Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e203631323534.roa
File: 3231372e3231372e3234322e302f32342d3234203d3e203631323534.roa (raw, json)
Hash identifier: enRcO5bE1pXmq/P5TfqnyM8Lr7woDPpDFgqm8b4PEj8=
Subject key identifier: AF:38:F5:28:A8:1D:36:E4:0B:37:7A:E7:C6:05:3F:43:76:E9:22:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 489FD322479026A834A3A5358A13DB5E4862EAC5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e203631323534.roa
Signing time: Sat 09 Aug 2025 07:03:44 +0000
ROA not before: Sat 09 Aug 2025 06:58:44 +0000
ROA not after: Sat 08 Aug 2026 07:03:44 +0000
asID: 61254
IP address blocks: 217.217.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 07:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9f:d3:22:47:90:26:a8:34:a3:a5:35:8a:13:db:5e:48:62:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 9 06:58:44 2025 GMT
Not After : Aug 8 07:03:44 2026 GMT
Subject: CN=AF38F528A81D36E40B377AE7C6053F4376E922BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:dd:4c:4e:6d:75:36:65:d5:3e:e8:aa:04:
ed:54:f9:20:91:77:83:44:68:3e:1d:23:d6:56:18:
03:31:5c:fe:de:19:54:ab:aa:a6:8d:95:2b:7c:58:
dc:2e:e0:f1:43:ce:dc:b9:fa:ee:8f:b6:bc:37:ad:
e7:98:78:0d:86:e1:12:c9:b9:14:4b:4a:3a:d5:8f:
3b:e0:e6:02:c2:cc:7b:31:72:e6:6c:9d:b6:c0:1b:
d9:0c:2e:b2:b7:40:69:c3:ab:25:0c:2f:b0:97:46:
e4:e6:3e:b4:3d:8b:c5:65:91:ca:49:b5:50:79:0e:
7e:e4:b6:79:d1:5d:d3:8c:24:b2:a6:56:47:ef:f9:
1a:ff:72:f4:58:ed:0f:85:a3:1a:77:a7:6e:eb:f0:
e3:42:df:04:10:25:79:54:53:65:cd:22:a8:3c:ac:
df:f8:95:0b:9a:e8:94:38:9e:0a:77:95:9f:00:65:
be:f9:2d:08:68:d1:e7:4e:9d:c5:22:05:6e:0c:f5:
8b:a5:a3:0f:f5:46:0d:80:57:58:3f:81:4e:f0:08:
b5:67:57:67:b0:18:4a:ca:97:00:81:52:21:f6:60:
0a:ea:f1:39:c4:40:c8:09:10:92:ec:64:c3:99:89:
65:26:2b:90:04:22:36:f0:14:08:7c:77:f9:3e:13:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:F5:28:A8:1D:36:E4:0B:37:7A:E7:C6:05:3F:43:76:E9:22:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3231372e3234322e302f32342d3234203d3e203631323534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.217.242.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f9:36:5d:4e:ee:13:13:2f:97:aa:75:3a:47:57:ea:e9:1b:
fc:1f:00:ab:77:2c:ff:aa:44:d6:57:c9:38:d2:af:ad:78:06:
4e:a2:f8:71:66:bc:d3:00:2c:26:61:c1:49:f2:a9:93:45:87:
b0:70:3a:6f:02:11:7d:9c:4a:5e:d5:36:fd:20:6a:85:c6:4c:
7e:62:ed:11:f9:08:80:08:f6:a4:d7:2b:57:cb:1e:ac:1c:c5:
a1:26:81:c1:b1:48:a0:21:69:d8:ef:7b:0a:8a:ba:c6:7e:1c:
40:3d:47:d8:66:a3:6d:de:cf:91:19:9c:33:fa:38:ff:32:61:
d0:31:cb:9b:75:b7:bd:57:2e:bb:0f:c2:6d:00:05:78:74:11:
2b:ea:2b:e4:bb:10:0e:38:bb:7f:fb:af:dd:1f:8c:d3:7e:a9:
78:a3:57:a0:6e:9e:b4:31:1d:cc:4e:0e:45:2a:4f:ae:40:80:
81:ab:f6:96:2a:d8:c1:19:93:54:4c:3b:c5:34:bc:eb:a3:0d:
37:b0:0d:8e:be:1f:4f:d7:0f:65:17:3b:3c:98:d1:61:3a:58:
f5:72:dc:4e:d8:1a:ba:4a:cc:84:f6:e6:22:85:a0:58:a7:b8:
c4:83:06:b4:01:86:f8:0c:64:72:f1:6d:2b:7e:65:a9:ba:bc:
40:11:b3:d3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSJ/TIkeQJqg0o6U1ihPbXkhi6sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MDkwNjU4NDRaFw0yNjA4MDgwNzAzNDRaMDMxMTAvBgNV
BAMTKEFGMzhGNTI4QTgxRDM2RTQwQjM3N0FFN0M2MDUzRjQzNzZFOTIyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4N91MTm11NmXVPuiqBO1U+SCR
d4NEaD4dI9ZWGAMxXP7eGVSrqqaNlSt8WNwu4PFDzty5+u6Ptrw3reeYeA2G4RLJ
uRRLSjrVjzvg5gLCzHsxcuZsnbbAG9kMLrK3QGnDqyUML7CXRuTmPrQ9i8VlkcpJ
tVB5Dn7ktnnRXdOMJLKmVkfv+Rr/cvRY7Q+Foxp3p27r8ONC3wQQJXlUU2XNIqg8
rN/4lQua6JQ4ngp3lZ8AZb75LQho0edOncUiBW4M9Yulow/1Rg2AV1g/gU7wCLVn
V2ewGErKlwCBUiH2YArq8TnEQMgJEJLsZMOZiWUmK5AEIjbwFAh8d/k+E1NJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUrzj1KKgdNuQLN3rnxgU/Q3bpIr8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMzcyZTMy
MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMjM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADZ2fIwDQYJKoZIhvcNAQELBQADggEBAJf5Nl1O7hMTL5eqdTpHV+rpG/wfAKt3
LP+qRNZXyTjSr614Bk6i+HFmvNMALCZhwUnyqZNFh7BwOm8CEX2cSl7VNv0gaoXG
TH5i7RH5CIAI9qTXK1fLHqwcxaEmgcGxSKAhadjvewqKusZ+HEA9R9hmo23ez5EZ
nDP6OP8yYdAxy5t1t71XLrsPwm0ABXh0ESvqK+S7EA44u3/7r90fjNN+qXijV6Bu
nrQxHcxODkUqT65AgIGr9pYq2MEZk1RMO8U0vOujDTewDY6+H0/XD2UXOzyY0WE6
WPVy3E7YGrpKzIT25iKFoFinuMSDBrQBhvgMZHLxbSt+Zam6vEARs9M=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:12 2025 by rpki-client