Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
File: 3135332e39322e3132362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: /xxtygT/bv+GjHb+fwhz210ReyPaLLnY575A/VuRElA=
Subject key identifier: E3:C4:9A:6B:EC:C5:6D:D6:8A:E5:7D:69:5F:5C:3D:CC:4D:39:AE:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12CB347EF6569B564B4984FD9A4BC4E4231D7568
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
Signing time: Thu 28 May 2026 13:24:38 +0000
ROA not before: Thu 28 May 2026 13:19:38 +0000
ROA not after: Thu 27 May 2027 13:24:38 +0000
asID: 63473
IP address blocks: 153.92.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cb:34:7e:f6:56:9b:56:4b:49:84:fd:9a:4b:c4:e4:23:1d:75:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 13:19:38 2026 GMT
Not After : May 27 13:24:38 2027 GMT
Subject: CN=E3C49A6BECC56DD68AE57D695F5C3DCC4D39AE70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:e9:2d:e3:f9:17:89:db:1d:96:d2:89:09:
b0:c3:7b:1c:37:fd:85:e6:48:6f:47:f2:4f:d6:ab:
dd:f0:c9:e6:f4:7e:84:04:b6:24:3f:e2:25:79:4c:
96:a9:2a:90:ad:5d:80:3e:27:bc:81:da:91:4f:4a:
c3:f5:ca:a0:0f:26:9d:81:82:6d:ee:de:ac:56:09:
fe:f2:b4:cb:f9:2c:40:8f:23:49:8a:92:b2:c7:67:
08:07:8c:f3:a4:84:27:11:60:a2:cd:45:95:16:9b:
08:74:19:c2:7a:50:f5:0d:54:1f:2d:b3:89:c3:6d:
43:b4:7e:19:65:76:56:f6:67:08:21:53:d4:ff:6a:
95:33:9c:4a:88:2b:bf:ba:40:d3:e6:44:df:a0:5c:
9f:ea:63:2a:c4:3f:70:7b:0f:4c:2b:a7:6a:e0:2d:
3e:73:fe:66:91:94:16:12:d2:61:e7:29:5b:87:7e:
ac:48:1c:88:08:6c:bd:3a:f8:83:6f:d9:d1:52:99:
ed:61:7c:e3:c3:aa:fd:ff:20:7c:4a:fa:d7:fa:62:
e6:d9:db:94:30:1c:2e:d0:b3:41:75:9f:97:51:d0:
89:75:37:b3:8b:b1:10:d9:63:2f:5b:96:69:b9:b3:
a9:56:d6:aa:b4:fb:be:9c:63:64:90:22:7e:eb:39:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:9A:6B:EC:C5:6D:D6:8A:E5:7D:69:5F:5C:3D:CC:4D:39:AE:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.126.0/24
Signature Algorithm: sha256WithRSAEncryption
89:bc:10:87:b5:9b:f3:44:6b:ef:cd:bf:f5:25:16:85:09:c4:
4e:79:f7:1d:3d:d4:97:ee:f6:02:1f:d5:e9:5b:b7:f3:0e:f2:
92:a0:f5:e2:cd:a5:3d:f9:9d:65:b4:ad:d5:21:fe:ca:ab:0b:
6d:e1:1b:5b:02:fd:5e:4d:44:12:e1:9b:86:78:be:95:a9:f1:
7b:c4:10:3c:0f:d3:10:11:7c:13:64:42:5d:52:7c:75:38:93:
ce:5d:a6:51:a6:0d:bb:3d:57:eb:c8:b6:9a:00:cc:da:d1:6b:
62:06:13:50:a9:4e:dc:14:b2:fc:9c:d7:14:e8:3c:81:a3:64:
78:d2:1b:44:7e:36:38:13:d8:85:c1:60:d4:84:d1:15:56:70:
2b:23:a5:65:33:d5:1d:3c:d3:10:e3:20:c6:09:ac:d6:5d:4a:
73:a1:ee:fb:a0:95:85:02:c7:17:de:75:7b:ef:5f:b3:36:76:
d6:e8:99:01:a7:0b:1f:ea:98:17:e8:db:82:0e:13:1f:43:87:
b7:15:0c:83:37:a1:2c:b7:9f:1d:35:6c:ba:85:40:ee:72:42:
41:ed:9d:5a:1c:0c:f5:97:3c:13:63:48:66:28:6d:fc:cc:7b:
9e:7b:3b:2f:39:14:e3:6b:61:e9:2d:42:74:a9:7f:f7:80:4c:
1a:d0:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:18:21 2026 by rpki-client