0:cc:ef:45:26:
f6:eb:73:90:9e:62:d1:42:eb:6b:fc:24:f3:dd:7d:
60:ea:57:a2:83:a2:bc:90:80:b6:9a:4c:53:87:01:
0f:b7:ba:51:70:a6:d0:28:ce:d0:de:76:2d:6c:e8:
f9:8f:8b:59:67:62:f5:30:39:b4:e4:f6:7f:f6:14:
eb:08:62:95:43:f4:8b:ee:88:2e:65:24:be:fc:f2:
7a:25:bc:c7:06:9e:97:02:14:3c:85:91:7c:65:da:
66:75:3c:8e:84:77:ed:cc:f4:39:d8:4b:33:dc:a6:
21:17:4d:f2:c5:14:0e:65:40:3e:12:7d:68:eb:32:
c4:8d:67:7c:60:fb:18:53:6a:5d:5c:84:f3:b4:0a:
6d:90:69:bc:ca:b4:7a:a7:84:d8:02:09:5f:c2:50:
5c:59:85:3b:f6:47:e5:09:bb:c5:13:b2:fa:b9:3c:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:64:EA:86:9B:6E:70:ED:CB:BD:67:A1:D7:0A:11:E7:39:EC:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:21:39:ea:3f:d5:ae:f7:8c:05:fe:09:a0:a6:6c:8e:c1:0a:
f6:2e:4c:55:e7:c1:49:0b:24:9f:a4:d3:8f:5e:5e:a1:d1:fe:
33:61:8d:bb:04:ac:fb:b3:eb:23:a2:fa:d8:03:ca:04:01:d2:
f6:85:75:38:eb:6e:5b:98:66:dc:60:d9:79:dd:ad:cf:04:80:
e8:57:9b:5c:5b:66:8d:93:e7:87:5f:aa:ee:fe:c4:7c:6a:c7:
09:eb:72:9a:1d:ed:e5:d8:5e:09:2e:47:35:3c:cd:e1:73:7b:
a1:f1:95:2e:10:e0:27:e1:78:79:23:13:91:f2:2e:79:45:81:
ba:35:14:7e:53:73:03:49:e2:79:d1:87:17:9a:80:57:98:ae:
9b:f8:47:b3:5a:8e:cc:25:7c:c9:97:a8:90:67:5e:fb:63:1d:
0d:f8:87:8b:a0:ac:55:17:20:82:bc:e7:b4:1a:21:98:86:73:
f4:7e:b6:27:55:69:1d:b2:b7:ad:92:fa:85:e9:9e:1a:f1:0b:
d2:e7:6b:19:83:75:30:d8:62:6f:51:39:de:42:7e:e2:67:5b:
f3:46:67:84:b0:64:6f:d6:59:99:89:25:0a:41:59:94:7e:59:
8d:19:03:69:43:12:24:40:b0:57:5b:36:89:62:96:21:45:04:
73:71:85:6b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUQ11BmUI1VC628dEQgds+JHGm40wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMDkxMzA4NDZaFw0yNjEwMDgxMzEzNDZaMDMxMTAvBgNV
BAMTKEYyQ0Y2NEVBODY5QjZFNzBFRENCQkQ2N0ExRDcwQTExRTczOUVDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3elwZ6JWiw/W9splJ8YDuNvr
k2ImB1v1gxojYQXEScX/Tv+BBJ1MCr8ER5lNGzxMmpXgTdyoVk8d5CtQyAk+LYJM
0u7m+NHADBJ4HoHSehXjbYagzO9FJvbrc5CeYtFC62v8JPPdfWDqV6KDoryQgLaa
TFOHAQ+3ulFwptAoztDedi1s6PmPi1lnYvUwObTk9n/2FOsIYpVD9IvuiC5lJL78
8nolvMcGnpcCFDyFkXxl2mZ1PI6Ed+3M9DnYSzPcpiEXTfLFFA5lQD4SfWjrMsSN
Z3xg+xhTal1chPO0Cm2QabzKtHqnhNgCCV/CUFxZhTv2R+UJu8UTsvq5PPdzAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU8s9k6oabbnDty71nodcKEec57DwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYczANBgkqhkiG9w0BAQsFAAOCAQEAniE56j/VrveMBf4JoKZsjsEK9i5M
VefBSQskn6TTj15eodH+M2GNuwSs+7PrI6L62APKBAHS9oV1OOtuW5hm3GDZed2t
zwSA6FebXFtmjZPnh1+q7v7EfGrHCetymh3t5dheCS5HNTzN4XN7ofGVLhDgJ+F4
eSMTkfIueUWBujUUflNzA0niedGHF5qAV5ium/hHs1qOzCV8yZeokGde+2MdDfiH
i6CsVRcggrzntBohmIZz9H62J1VpHbK3rZL6hemeGvEL0udrGYN1MNhib1E53kJ+
4mdb80ZnhLBkb9ZZmYklCkFZlH5ZjRkDaUMSJECwV1s2iWKWIUUEc3GFaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:40 2025 by rpki-client