Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32312d3234203d3e20323133343935.roa
File: 3231372e3231362e3134342e302f32312d3234203d3e20323133343935.roa (raw, json)
Hash identifier: npXWPq4zMAfiSKcuMi3oFO3unK2Qk6ZiM74oo9g/2L4=
Subject key identifier: 30:7B:77:14:87:28:EA:AE:0B:FF:E3:20:FF:FB:A9:E6:9C:9F:C6:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3310981B7B89046DE4A10FB9C68FC4E44F995776
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32312d3234203d3e20323133343935.roa
Signing time: Fri 24 Oct 2025 09:25:06 +0000
ROA not before: Fri 24 Oct 2025 09:20:06 +0000
ROA not after: Fri 23 Oct 2026 09:25:06 +0000
asID: 213495
IP address blocks: 217.216.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:10:98:1b:7b:89:04:6d:e4:a1:0f:b9:c6:8f:c4:e4:4f:99:57:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 09:20:06 2025 GMT
Not After : Oct 23 09:25:06 2026 GMT
Subject: CN=307B77148728EAAE0BFFE320FFFBA9E69C9FC660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:a9:5d:29:d9:9b:52:77:e7:d3:de:de:a5:
a8:3a:9a:d2:cf:bf:93:d5:53:a7:c2:1f:3e:96:5e:
e2:47:42:d2:da:4c:33:ce:27:7c:41:09:3c:a8:3e:
64:9d:8e:4e:cb:c4:b6:a1:bb:e5:ff:af:7b:50:f6:
f7:bb:90:20:cc:d7:fe:33:ec:1e:aa:9f:c5:8c:96:
b2:d5:4b:39:15:9f:0a:f6:5d:75:18:98:33:ae:84:
75:d3:a0:a7:fa:b1:05:cf:3b:76:ed:1f:57:ce:72:
58:a9:8c:3a:09:95:f7:14:7f:7a:f0:ce:83:91:88:
b7:26:d6:ef:72:e9:ea:a1:88:18:7a:22:6f:74:77:
8b:69:0a:6c:7d:d4:19:0d:18:f9:97:fa:89:d5:63:
3e:8c:81:6a:68:5d:66:fb:f9:51:96:e4:7d:52:76:
f9:0d:65:4c:3b:16:f0:a2:cf:d2:5e:0f:29:49:dc:
80:29:94:db:7c:0b:46:f1:9c:8b:64:bf:5f:6a:09:
64:07:78:ce:7b:51:0b:49:99:9b:f3:14:6d:06:50:
08:dd:93:3e:fc:54:9a:96:5c:fe:43:82:64:11:dc:
67:b0:fd:a2:40:ec:19:48:6d:2c:1a:18:49:53:22:
9f:f6:30:10:8a:25:9b:12:d5:ae:cf:e1:a5:7d:a8:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:77:14:87:28:EA:AE:0B:FF:E3:20:FF:FB:A9:E6:9C:9F:C6:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3134342e302f32312d3234203d3e20323133343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.144.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:d2:4e:32:29:22:04:23:1f:8b:17:cd:18:25:ed:21:59:cd:
28:f0:ba:5d:35:bc:c3:8d:b1:7e:45:97:f2:b7:a5:5e:bd:6a:
62:66:38:bf:6c:8f:be:60:d0:9a:3b:a8:53:dc:06:9c:ca:33:
05:e8:69:b8:52:1a:7b:36:8f:77:8b:51:99:c3:e0:f4:c6:3c:
3e:8b:c2:6e:ac:2a:29:9a:72:5a:1b:ce:35:55:4f:92:4d:9d:
01:3d:c4:26:4a:19:57:21:2e:4d:a3:26:46:99:1a:c9:e3:86:
bc:b3:68:a4:af:dc:51:e7:95:40:21:b2:76:e2:81:38:4a:cb:
07:ca:e1:6e:b8:67:ea:c0:f8:00:06:d6:46:31:fd:91:e4:d5:
c6:35:ec:8d:6b:cc:fe:7a:0d:75:ee:9c:1c:d1:dd:45:0f:e7:
69:1a:01:98:da:ca:47:37:0d:45:f6:41:92:0d:fa:7d:0c:63:
72:92:d9:b4:85:37:ad:1a:b8:13:bb:d2:02:7a:7d:81:34:e3:
23:40:46:09:f7:ec:42:24:c6:b3:a6:f4:76:ce:22:6e:6e:38:
ad:17:0f:34:30:42:45:9d:d8:2b:bd:8a:de:81:6b:a8:51:08:
c5:34:b2:f7:67:38:54:0f:a6:eb:44:ef:aa:2a:01:b5:d8:13:
d8:f5:f9:6c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMxCYG3uJBG3koQ+5xo/E5E+ZV3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMjQwOTIwMDZaFw0yNjEwMjMwOTI1MDZaMDMxMTAvBgNV
BAMTKDMwN0I3NzE0ODcyOEVBQUUwQkZGRTMyMEZGRkJBOUU2OUM5RkM2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FKldKdmbUnfn097epag6mtLP
v5PVU6fCHz6WXuJHQtLaTDPOJ3xBCTyoPmSdjk7LxLahu+X/r3tQ9ve7kCDM1/4z
7B6qn8WMlrLVSzkVnwr2XXUYmDOuhHXToKf6sQXPO3btH1fOclipjDoJlfcUf3rw
zoORiLcm1u9y6eqhiBh6Im90d4tpCmx91BkNGPmX+onVYz6MgWpoXWb7+VGW5H1S
dvkNZUw7FvCiz9JeDylJ3IAplNt8C0bxnItkv19qCWQHeM57UQtJmZvzFG0GUAjd
kz78VJqWXP5DgmQR3Gew/aJA7BlIbSwaGElTIp/2MBCKJZsS1a7P4aV9qAAlAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUMHt3FIco6q4L/+Mg//up5pyfxmAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzYyZTMx
MzQzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzEzMzM0MzkzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9nYkDANBgkqhkiG9w0BAQsFAAOCAQEAStJOMikiBCMfixfNGCXtIVnNKPC6
XTW8w42xfkWX8relXr1qYmY4v2yPvmDQmjuoU9wGnMozBehpuFIaezaPd4tRmcPg
9MY8PovCbqwqKZpyWhvONVVPkk2dAT3EJkoZVyEuTaMmRpkayeOGvLNopK/cUeeV
QCGyduKBOErLB8rhbrhn6sD4AAbWRjH9keTVxjXsjWvM/noNde6cHNHdRQ/naRoB
mNrKRzcNRfZBkg36fQxjcpLZtIU3rRq4E7vSAnp9gTTjI0BGCffsQiTGs6b0ds4i
bm44rRcPNDBCRZ3YK72K3oFrqFEIxTSy92c4VA+m60TvqioBtdgT2PX5bA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:17 2025 by rpki-client