Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130352e302f32342d3234203d3e20323037313337.roa
File: 3231372e3231362e3130352e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: mJeFd5GMZkphbAxWieClhzVAPM0FVeWK/rSzug4Ro1E=
Subject key identifier: A1:47:4E:98:6E:25:58:72:15:08:37:D7:C6:08:7F:E1:A4:56:AD:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 528639CDFC03413D16AB697B2C6019346EC2A2AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130352e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 27 Oct 2025 12:14:31 +0000
ROA not before: Mon 27 Oct 2025 12:09:31 +0000
ROA not after: Mon 26 Oct 2026 12:14:31 +0000
asID: 207137
IP address blocks: 217.216.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:86:39:cd:fc:03:41:3d:16:ab:69:7b:2c:60:19:34:6e:c2:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 12:09:31 2025 GMT
Not After : Oct 26 12:14:31 2026 GMT
Subject: CN=A1474E986E255872150837D7C6087FE1A456ADDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:ff:0b:c3:38:c7:e6:44:35:03:01:e5:14:
de:26:88:ca:91:5a:5b:48:e2:2f:94:7a:dc:85:be:
c5:00:73:11:15:75:e3:30:86:ab:a3:38:0c:09:58:
36:89:f4:dd:b3:38:25:d3:12:9f:3d:ba:95:22:52:
6b:7a:80:db:46:66:c7:f0:8d:c8:80:69:99:93:4d:
06:47:d8:49:94:d5:b4:d5:81:33:f8:17:be:72:e0:
f8:a5:37:31:25:ac:a1:47:0e:b3:57:24:a7:1b:9b:
79:04:4b:58:17:84:45:ee:17:23:9f:aa:2d:23:10:
33:85:e7:b2:71:cb:3c:9b:79:0a:50:84:2f:88:cb:
29:dc:38:79:83:a8:24:fb:03:8a:d4:35:60:3c:50:
fc:9c:3e:f2:e6:63:c2:f8:93:a5:72:46:ef:ad:81:
91:61:3e:2d:0b:a0:52:7a:5e:eb:3f:31:33:37:ed:
5d:69:b1:38:b4:c7:3d:58:73:69:a7:02:2d:6e:cd:
14:15:6d:83:87:fc:a3:fe:2c:a2:e9:80:68:6f:c9:
d1:4b:c1:08:01:90:6e:8f:6c:10:71:bf:ef:a0:f1:
fb:db:da:ee:5e:e5:8a:d0:58:3e:dc:92:8a:e0:dc:
2d:51:54:4c:ac:d5:f1:06:ea:a6:6a:e5:8d:31:d2:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:4E:98:6E:25:58:72:15:08:37:D7:C6:08:7F:E1:A4:56:AD:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3130352e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.105.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:ce:cc:22:44:57:71:88:89:be:b4:00:3b:42:3b:40:5b:
9b:fd:df:d3:52:4c:3a:21:a0:e6:cd:f6:8e:17:d3:5d:a1:47:
6e:25:83:01:18:2e:95:57:e5:6b:e9:f6:b3:78:46:cc:b4:9b:
7e:2e:5f:e0:c4:57:3a:00:ab:10:45:64:89:8a:fb:a8:5a:0f:
f8:24:d2:2c:82:be:4b:7f:37:b8:07:f6:ab:32:b1:57:5f:09:
4e:52:8c:44:3f:9d:76:d6:24:00:05:d5:e1:68:10:2e:ae:fc:
af:a0:36:a6:8c:e5:04:43:48:2b:3e:99:58:4f:95:63:65:9d:
6c:a1:b4:4d:0a:9f:a1:21:85:2c:3d:0f:77:2c:a0:d9:f6:82:
58:d8:dd:48:41:a5:07:1b:aa:55:e2:b4:5f:c7:c0:e1:29:d4:
7b:c5:ad:07:6e:f8:26:a3:8c:1b:52:65:99:09:b4:ce:ab:a6:
61:e4:de:4f:32:45:a5:39:75:e7:8c:5f:66:70:40:96:19:82:
65:1e:66:c0:81:f5:85:b9:7d:b4:01:2f:fa:d2:3d:8e:b0:88:
a5:d0:ee:0e:45:6f:6a:86:aa:5a:a5:48:24:7d:70:39:68:ac:
f6:83:7b:c8:25:78:f8:72:65:fc:b4:1f:d2:3c:ac:6e:c8:94:
a1:7b:3c:d6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUUoY5zfwDQT0Wq2l7LGAZNG7Coq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMjcxMjA5MzFaFw0yNjEwMjYxMjE0MzFaMDMxMTAvBgNV
BAMTKEExNDc0RTk4NkUyNTU4NzIxNTA4MzdEN0M2MDg3RkUxQTQ1NkFEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMf8LwzjH5kQ1AwHlFN4miMqR
WltI4i+UetyFvsUAcxEVdeMwhqujOAwJWDaJ9N2zOCXTEp89upUiUmt6gNtGZsfw
jciAaZmTTQZH2EmU1bTVgTP4F75y4PilNzElrKFHDrNXJKcbm3kES1gXhEXuFyOf
qi0jEDOF57JxyzybeQpQhC+IyyncOHmDqCT7A4rUNWA8UPycPvLmY8L4k6VyRu+t
gZFhPi0LoFJ6Xus/MTM37V1psTi0xz1Yc2mnAi1uzRQVbYOH/KP+LKLpgGhvydFL
wQgBkG6PbBBxv++g8fvb2u5e5YrQWD7ckorg3C1RVEys1fEG6qZq5Y0x0i8hAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUoUdOmG4lWHIVCDfXxgh/4aRWrdswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnYaTANBgkqhkiG9w0BAQsFAAOCAQEACEPOzCJEV3GIib60ADtCO0Bbm/3f
01JMOiGg5s32jhfTXaFHbiWDARgulVfla+n2s3hGzLSbfi5f4MRXOgCrEEVkiYr7
qFoP+CTSLIK+S383uAf2qzKxV18JTlKMRD+ddtYkAAXV4WgQLq78r6A2pozlBENI
Kz6ZWE+VY2WdbKG0TQqfoSGFLD0Pdyyg2faCWNjdSEGlBxuqVeK0X8fA4SnUe8Wt
B274JqOMG1JlmQm0zqumYeTeTzJFpTl154xfZnBAlhmCZR5mwIH1hbl9tAEv+tI9
jrCIpdDuDkVvaoaqWqVIJH1wOWis9oN7yCV4+HJl/LQf0jysbsiUoXs81g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:17 2025 by rpki-client