Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132332e302f32342d3234203d3e20323132323338.roa
File: 3231372e3231372e3132332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: rR2c/Oko1qiYKTTsUensiqDmpwWuotcs2K58wLdEoDo=
Subject key identifier: 4E:30:DE:D2:7C:2A:28:97:D4:8A:73:94:CC:99:30:D8:00:E3:C3:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0379EAB6B0FD862E90DF0FB175397108648A0EF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132332e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 07 Aug 2025 08:04:09 +0000
ROA not before: Thu 07 Aug 2025 07:59:09 +0000
ROA not after: Thu 06 Aug 2026 08:04:09 +0000
asID: 212238
IP address blocks: 217.217.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:79:ea:b6:b0:fd:86:2e:90:df:0f:b1:75:39:71:08:64:8a:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 7 07:59:09 2025 GMT
Not After : Aug 6 08:04:09 2026 GMT
Subject: CN=4E30DED27C2A2897D48A7394CC9930D800E3C3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:93:d7:44:cf:5b:e3:c9:62:6d:ab:6e:9f:
68:d3:9e:55:2b:59:0d:21:ad:c1:8f:1b:89:46:0a:
a6:09:d5:f6:eb:b8:c5:f2:48:5c:ef:b0:c0:a0:f6:
4d:8b:80:ad:e2:fa:55:e4:60:8d:a3:d0:5c:ae:39:
7d:a9:2e:d6:aa:68:ee:f8:8f:dd:9b:ca:45:2e:f8:
5f:20:57:f7:2e:dc:8c:80:75:f1:75:d2:c8:8e:1f:
29:57:b8:09:44:4f:2d:3b:8a:3e:da:c8:69:af:4c:
7b:5e:91:2a:80:b3:5c:53:9d:6c:d9:02:a5:c4:23:
5e:9c:5a:ef:e0:27:db:5f:51:2d:52:50:f9:f6:59:
d0:3b:ac:87:5a:b6:b2:f1:91:41:27:db:d8:ff:6a:
88:90:88:d8:3a:2c:e5:84:d8:fc:f9:ab:8f:8f:cf:
e5:ad:33:b5:83:c9:54:ef:60:da:d2:6a:9b:81:5a:
ae:ad:2f:fb:59:49:f9:08:e9:0b:00:85:af:9b:10:
d1:6b:c2:af:77:1c:86:89:a7:0d:12:46:e1:7c:95:
d5:13:24:58:c4:d8:ab:64:fa:e9:5b:15:0a:1e:78:
00:b5:f1:9b:ed:18:f4:8f:31:85:2f:5d:e5:d3:82:
2e:de:cd:1c:8a:08:af:a6:ee:43:e7:64:75:d2:0c:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:DE:D2:7C:2A:28:97:D4:8A:73:94:CC:99:30:D8:00:E3:C3:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.123.0/24
Signature Algorithm: sha256WithRSAEncryption
27:89:ce:f8:67:ac:76:76:43:78:7a:72:fd:5a:ea:b9:80:24:
da:33:12:be:aa:ff:93:de:71:ff:f4:93:64:ec:4b:db:ce:7e:
ee:f0:25:27:9c:00:65:d2:fb:0e:d8:22:91:c2:34:7d:de:6e:
38:0d:4a:b2:4d:f2:9d:36:62:d8:fc:f7:3b:c1:2c:ac:05:b1:
e3:18:cc:93:ab:8d:47:89:be:ab:da:a2:56:11:bf:82:74:29:
14:f1:75:8a:89:3b:23:8b:46:ab:0d:ec:f5:52:ff:a3:76:fc:
28:46:b7:c1:1f:4d:0a:3d:34:69:9a:48:f5:ec:ce:10:35:ee:
af:2a:49:45:1a:bd:74:36:6c:4f:f2:a2:cc:72:9e:d3:ba:7e:
6f:b0:26:d5:81:11:23:bf:30:ae:d1:e1:b2:44:2c:99:c7:3b:
a0:68:76:17:c9:40:48:22:ea:e1:83:dc:e1:43:b1:bb:92:c7:
c3:17:b4:c6:97:09:1e:55:36:96:df:b5:99:76:30:fd:1e:e4:
4a:62:7a:77:9f:8f:ae:19:33:85:1b:42:31:c9:85:76:dd:87:
6b:77:29:fc:13:9c:7d:7f:65:d1:68:85:02:f6:11:41:95:49:
b2:97:bb:2e:83:a0:f8:30:20:33:18:1c:8b:c0:b4:6e:3f:1c:
c8:35:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:15 2025 by rpki-client