Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hRhZG5YUE50oaySlhrSLCmJodJgmnFTq6I9Fr7sNh6M=
Subject key identifier: E6:C1:23:82:CF:EC:B2:E2:B3:16:CA:48:1D:AF:C4:88:1A:86:9E:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D4B20CC41775F11C20A92AFB5390E0DCDB16041
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 09 Oct 2025 13:13:48 +0000
ROA not before: Thu 09 Oct 2025 13:08:48 +0000
ROA not after: Thu 08 Oct 2026 13:13:48 +0000
asID: 136787
IP address blocks: 217.216.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4b:20:cc:41:77:5f:11:c2:0a:92:af:b5:39:0e:0d:cd:b1:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 13:08:48 2025 GMT
Not After : Oct 8 13:13:48 2026 GMT
Subject: CN=E6C12382CFECB2E2B316CA481DAFC4881A869E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:f0:72:98:ba:20:a0:40:f6:16:72:ca:a3:
79:28:7d:bf:04:4f:13:2e:a4:ce:47:53:e3:75:ea:
b9:54:8a:ed:37:15:ec:c5:6e:91:54:26:de:27:84:
f8:04:92:90:8e:39:57:78:3f:d7:5a:6f:b0:c9:9b:
27:66:dd:a2:36:81:34:cb:cf:69:09:fa:6b:0d:10:
16:7e:50:3d:f0:9f:1f:b9:16:68:5a:7b:08:0a:35:
02:52:7f:c4:7f:4d:02:a8:a2:85:b1:39:c2:69:99:
44:fb:5b:74:c8:05:99:f0:29:dc:ad:8f:6c:97:87:
2d:c2:d5:43:0b:a2:2f:4a:f2:cf:97:4c:cc:67:ab:
ca:86:c3:d3:6e:d1:b9:8f:82:35:c3:48:93:d2:2e:
de:9e:92:34:19:4a:d4:f8:0b:4d:23:ff:f3:5d:66:
b8:1f:ff:d5:bd:2b:21:1f:88:0b:89:98:aa:0a:43:
37:28:f7:44:ba:47:29:7d:cd:ac:5a:3c:0e:8f:fd:
a8:e1:3e:3b:45:ec:05:8c:82:0a:0c:ec:48:6a:3c:
32:e7:3b:72:82:d4:81:cc:30:41:24:b6:a5:d9:46:
df:b9:62:85:73:54:c3:67:06:c0:33:77:ef:2f:03:
62:8b:31:55:24:d9:5a:12:1f:fd:10:6f:98:cb:11:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:23:82:CF:EC:B2:E2:B3:16:CA:48:1D:AF:C4:88:1A:86:9E:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.117.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2a:c6:28:72:98:41:10:b7:ba:29:ed:1b:45:67:5a:23:67:
ea:32:0d:5a:6f:bd:a1:7f:7d:f5:4b:9e:fd:43:45:55:60:e4:
02:5e:86:1f:33:84:c9:4a:5e:06:be:57:59:32:93:b0:a1:86:
e1:04:dd:9b:36:00:56:22:48:00:55:c0:cf:93:21:17:5b:25:
d9:ee:b0:cc:0e:26:ab:2a:67:ae:55:20:7b:9a:07:aa:e7:c4:
2f:9e:8a:43:a8:02:ab:69:4c:a6:32:63:74:5e:17:6d:11:cd:
3c:fc:d8:9c:08:e1:b5:f9:91:34:c2:7c:ac:0c:bb:a1:a7:33:
9b:41:94:0c:26:5b:d9:5d:9a:f1:12:25:c2:be:66:e4:fe:b1:
2b:3b:22:83:8b:bd:55:d4:7a:21:a6:37:1b:6d:b5:e5:ec:be:
a7:53:aa:75:98:fc:ba:be:0f:2e:76:5b:c0:aa:72:0d:dd:5d:
83:6b:b8:31:ed:4f:48:99:44:c8:b8:8e:7d:38:57:9e:e7:59:
cd:7b:85:f1:4e:43:58:5e:57:28:8d:a7:76:ea:a9:69:df:3b:
b0:83:ab:9d:06:5b:74:b1:35:ed:86:02:fc:62:d9:6e:79:38:
f5:7f:86:cc:3c:2c:8f:b7:d5:43:29:ee:84:cf:86:ad:e5:a9:
b9:a9:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:48 2025 by rpki-client