Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39382e302f32342d3234203d3e20313337343039.roa
File: 3231372e3231362e39382e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 39f7aRhowZ7wDMQioFELu7AmO6g3cl71E2ZTvSG76Cw=
Subject key identifier: A3:4B:0A:05:9A:65:53:5A:86:11:48:39:9A:4D:4F:4A:DE:D7:B9:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D010E6A7BFE57C4DFE1FDB2B919B20B92D87AA9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39382e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 29 Sep 2025 13:40:33 +0000
ROA not before: Mon 29 Sep 2025 13:35:33 +0000
ROA not after: Mon 28 Sep 2026 13:40:33 +0000
asID: 137409
IP address blocks: 217.216.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:01:0e:6a:7b:fe:57:c4:df:e1:fd:b2:b9:19:b2:0b:92:d8:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 13:35:33 2025 GMT
Not After : Sep 28 13:40:33 2026 GMT
Subject: CN=A34B0A059A65535A861148399A4D4F4ADED7B994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:d4:23:12:09:3e:9b:b4:d0:0a:90:6e:71:
47:67:ad:2d:1d:6f:bd:31:bb:c1:f1:a6:92:75:7e:
d4:e4:c6:af:7f:1b:cd:57:1d:11:7b:14:5d:f0:a3:
0c:2a:79:91:06:cf:35:bd:97:23:ae:f3:3e:c4:ee:
45:2b:e6:4f:66:3a:a6:29:eb:78:5c:f8:5e:81:a9:
92:f2:f4:e4:c7:87:d1:24:c9:a7:c9:ef:54:78:22:
d7:9f:02:ba:fe:f0:9a:7d:ae:bc:0f:7c:dc:7b:48:
ad:06:10:70:11:cb:f0:8f:16:04:65:99:42:43:5b:
b2:8c:04:24:39:dc:52:8f:ab:01:b4:c9:ea:8f:64:
df:b9:8b:fd:bc:2d:45:e2:6c:c4:43:2b:63:31:52:
84:9c:1a:f8:f1:d3:5c:ad:60:81:58:c3:4f:35:a8:
15:c1:65:45:a8:be:4a:22:c8:63:62:d9:fc:d0:c8:
d2:fa:85:76:0f:ad:9e:d5:b2:e8:c2:d6:4b:e6:7d:
09:83:57:a7:05:a0:1b:7a:2a:b2:5d:03:07:3a:20:
99:04:ac:90:a1:dc:d1:ce:3d:c1:b8:5b:90:77:b1:
d9:3a:68:4e:fc:9a:18:63:50:4b:b1:8b:b3:bd:0a:
f0:60:6c:34:cb:34:62:19:c7:8b:6e:3f:11:8f:c1:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:0A:05:9A:65:53:5A:86:11:48:39:9A:4D:4F:4A:DE:D7:B9:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e39382e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.98.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0c:83:3c:eb:c4:59:ee:7a:2d:69:98:a6:60:9f:b8:23:75:
c0:75:fc:bb:bd:2e:2f:3b:0c:a5:b4:12:8b:04:21:9b:fb:da:
12:e0:bf:71:fc:6e:f4:4a:c7:c9:0e:41:cd:a5:db:ac:c6:a0:
fa:37:55:8a:1f:40:ad:c6:9d:c2:b3:82:6b:3b:40:c1:f6:35:
e0:8c:09:24:9e:92:87:19:18:0f:62:e6:64:5b:cf:43:fe:aa:
9a:f1:7e:e0:0d:0c:fc:7c:f8:d8:76:98:fa:68:15:ad:e0:49:
4c:91:2c:30:8b:7a:5c:de:02:94:3f:de:bd:2e:2e:a8:f5:55:
1a:d9:4d:8c:e8:0c:50:b5:99:87:4b:a5:bd:0c:28:55:a7:c3:
d9:a8:85:58:d2:53:20:59:81:1e:7c:60:ca:82:65:b2:b0:4d:
9a:5d:71:40:41:84:3e:9a:0f:9f:d0:e3:f8:8d:ff:4b:90:60:
8b:b1:1a:e9:09:51:82:27:9f:46:ee:18:3d:94:1c:96:7f:17:
79:eb:65:53:99:27:e5:5c:94:09:70:ff:42:85:89:8f:8b:05:
e9:97:b6:a2:cf:99:3a:87:57:2e:b7:7e:52:4a:17:c5:9b:c8:
ff:15:61:85:b8:1c:61:cd:a9:63:8a:6c:3f:78:bc:d0:2d:32:
db:28:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:06 2025 by rpki-client