Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e3130322e3130322e302f32342d3234203d3e20383334.roa
File: 3231322e3130322e3130322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QGshgCIuxyFLI8x+SY6E1RoLyhyz9pBEMGurVZ/sSW4=
Subject key identifier: 5B:68:04:F0:CE:FE:4A:59:EB:49:23:30:EF:A6:37:BB:A7:7D:7F:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06C5448407EBB992DD1D492E16C019520713E37C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e3130322e3130322e302f32342d3234203d3e20383334.roa
Signing time: Thu 17 Jul 2025 08:46:53 +0000
ROA not before: Thu 17 Jul 2025 08:41:53 +0000
ROA not after: Thu 16 Jul 2026 08:46:53 +0000
asID: 834
IP address blocks: 212.102.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c5:44:84:07:eb:b9:92:dd:1d:49:2e:16:c0:19:52:07:13:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 08:41:53 2025 GMT
Not After : Jul 16 08:46:53 2026 GMT
Subject: CN=5B6804F0CEFE4A59EB492330EFA637BBA77D7F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:a8:50:e2:62:62:e9:6a:8e:bb:78:40:a4:
a5:0e:c3:2d:12:c9:d9:19:b1:c2:b8:dd:66:75:6e:
c0:a9:4b:38:93:8a:16:6e:ea:e0:1c:19:3e:d2:7d:
83:e2:fe:32:7a:df:a5:28:03:e1:7c:9f:9f:8b:25:
af:a5:93:04:9b:3f:75:99:3e:1e:e9:92:b9:cd:a7:
31:2d:f3:70:24:31:8c:14:9f:fb:4a:c6:b9:24:08:
a2:c0:8a:fb:dd:1d:f5:d5:18:65:77:85:21:81:8e:
84:80:08:56:9f:4d:f9:28:91:b3:fc:19:16:16:b7:
96:7a:f4:68:bd:c2:d3:23:1f:ce:21:1c:a1:25:76:
8f:b5:b2:76:f1:31:50:99:0b:cd:9a:20:33:16:d1:
29:c5:bb:41:1a:a2:a4:74:d6:c1:38:b6:76:b1:d6:
fd:bc:1a:83:a8:84:fb:af:ef:d1:57:72:8a:34:be:
c2:40:79:0a:c2:25:43:d0:fe:f5:b3:1d:c0:0a:b1:
9b:0d:3f:91:1d:28:d7:f5:9e:1f:fb:9b:be:fb:3e:
76:82:5e:3a:0d:49:53:c8:77:2e:6a:3e:10:54:f5:
e4:07:69:ba:0c:b8:41:8d:6b:2a:95:51:9a:17:58:
14:06:4f:a7:61:96:94:e7:20:99:c0:65:4b:e3:a7:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:04:F0:CE:FE:4A:59:EB:49:23:30:EF:A6:37:BB:A7:7D:7F:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e3130322e3130322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a8:b6:cd:b3:02:1a:f3:9c:f0:ea:88:66:28:c8:95:7e:2c:
88:dc:e6:21:32:bc:71:4e:84:57:dc:65:b6:b8:6b:ed:f0:7a:
fd:c7:73:a5:0c:43:4d:e4:74:c7:e9:65:e6:dc:53:d9:eb:75:
c3:7a:57:99:43:e8:b6:08:fd:0a:7c:c6:0b:5a:b3:c3:6d:c4:
ed:97:a4:19:04:83:8a:ad:98:4b:3c:00:e4:8d:05:65:8d:18:
d7:06:94:6a:85:cc:c3:18:9d:3b:a4:3f:80:90:da:0f:aa:f4:
ec:49:c0:aa:35:11:5b:f2:92:0c:f4:1d:8d:b3:6a:61:5a:c8:
30:57:0b:61:bb:db:03:97:13:44:aa:7a:08:8d:ad:58:25:e1:
6f:f5:8b:d5:84:9f:35:8b:fa:f0:1c:19:88:bb:53:e7:97:01:
a4:74:7d:24:9a:4c:4a:15:67:e2:6e:ee:2f:94:4d:8a:85:3a:
73:41:66:c8:5d:64:f1:46:e7:0c:54:e4:2f:97:8c:62:49:dc:
7b:41:b1:2f:b9:f1:0a:56:8a:e6:9f:af:3b:f4:02:b2:1d:46:
21:56:f1:cb:98:15:49:a8:1d:c3:24:44:ca:89:ed:a4:46:15:
9e:81:6c:ca:15:cf:5b:1a:70:ae:d9:5b:7f:fc:e5:bd:34:ee:
97:a8:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:36 2025 by rpki-client