Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39362e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231362e39362e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: q/sk5U+qsEFPaeA1wVkMbKKSR+bs2zBSpSLQI2rU7ZY=
Subject key identifier: C0:EB:EB:E2:B3:76:FF:C6:96:58:24:AA:60:B3:0A:27:15:1F:86:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A75831241940F5CA09C13E5975B89AFDE780CB9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39362e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 29 Sep 2025 13:40:31 +0000
ROA not before: Mon 29 Sep 2025 13:35:31 +0000
ROA not after: Mon 28 Sep 2026 13:40:31 +0000
asID: 137409
IP address blocks: 217.216.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:75:83:12:41:94:0f:5c:a0:9c:13:e5:97:5b:89:af:de:78:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 13:35:31 2025 GMT
Not After : Sep 28 13:40:31 2026 GMT
Subject: CN=C0EBEBE2B376FFC6965824AA60B30A27151F86C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:39:2e:70:40:6e:ce:3b:26:d4:92:b0:f1:
4f:68:65:82:1c:a5:07:52:02:b4:c5:e0:c4:09:55:
6e:66:0c:00:ad:45:da:d8:a7:d8:19:13:53:2c:b6:
70:0e:99:00:1a:30:c7:89:23:33:97:3c:63:d5:48:
d7:af:ad:8c:95:6a:f5:0a:33:8f:94:47:f4:9d:f2:
41:2b:70:0f:88:23:57:6d:1d:37:05:49:c1:12:f7:
e0:bc:53:5b:77:28:38:9d:a1:42:59:f5:7a:21:78:
63:46:18:cd:5d:24:dd:ed:65:74:51:f0:25:d7:4b:
b8:7b:14:b6:97:7b:11:2d:d3:2b:12:54:c9:3d:cd:
0a:cc:13:15:12:f5:0a:98:50:76:69:57:db:44:04:
ed:b4:30:bc:9b:db:ed:ef:6b:73:64:d2:5b:1d:a8:
23:7d:3b:29:8c:20:b6:3c:8b:ef:35:92:b3:86:2d:
4f:64:5a:15:1f:25:33:c7:d4:49:8e:1c:cd:59:c8:
48:05:75:0e:ff:5f:2e:be:d4:d7:bb:b4:d3:74:3e:
b5:7f:49:64:6b:19:b0:40:52:c4:f6:b9:ed:f5:9a:
28:ab:6b:5d:31:30:2b:dc:1f:e8:0a:6a:a3:5a:0a:
76:45:f0:56:d3:23:c3:ac:25:2e:6a:a5:13:ee:50:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:EB:E2:B3:76:FF:C6:96:58:24:AA:60:B3:0A:27:15:1F:86:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39362e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.96.0/24
Signature Algorithm: sha256WithRSAEncryption
25:24:db:91:8a:7d:b1:5d:f6:0e:32:52:e0:bc:29:00:a8:19:
b7:06:02:ca:b3:f2:11:f8:2c:46:7e:44:c8:fc:2e:78:e6:05:
05:1e:c0:4d:1b:fc:f7:93:b8:e1:2b:9b:f7:ba:4d:93:d8:67:
01:e2:15:40:d0:1d:e3:28:06:6b:9c:75:59:59:ed:5d:26:5b:
36:d3:4c:4a:2d:f1:7c:4e:db:56:c7:b4:f6:67:3e:84:bd:24:
4e:d3:21:bd:d9:24:2b:bd:fd:fa:f3:7b:e6:15:de:0b:8c:4f:
f8:a9:0f:f2:da:34:18:5c:b2:f5:7c:81:8a:1e:9a:ed:4a:ca:
77:76:ec:2e:27:6a:72:db:bb:89:bc:e5:16:d2:0d:f2:9c:72:
81:85:fa:17:f9:2f:c6:b1:15:2a:65:b7:23:9d:8b:e9:d1:6b:
fb:f3:df:35:99:88:dd:4c:4b:88:6f:6c:01:61:9a:a8:b0:b0:
51:bd:90:80:3c:0a:13:40:e2:5a:31:68:71:d7:98:e2:b4:3a:
82:71:6f:94:04:79:6e:d1:a4:08:ec:cb:93:8c:90:cd:17:dc:
d4:1b:22:d3:1f:86:21:5b:c4:bb:de:50:3f:23:bd:e8:b0:23:
3f:97:7a:64:39:36:af:50:b6:a5:e2:01:f1:24:d0:18:2a:93:
09:83:d4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:09 2025 by rpki-client