Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa
File: 3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: MrIwLUKmYMXGmHBgStRATsE66WJP3WWhFBdcy9Rd+Rg=
Subject key identifier: CA:8D:7F:54:75:DB:90:88:A0:77:8D:EC:76:FC:41:AD:B5:3A:F1:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 768FBDA5F214323EC8E82882C11F27AB6E9A93E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:20 +0000
ROA not before: Thu 30 Jul 2026 09:22:20 +0000
ROA not after: Thu 29 Jul 2027 09:27:20 +0000
asID: 212238
IP address blocks: 155.133.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8f:bd:a5:f2:14:32:3e:c8:e8:28:82:c1:1f:27:ab:6e:9a:93:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:20 2026 GMT
Not After : Jul 29 09:27:20 2027 GMT
Subject: CN=CA8D7F5475DB9088A0778DEC76FC41ADB53AF180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:8a:97:80:ee:ad:e6:5d:9d:fc:23:b3:eb:
37:c7:ac:e7:ae:56:31:f8:a9:7b:19:7c:cd:d6:54:
63:e2:a6:79:c9:36:c7:6e:5f:39:09:77:9f:5a:39:
90:cf:57:56:d1:eb:27:56:4e:44:f2:2e:de:a8:b3:
94:ee:e0:83:fa:79:fc:ac:ed:37:4a:67:89:38:f2:
df:29:70:62:f9:70:f0:22:fd:5c:fc:b6:31:df:6e:
4d:e9:92:57:63:f5:cb:83:6d:12:db:18:5f:d1:c3:
18:b4:57:d4:9f:56:7a:01:c1:fd:75:0e:67:8e:0e:
4e:e7:83:1c:77:3e:01:ce:74:57:ab:b1:68:45:40:
39:dc:dd:2d:dc:53:cb:86:f2:4b:5e:b0:45:64:38:
97:6d:48:41:34:32:15:83:40:b9:23:e4:c2:82:da:
19:47:60:90:c3:af:81:92:5e:f9:13:33:35:ef:23:
d1:77:97:22:16:52:2b:1d:8e:b0:51:c5:e5:a0:6d:
15:78:8b:5c:6b:86:98:81:12:fd:11:0a:b9:02:9e:
97:87:ef:f2:73:03:dc:ed:86:e1:57:85:cd:54:00:
7b:6e:c2:84:70:9a:9f:4c:9b:fb:7b:6d:9c:da:24:
ed:4e:3b:ad:99:46:32:8d:a7:53:3a:05:11:a1:88:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8D:7F:54:75:DB:90:88:A0:77:8D:EC:76:FC:41:AD:B5:3A:F1:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.15.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f7:95:90:90:12:00:02:04:da:cd:80:c5:71:fb:a6:85:30:
ed:30:10:1d:23:1e:86:6c:fb:01:00:43:24:4b:c7:2a:83:4b:
4f:e6:71:f7:45:b1:48:e4:a5:e6:c8:e2:8e:38:fd:dd:f8:eb:
12:81:dd:e8:39:c3:15:97:15:cb:92:eb:30:9a:d6:1c:52:d4:
f9:6f:a2:7c:40:ab:5a:03:49:74:c4:62:07:60:ff:3c:b1:75:
9b:2b:49:4f:ed:c0:b0:2d:76:e8:0e:2a:eb:e9:a2:bb:a4:9e:
55:a7:c4:e6:ac:94:86:78:88:d4:f3:94:05:5e:9f:5a:77:f9:
bb:36:4d:84:fc:65:b6:a4:9f:e2:56:1a:d3:58:9a:dd:c6:99:
96:e6:bc:81:18:bc:e1:47:16:f9:27:6f:47:da:7e:f8:bd:20:
10:e6:df:d9:3d:e6:51:34:bd:8a:9b:98:3f:ac:35:db:49:ba:
0d:75:73:d5:fb:ef:b6:b7:24:2f:5d:aa:dc:78:53:49:30:5c:
91:44:05:b3:b8:d4:5e:04:07:f4:3a:95:5e:53:fc:84:4b:ac:
f5:87:be:be:ca:5c:41:0c:74:12:20:28:7f:df:ce:23:4f:a6:
30:fd:6e:d6:dc:fc:2c:a4:a8:45:f5:b4:79:0b:00:b5:40:64:
f3:2c:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:42:27 2026 by rpki-client