Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131392e302f32342d3234203d3e20313336373837.roa
File: 3231372e3231362e3131392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ref6zVw6PEQZrPnUHE85dCn5UV0Y2m8vE+YRHgtvGVA=
Subject key identifier: 57:8F:48:58:EC:DE:75:89:C6:0A:0B:DA:23:87:B2:CC:78:CA:99:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72716405911FA1CB2DC08C0371376740B2861D16
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 09 Oct 2025 13:13:49 +0000
ROA not before: Thu 09 Oct 2025 13:08:49 +0000
ROA not after: Thu 08 Oct 2026 13:13:49 +0000
asID: 136787
IP address blocks: 217.216.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:71:64:05:91:1f:a1:cb:2d:c0:8c:03:71:37:67:40:b2:86:1d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 13:08:49 2025 GMT
Not After : Oct 8 13:13:49 2026 GMT
Subject: CN=578F4858ECDE7589C60A0BDA2387B2CC78CA9991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:1c:82:97:dc:3a:38:36:e4:3e:3c:29:46:
e9:06:63:b7:4d:68:93:ad:1e:17:dc:24:03:37:c7:
fc:0f:59:cf:c8:73:37:a2:d4:c7:00:4c:60:a7:30:
3f:e8:09:13:32:2b:ba:1f:c4:4f:4f:ab:64:c0:71:
03:3f:bc:78:2a:60:c0:07:eb:c3:16:bc:1a:a3:d9:
a0:0a:f5:0b:16:ed:96:a5:ec:c3:c4:26:90:7a:34:
15:87:74:53:2e:0f:7f:79:92:43:3e:c8:ac:a0:ef:
18:2f:86:de:6b:8f:b4:e2:db:fe:fa:2f:a8:e6:53:
8c:01:78:27:24:a1:11:2a:ce:61:4e:18:ca:e4:f5:
5f:a4:9c:42:42:db:03:2f:10:93:34:1e:1e:9e:ab:
df:24:db:bf:0c:83:50:f7:61:36:10:50:b1:45:d4:
31:d6:fb:88:5b:63:a4:17:a3:5b:96:2a:27:70:5a:
20:83:4d:1a:27:c8:d3:63:ff:78:39:3a:58:64:c2:
4b:91:12:a2:43:e7:61:f5:8d:34:bb:65:7e:e1:56:
5c:4b:61:3a:11:41:7b:db:cc:77:c6:5c:2a:92:df:
f3:e6:fd:41:92:78:ec:b5:b2:8a:11:08:4d:12:09:
64:f7:de:d7:1c:73:9c:5f:ce:ac:8d:30:f9:f2:5e:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:48:58:EC:DE:75:89:C6:0A:0B:DA:23:87:B2:CC:78:CA:99:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3131392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0e:db:b5:cd:13:9a:75:79:ab:06:ca:52:9b:bf:1d:85:1d:
ab:2d:ef:f8:4f:f9:cb:f6:a1:cb:5a:a8:f2:de:b7:a4:d0:b3:
1e:6b:c3:d9:67:ee:a0:d3:94:7b:52:12:22:b1:f0:92:0a:39:
67:40:4f:7d:5d:0b:ee:d3:39:91:31:8f:0c:87:81:f0:31:84:
b5:8c:07:51:2f:df:e9:91:69:8e:60:bb:cb:63:9e:af:0d:77:
fc:14:2d:ba:14:c5:a7:8d:45:67:ee:fa:cf:f8:9d:e5:03:95:
72:11:33:b1:56:68:f3:e8:e7:dd:44:d0:d7:ab:8f:55:be:28:
42:7b:9c:69:77:44:36:db:05:09:be:94:59:93:ed:86:cd:eb:
1e:fd:52:4a:f9:3b:6d:de:c1:27:68:ea:f8:43:6f:7f:cf:ff:
3c:67:9d:5b:75:0a:5f:f5:d1:44:38:d5:82:25:8f:dc:6c:e5:
92:7f:f1:23:aa:a1:bf:a3:1c:61:dd:bc:02:3c:15:e8:ca:72:
39:63:67:f9:f2:64:9d:86:d0:d9:b8:5d:6f:90:71:56:91:41:
c1:0d:c4:1c:81:39:18:4f:10:b5:b2:03:7e:ff:a6:d3:98:ab:
7e:f2:06:c0:f1:a8:29:20:04:0b:64:83:6c:b1:2d:37:8e:71:
65:35:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:43 2025 by rpki-client