Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31352e302f32342d3234203d3e203633343733.roa
File: 33312e3232302e31352e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: UU5EnHrIsYUWS7aiP2R7CJlat6WmTUz80/2S+nRh7sA=
Subject key identifier: 20:83:35:86:6A:60:FE:51:E1:AA:24:CF:43:63:98:13:A6:20:56:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3EB0E473F0D5C781DC822A4F716B49064E90A75E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31352e302f32342d3234203d3e203633343733.roa
Signing time: Sun 22 Jun 2025 08:46:42 +0000
ROA not before: Sun 22 Jun 2025 08:41:42 +0000
ROA not after: Sun 21 Jun 2026 08:46:42 +0000
asID: 63473
IP address blocks: 31.220.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b0:e4:73:f0:d5:c7:81:dc:82:2a:4f:71:6b:49:06:4e:90:a7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 22 08:41:42 2025 GMT
Not After : Jun 21 08:46:42 2026 GMT
Subject: CN=208335866A60FE51E1AA24CF43639813A620567E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:ac:58:d3:35:d3:1c:97:c6:be:d0:18:2b:
47:d9:a1:6b:b7:c5:8d:0e:96:d1:68:4d:54:34:e5:
e9:9d:e9:1d:86:15:fc:8a:10:d8:f3:e4:a8:76:be:
a0:88:3e:d9:6a:3b:b5:0d:30:ad:6f:d9:8a:29:a5:
ad:d4:a5:81:96:ab:8c:05:8f:0f:80:e8:a3:02:e6:
11:91:97:44:09:75:b4:55:f3:7a:3f:49:c4:b9:03:
ad:02:a2:98:ba:9f:c0:10:a5:10:7b:df:c8:a0:d1:
bd:1e:9a:ed:17:5c:34:d5:68:16:06:b6:4f:38:bd:
33:35:6f:47:eb:fe:2e:33:23:99:88:b0:27:76:85:
a7:6c:ce:9d:d0:1b:b5:f7:1f:46:fb:ee:99:81:54:
74:bf:3d:c9:ed:f6:96:04:c1:9a:21:87:69:c5:04:
35:da:88:87:5a:94:63:43:ad:6e:01:a0:a6:72:cc:
3f:13:8d:70:f9:16:99:c2:42:39:9c:0b:45:de:57:
4f:1d:d4:25:49:32:28:39:d3:09:0e:01:e4:76:8f:
3b:52:43:e1:61:2b:93:ea:c1:3e:85:36:d4:0a:19:
d6:1c:3a:7c:e0:e3:87:3a:16:2d:6e:6a:9f:0c:6c:
f5:0e:c9:30:d6:bf:58:70:73:eb:cd:d2:6d:8e:94:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:35:86:6A:60:FE:51:E1:AA:24:CF:43:63:98:13:A6:20:56:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31352e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.15.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f5:f5:95:11:1f:85:2e:ba:2e:f1:af:3b:23:22:93:99:27:
58:dc:09:0f:66:b4:34:02:e0:e6:a2:c9:29:17:0f:1d:46:d2:
95:0a:22:46:34:61:e4:a7:e3:76:f4:57:f8:8d:62:f0:fd:29:
21:f0:9a:14:8e:93:93:a4:1e:aa:a9:34:b3:0a:66:5e:8f:c8:
06:bd:42:91:d5:1c:2f:08:68:9d:67:61:05:fd:33:fa:df:4f:
d7:7a:e4:a6:0f:c7:39:af:76:76:26:fe:c6:3e:0c:23:7b:ec:
f1:13:a8:bd:d5:39:ba:2f:4a:a0:21:9e:bf:22:93:87:8a:a3:
81:c5:0c:25:05:39:32:57:c8:be:ec:c2:3a:8f:a5:53:7d:65:
3f:7b:ff:cb:5a:48:c3:5f:f9:ad:5c:27:9f:ad:87:ca:94:45:
87:0c:44:5e:71:d2:36:54:86:41:fe:f8:b6:4e:06:a7:4c:8a:
fe:07:a9:96:82:00:14:a7:db:92:f7:c7:ef:17:0b:78:86:a9:
61:40:78:cd:82:bb:00:79:e3:6a:d8:ad:ec:9d:57:b3:16:aa:
df:d4:a6:8d:15:b6:f3:b1:c2:c0:db:32:b8:80:3b:a4:47:7b:
ee:86:3d:8d:9f:3b:18:42:61:8c:c4:94:fe:68:7e:45:d6:c0:
8b:64:a7:a9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPrDkc/DVx4HcgipPcWtJBk6Qp14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjIwODQxNDJaFw0yNjA2MjEwODQ2NDJaMDMxMTAvBgNV
BAMTKDIwODMzNTg2NkE2MEZFNTFFMUFBMjRDRjQzNjM5ODEzQTYyMDU2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1axY0zXTHJfGvtAYK0fZoWu3
xY0OltFoTVQ05emd6R2GFfyKENjz5Kh2vqCIPtlqO7UNMK1v2Yoppa3UpYGWq4wF
jw+A6KMC5hGRl0QJdbRV83o/ScS5A60Copi6n8AQpRB738ig0b0emu0XXDTVaBYG
tk84vTM1b0fr/i4zI5mIsCd2hadszp3QG7X3H0b77pmBVHS/Pcnt9pYEwZohh2nF
BDXaiIdalGNDrW4BoKZyzD8TjXD5FpnCQjmcC0XeV08d1CVJMig50wkOAeR2jztS
Q+FhK5PqwT6FNtQKGdYcOnzg44c6Fi1uap8MbPUOyTDWv1hwc+vN0m2OlG3BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIIM1hmpg/lHhqiTPQ2OYE6YgVn4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM0MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/c
DzANBgkqhkiG9w0BAQsFAAOCAQEAUPX1lREfhS66LvGvOyMik5knWNwJD2a0NALg
5qLJKRcPHUbSlQoiRjRh5KfjdvRX+I1i8P0pIfCaFI6Tk6Qeqqk0swpmXo/IBr1C
kdUcLwhonWdhBf0z+t9P13rkpg/HOa92dib+xj4MI3vs8ROovdU5ui9KoCGevyKT
h4qjgcUMJQU5MlfIvuzCOo+lU31lP3v/y1pIw1/5rVwnn62HypRFhwxEXnHSNlSG
Qf74tk4Gp0yK/geploIAFKfbkvfH7xcLeIapYUB4zYK7AHnjatit7J1Xsxaq39Sm
jRW287HCwNsyuIA7pEd77oY9jZ87GEJhjMSU/mh+RdbAi2SnqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:43:29 2025 by rpki-client