Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131362e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: oeD86mWl7jCBjwDhaotfacU7EdtRXI5lC4ucMOux5L8=
Subject key identifier: 45:0B:EE:7D:82:F5:54:2C:EA:E8:AE:3D:CE:3C:F6:E1:3E:ED:E2:56
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25834A5C511C3D70D40E9CBB3C7CCC9C63251621
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131362e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 09 Oct 2025 13:13:47 +0000
ROA not before: Thu 09 Oct 2025 13:08:47 +0000
ROA not after: Thu 08 Oct 2026 13:13:47 +0000
asID: 136787
IP address blocks: 217.216.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:83:4a:5c:51:1c:3d:70:d4:0e:9c:bb:3c:7c:cc:9c:63:25:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 13:08:47 2025 GMT
Not After : Oct 8 13:13:47 2026 GMT
Subject: CN=450BEE7D82F5542CEAE8AE3DCE3CF6E13EEDE256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:a5:7e:0a:6a:06:07:94:eb:7d:e0:33:b4:
c8:d6:30:e5:48:96:aa:c0:8d:65:f0:d5:f2:c7:7c:
37:f3:8e:43:f7:8b:4d:b3:1c:36:08:fd:96:89:5d:
06:c8:c2:08:3c:ba:6e:56:61:5b:10:8e:08:93:b8:
54:0a:67:74:b3:27:35:ab:bd:81:34:d5:7a:26:c6:
9f:6e:05:df:aa:d7:41:87:89:c2:ad:21:29:b6:72:
6c:05:7b:77:14:0c:d6:ef:74:ae:8c:4e:2e:6f:9f:
67:3e:66:90:88:51:20:20:df:d9:a0:80:8a:c0:49:
93:85:df:61:fd:fd:85:f2:0c:66:c7:b2:3f:4d:8f:
c3:8c:b7:bf:4b:59:12:2a:1b:e4:a7:9f:20:c5:93:
b9:90:16:e2:32:86:dc:09:58:d3:28:25:44:cc:73:
f9:23:2a:b0:a9:73:9a:d3:ea:d0:bb:2b:ce:1f:a9:
66:bf:60:e7:9e:0a:0f:21:83:d5:e5:9a:dd:fd:ff:
4f:6e:a2:96:db:14:68:d1:94:c9:ce:58:b7:58:cd:
ac:73:87:9e:84:4b:38:3c:94:a5:25:31:28:65:d9:
b1:93:29:65:f4:97:a5:4a:53:63:68:39:7d:07:d9:
44:7d:06:29:d0:16:05:e5:ff:c5:3f:29:fb:d7:a1:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:EE:7D:82:F5:54:2C:EA:E8:AE:3D:CE:3C:F6:E1:3E:ED:E2:56
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.116.0/24
Signature Algorithm: sha256WithRSAEncryption
96:42:66:fc:d1:df:eb:89:aa:b4:09:0c:61:2a:f5:07:2b:c5:
5c:30:09:ef:bb:e0:69:67:ae:1c:65:be:aa:f5:da:21:31:a2:
f2:fb:47:8b:17:81:bc:62:c7:3a:6c:15:46:5a:d1:32:7b:c7:
a9:ae:bf:eb:7d:49:7a:ad:a0:e0:93:9e:01:4b:c4:54:d9:f4:
b0:44:fc:6b:dc:af:2e:1b:39:a4:a9:82:95:13:9b:27:1c:e7:
b3:71:f5:94:9b:25:f2:36:a7:c9:d5:1d:db:78:c2:8b:c9:65:
e6:33:95:5c:fa:01:6c:40:25:4c:0d:21:04:ec:1d:df:7d:d8:
e0:9a:e0:08:d7:da:19:dc:92:dc:0b:69:2d:38:15:a5:ae:27:
92:ef:3e:f4:d3:40:86:bc:05:9b:5c:67:df:91:e1:93:03:e3:
7e:0b:da:e0:03:de:68:f1:d1:57:33:2a:97:75:dd:d0:b5:6a:
58:25:bb:aa:e2:df:92:29:5a:2f:f8:45:02:08:5f:d0:27:de:
4b:f0:83:40:e6:11:4f:23:71:06:4f:96:41:ef:26:a2:d7:bc:
34:f3:c2:eb:17:0a:09:78:1a:53:60:86:12:e9:ba:4c:b0:05:
49:0e:61:88:ba:e6:00:f3:68:4a:53:a2:08:55:1f:55:d5:f8:
be:78:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:41 2025 by rpki-client