Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32312d3234203d3e20323133343935.roa
File: 3231372e3231362e3230302e302f32312d3234203d3e20323133343935.roa (raw, json)
Hash identifier: hjeIaMycNigRBQh4+1Mb649cS5tLKJf6duCLee5LQGc=
Subject key identifier: E4:2B:91:33:D7:44:C0:FF:98:F3:E4:06:90:A5:BF:E4:BE:70:A9:3A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2030AC665421676DD8186450F3EAEAB96B12F3CE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32312d3234203d3e20323133343935.roa
Signing time: Sun 02 Nov 2025 13:30:58 +0000
ROA not before: Sun 02 Nov 2025 13:25:58 +0000
ROA not after: Sun 01 Nov 2026 13:30:58 +0000
asID: 213495
IP address blocks: 217.216.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:30:ac:66:54:21:67:6d:d8:18:64:50:f3:ea:ea:b9:6b:12:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 2 13:25:58 2025 GMT
Not After : Nov 1 13:30:58 2026 GMT
Subject: CN=E42B9133D744C0FF98F3E40690A5BFE4BE70A93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:e0:b2:13:f8:fb:fe:b7:58:68:48:d2:a8:
3b:06:13:d3:95:22:c6:9f:cf:77:fa:22:8d:51:90:
cb:46:df:39:65:fd:0d:d7:ce:e1:94:b8:43:24:58:
c3:f1:a5:44:17:a8:b7:3f:19:43:c7:55:96:19:a3:
50:5b:1e:2a:f9:18:7f:8d:27:c8:27:ff:c9:67:57:
2f:3d:de:78:bd:07:03:f4:dd:66:23:6f:a0:90:3b:
2b:c3:29:47:03:d1:89:9d:65:d9:64:d1:93:e0:35:
8e:aa:41:a3:d8:f9:52:a6:f5:7b:6b:e6:7a:a7:6a:
4b:d3:5e:e3:02:ea:e9:a5:7b:14:60:9c:ca:86:1e:
c6:a9:d0:c3:96:26:a4:eb:67:83:b0:d5:c4:6e:41:
f3:3a:c4:a3:c7:7b:d4:9d:c0:aa:21:57:f8:f3:c9:
e9:76:8f:b8:9e:0b:37:c7:dc:72:62:32:e6:c5:fc:
bf:2e:62:e2:16:c7:28:39:17:c4:1b:f2:3d:15:76:
32:55:0c:38:de:5b:bb:08:27:8d:f5:9a:3f:19:45:
d7:7e:ba:86:5d:10:92:20:ae:09:15:04:9e:0e:b4:
2d:01:57:65:2c:24:f8:64:9e:96:a9:89:71:d4:a1:
03:e0:c4:df:b4:d2:55:a0:5d:b7:98:18:95:6d:3a:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:91:33:D7:44:C0:FF:98:F3:E4:06:90:A5:BF:E4:BE:70:A9:3A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231362e3230302e302f32312d3234203d3e20323133343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.216.200.0/21
Signature Algorithm: sha256WithRSAEncryption
82:4d:40:8f:47:4c:ae:a4:44:49:cb:db:31:18:76:00:98:ac:
bc:30:96:86:76:18:2d:54:6a:b1:d0:29:5d:a2:67:f2:17:f7:
5a:d3:98:32:49:c7:64:6c:27:73:46:95:da:9d:a6:8c:ca:2a:
14:bb:5c:05:87:85:8f:7e:84:74:85:a2:4c:8b:07:2b:81:21:
48:25:e8:4c:3a:db:9c:54:bf:eb:1a:0f:df:b1:c8:2e:e6:c1:
48:73:14:a0:8c:72:af:0d:06:27:5b:23:e4:99:34:cd:e3:85:
15:84:bb:e4:b8:5e:75:86:cf:32:d1:b9:01:63:aa:31:c6:22:
60:a5:12:23:41:97:b5:5a:28:d8:dd:8b:e7:dd:64:8e:d4:3b:
4d:6b:f2:60:23:d4:37:8a:9c:95:d3:f3:4c:6b:dc:8f:21:6f:
1a:a6:c3:12:95:20:a9:05:7d:0c:6b:be:3c:e6:b1:e0:70:be:
03:3c:3f:72:c4:4e:ea:6a:c8:a5:58:2c:4f:10:a8:2d:15:14:
86:47:27:b3:55:67:20:c5:a3:51:bc:5c:6c:26:89:19:3b:cb:
87:31:08:b1:ca:46:b3:99:1f:aa:ab:c8:79:9f:18:21:92:f7:
9a:9c:92:40:45:d3:a8:de:2b:b7:eb:9a:9b:4d:60:cb:b2:7c:
f1:b1:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:13 2025 by rpki-client