Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132382e302f32312d3234203d3e203539363432.roa
File: 3231372e3231372e3132382e302f32312d3234203d3e203539363432.roa (raw, json)
Hash identifier: 9sw1Wy2MMbgi+0o7HWVnt7j0EqKYkjsa52CXhtMu/7Q=
Subject key identifier: EF:47:E6:44:A6:F0:57:DB:02:0E:9D:96:44:C5:AE:58:B9:AB:C5:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E001933D2C8B11F3BC6A47A0B4B1A7FF98F6A34
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132382e302f32312d3234203d3e203539363432.roa
Signing time: Tue 05 Aug 2025 11:35:30 +0000
ROA not before: Tue 05 Aug 2025 11:30:30 +0000
ROA not after: Tue 04 Aug 2026 11:35:30 +0000
asID: 59642
IP address blocks: 217.217.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:00:19:33:d2:c8:b1:1f:3b:c6:a4:7a:0b:4b:1a:7f:f9:8f:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 11:30:30 2025 GMT
Not After : Aug 4 11:35:30 2026 GMT
Subject: CN=EF47E644A6F057DB020E9D9644C5AE58B9ABC569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:67:7f:f7:61:d1:ec:dd:6b:41:c5:6e:ec:
d5:eb:1d:25:d4:20:7e:41:a4:dc:70:41:ba:40:be:
e7:96:df:a4:1f:6b:11:75:b6:95:fc:c0:4e:bb:51:
43:e4:44:41:34:00:a9:c8:52:81:54:7d:3f:00:b4:
96:13:1e:e7:7a:bc:2c:0e:58:b9:38:3d:21:2b:f8:
a0:a5:49:0d:79:81:9c:14:2b:dd:c0:4d:7f:63:0e:
03:2d:19:20:f1:33:4e:75:36:c3:82:ec:39:f3:e5:
64:dd:f6:29:06:85:6a:ba:a3:ee:b2:96:5b:60:fe:
28:e5:8b:e7:b5:79:2a:b6:b4:ba:12:93:00:28:2d:
41:f1:27:6f:0d:bc:fa:98:8d:b9:ec:dc:5f:7b:c3:
5b:27:cc:d3:d8:78:cb:e7:e2:29:bc:03:d7:48:16:
72:85:3f:d9:2f:c0:0d:e2:4f:df:e8:e1:c2:4c:8c:
8c:cb:c0:08:f2:e9:49:f6:95:ab:09:fd:2b:0c:e5:
ab:1b:1e:a1:0d:e9:68:d1:2e:ed:b8:04:64:1e:f4:
ba:51:93:99:a5:4a:c4:3d:fb:95:e9:cf:32:67:e3:
50:20:e3:43:58:46:7c:d6:07:f7:1d:6e:86:71:e8:
95:7d:39:fc:f7:4d:42:5e:00:c9:00:76:e5:88:a7:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:E6:44:A6:F0:57:DB:02:0E:9D:96:44:C5:AE:58:B9:AB:C5:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3132382e302f32312d3234203d3e203539363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.128.0/21
Signature Algorithm: sha256WithRSAEncryption
38:09:39:fd:94:f5:01:a8:59:59:ca:b5:b0:e8:93:80:2c:5c:
1e:d6:b2:da:00:15:ec:11:a2:85:2e:a5:15:0d:44:d2:f9:97:
15:8e:e0:fd:96:ea:bf:e5:ca:4d:d0:49:fe:af:61:a9:64:85:
09:2e:b7:52:22:f6:00:9c:b0:ce:bc:69:46:a7:85:d7:93:82:
ae:5e:76:27:de:86:c3:bb:01:52:e0:13:0c:3f:b2:a0:2c:97:
ec:c8:0d:dd:3f:34:ab:5a:fd:c8:4f:b3:87:06:a3:18:38:16:
ba:ce:c8:52:81:58:77:51:f8:49:e7:cd:f7:a6:18:1a:33:ac:
c5:76:21:b3:14:13:38:b6:bd:40:5e:04:23:2b:6d:9d:84:80:
f3:a4:70:1c:49:92:20:03:58:15:27:57:68:a1:7b:08:42:10:
4d:a2:2c:61:2e:95:94:ec:78:ef:54:da:1e:71:63:02:11:61:
f3:8f:2a:38:52:6b:d1:3d:d9:37:01:9e:9e:c7:32:1f:5c:84:
b7:29:a8:8b:85:54:fd:a8:9d:09:56:91:6c:18:c7:b9:1a:ca:
9b:64:6a:51:fa:56:8c:08:1e:97:3c:e9:78:73:44:31:07:10:
2e:fb:c5:2d:1c:e7:b1:02:6e:1a:61:16:22:28:76:d1:af:eb:
9c:4f:da:9f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbgAZM9LIsR87xqR6C0saf/mPajQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MDUxMTMwMzBaFw0yNjA4MDQxMTM1MzBaMDMxMTAvBgNV
BAMTKEVGNDdFNjQ0QTZGMDU3REIwMjBFOUQ5NjQ0QzVBRTU4QjlBQkM1NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvLmd/92HR7N1rQcVu7NXrHSXU
IH5BpNxwQbpAvueW36QfaxF1tpX8wE67UUPkREE0AKnIUoFUfT8AtJYTHud6vCwO
WLk4PSEr+KClSQ15gZwUK93ATX9jDgMtGSDxM051NsOC7Dnz5WTd9ikGhWq6o+6y
lltg/ijli+e1eSq2tLoSkwAoLUHxJ28NvPqYjbns3F97w1snzNPYeMvn4im8A9dI
FnKFP9kvwA3iT9/o4cJMjIzLwAjy6Un2lasJ/SsM5asbHqEN6WjRLu24BGQe9LpR
k5mlSsQ9+5XpzzJn41Ag40NYRnzWB/cdboZx6JV9Ofz3TUJeAMkAduWIp+9LAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU70fmRKbwV9sCDp2WRMWuWLmrxWkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMx
MzIzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1MzkzNjM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAPZ2YAwDQYJKoZIhvcNAQELBQADggEBADgJOf2U9QGoWVnKtbDok4AsXB7WstoA
FewRooUupRUNRNL5lxWO4P2W6r/lyk3QSf6vYalkhQkut1Ii9gCcsM68aUanhdeT
gq5edifehsO7AVLgEww/sqAsl+zIDd0/NKta/chPs4cGoxg4FrrOyFKBWHdR+Enn
zfemGBozrMV2IbMUEzi2vUBeBCMrbZ2EgPOkcBxJkiADWBUnV2ihewhCEE2iLGEu
lZTseO9U2h5xYwIRYfOPKjhSa9E92TcBnp7HMh9chLcpqIuFVP2onQlWkWwYx7ka
yptkalH6VowIHpc86XhzRDEHEC77xS0c57ECbhphFiIodtGv65xP2p8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:36 2025 by rpki-client