Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa
File: 3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: oeWN9u2OmjnxblDzPA2ja3jrYAwXsjkMGP3hoRi+R+0=
Subject key identifier: 46:BA:DD:59:09:8F:E6:DF:ED:48:7D:3F:ED:C8:88:8A:6B:0B:E2:98
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25AE535F192F2C3F2E112A8AFC0FA7FD6EB90018
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 06 Oct 2025 13:03:45 +0000
ROA not before: Mon 06 Oct 2025 12:58:45 +0000
ROA not after: Mon 05 Oct 2026 13:03:45 +0000
asID: 207137
IP address blocks: 217.216.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ae:53:5f:19:2f:2c:3f:2e:11:2a:8a:fc:0f:a7:fd:6e:b9:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 12:58:45 2025 GMT
Not After : Oct 5 13:03:45 2026 GMT
Subject: CN=46BADD59098FE6DFED487D3FEDC8888A6B0BE298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:39:0d:73:01:2e:fc:99:ee:3b:8b:19:dc:
14:dc:6d:e6:46:07:2a:f7:a0:aa:d6:3a:59:81:5c:
1a:af:8f:fa:b3:d7:17:21:f5:c2:32:21:db:52:6b:
1b:bd:60:98:00:bb:fe:ff:6b:09:87:0e:f6:7b:45:
a2:de:73:9d:eb:d6:fb:c8:17:d9:02:d4:fa:61:29:
36:50:12:a2:e7:b8:09:3f:df:cf:a3:f6:6e:c2:07:
50:f3:ae:0d:e9:f3:24:08:a0:eb:70:5b:bc:1c:f1:
00:61:3c:aa:c0:3d:44:e0:25:43:5e:14:b3:75:9b:
1a:7b:b3:8a:b2:3a:fa:f5:4e:59:c4:c0:f5:8f:4a:
3e:7c:10:4e:b3:02:6c:78:b3:ca:4b:76:65:7b:a8:
b6:73:ac:31:2a:6a:b9:45:18:80:b3:7b:ce:12:3b:
f9:e4:db:b6:13:c7:52:f8:7f:73:6d:cb:f8:20:7e:
81:b3:f4:72:13:ec:64:43:3b:e0:22:e5:af:0b:1f:
34:33:ec:85:29:1d:a0:2a:78:f5:b5:74:3e:ff:fe:
41:c6:df:dc:6b:8d:67:49:8e:08:c0:0e:7f:c1:3e:
82:64:49:29:48:d1:76:c4:05:0c:c1:8b:64:20:54:
fe:0b:25:9a:2e:31:6f:3a:6f:86:c4:9c:c2:f9:af:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BA:DD:59:09:8F:E6:DF:ED:48:7D:3F:ED:C8:88:8A:6B:0B:E2:98
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39372e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e1:9a:70:b5:89:60:19:16:33:42:04:ab:51:2a:5c:5d:0a:
ed:5c:ce:91:31:55:35:a0:9f:09:ec:f3:57:36:21:a7:7e:13:
8c:8a:17:2c:70:8a:78:13:cf:83:bd:19:fc:85:e0:e7:38:ee:
b5:24:66:4d:59:5c:5e:e2:89:1d:85:4d:d4:e0:2e:bf:19:82:
dd:d2:ef:46:e3:9d:c2:a6:39:0a:2c:16:eb:6e:cf:80:50:58:
03:94:bc:bf:2e:be:38:ef:6b:4c:3c:5b:49:90:f8:d3:b9:c2:
4c:32:b8:df:98:6c:f1:3d:af:1a:59:74:76:7b:49:a2:24:e9:
87:76:ae:2e:93:c8:3b:c8:0f:bf:3a:a9:1d:61:59:65:05:36:
28:36:b7:16:fe:52:2d:48:77:8f:67:ee:2e:0f:2d:32:3c:e5:
27:77:a7:f3:d3:aa:fa:a4:9f:76:85:b7:91:62:a8:47:6d:59:
6b:59:75:d7:9d:c3:7f:f7:d8:46:36:4f:6f:c5:c6:d9:55:00:
76:ab:62:1c:10:b5:85:4d:b2:94:ff:2b:9e:22:55:4b:7c:c1:
a9:7c:de:81:5a:90:3c:aa:00:3a:17:8e:2b:c1:01:e5:90:a5:
f0:9f:5e:dd:25:84:65:dc:ae:ac:ab:d8:9c:2a:fe:1e:06:37:
fb:d4:ee:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:21 2025 by rpki-client