Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33312e302f32342d3234203d3e20323036373636.roa
File: 3231372e3231372e33312e302f32342d3234203d3e20323036373636.roa (raw, json)
Hash identifier: az1EP6yF6YcJRCp9vVPMUdJUsMByBpviWnp9ZoJz8vs=
Subject key identifier: C3:C8:AB:2F:50:07:DC:08:BE:02:A4:5A:82:BB:8C:96:4C:13:74:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D83BEA75766B2C0A917904C8B63F447A1DB864A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33312e302f32342d3234203d3e20323036373636.roa
Signing time: Wed 10 Sep 2025 18:40:14 +0000
ROA not before: Wed 10 Sep 2025 18:35:14 +0000
ROA not after: Wed 09 Sep 2026 18:40:14 +0000
asID: 206766
IP address blocks: 217.217.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:83:be:a7:57:66:b2:c0:a9:17:90:4c:8b:63:f4:47:a1:db:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 18:35:14 2025 GMT
Not After : Sep 9 18:40:14 2026 GMT
Subject: CN=C3C8AB2F5007DC08BE02A45A82BB8C964C1374FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:4b:a9:bf:72:da:24:4d:05:ee:ab:14:03:
ca:80:17:84:36:4c:ea:58:c6:4c:82:ec:5a:08:ce:
dd:02:3d:ab:38:bb:82:ac:c6:96:51:da:1f:06:74:
6d:df:1d:f4:00:54:7b:93:8a:b1:9f:f4:32:27:35:
57:07:bf:33:13:0e:76:02:c0:05:cb:6c:f4:e9:a8:
5a:75:7e:31:ff:b7:57:1d:40:3d:88:6c:1b:cd:0d:
90:bc:47:fa:bc:6f:0d:93:55:3f:72:dc:6a:f8:a0:
60:c4:c9:2c:28:af:dc:df:b5:ea:96:97:76:db:de:
3b:3d:05:97:e2:0a:82:ea:d6:9e:0b:dc:ee:c3:77:
ba:d9:7b:bf:98:08:cf:d8:e3:ed:1b:83:3b:01:51:
4e:b5:a7:a2:7c:45:d5:e9:01:78:62:04:52:db:b7:
ab:96:24:5a:6d:68:da:3b:85:1e:94:be:1d:61:25:
84:45:70:dd:a0:72:ab:9a:52:3a:b6:57:f1:48:ae:
4f:65:8f:6c:65:74:0f:6a:52:c5:08:28:56:b4:cf:
53:4b:38:17:39:a2:ec:e6:b2:12:81:45:e8:b3:42:
bc:f8:2c:32:c8:d7:1c:ee:bf:0d:16:be:57:e2:10:
ca:c2:94:4c:f2:48:7a:41:7d:5c:40:31:17:4c:20:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:AB:2F:50:07:DC:08:BE:02:A4:5A:82:BB:8C:96:4C:13:74:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e33312e302f32342d3234203d3e20323036373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b0:0c:e2:e0:f4:6e:ef:06:dc:f4:a9:ee:60:49:26:c7:79:
7a:59:1f:2e:3c:8c:fc:63:b7:17:f4:e5:3e:b3:12:81:4a:d0:
fa:8e:3b:c2:20:90:01:5b:a4:ca:84:37:92:73:a9:4e:f4:05:
29:1a:29:c9:8b:4a:db:09:60:69:cf:aa:a8:1e:c2:ac:b4:c0:
01:86:64:c2:5f:e6:d6:e1:ee:cc:08:5a:f1:92:8f:42:83:b9:
ac:e9:44:8c:cd:97:6b:3f:47:c6:88:e2:4f:ef:2b:3e:da:02:
68:47:e7:1d:9b:17:75:22:6b:ed:30:bd:ab:85:61:7f:ae:c8:
15:e1:f7:4f:13:32:fe:1d:61:c4:4c:45:d1:c2:92:cc:6c:38:
0d:44:64:aa:a1:cd:a9:cd:ec:cd:70:ac:15:9a:46:3b:69:fd:
fe:cd:fc:25:b5:d9:05:bc:7e:8f:59:c3:f7:09:d7:dd:26:1a:
27:f9:a6:ef:39:96:b0:9e:9f:8c:6c:fd:a5:fd:7d:d2:d6:ac:
30:e4:74:4e:35:f5:78:e6:70:8e:d9:0d:81:d0:e1:dd:f1:fb:
d3:47:ff:a1:71:d7:b8:73:8e:fc:59:58:19:b3:3f:dc:01:7d:
9e:29:f6:2c:4e:cf:68:a4:29:c9:60:46:7a:6e:fe:fd:82:ac:
54:be:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:07 2025 by rpki-client