Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa
File: 3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 7aL3QcuUMP8Rgg3z0hdXwBilWNnNB5uT0H+em2+Wbz4=
Subject key identifier: 6E:81:EB:27:EB:6D:FE:2A:88:DD:89:70:4C:DB:6C:A3:54:79:17:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31D6E8AFC58F72748997651C763736D709CEB44C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:27 +0000
ROA not before: Thu 28 Aug 2025 08:46:27 +0000
ROA not after: Thu 27 Aug 2026 08:51:27 +0000
asID: 212238
IP address blocks: 155.133.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d6:e8:af:c5:8f:72:74:89:97:65:1c:76:37:36:d7:09:ce:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 08:46:27 2025 GMT
Not After : Aug 27 08:51:27 2026 GMT
Subject: CN=6E81EB27EB6DFE2A88DD89704CDB6CA3547917BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:68:24:55:c5:4b:37:a1:17:58:37:87:37:
66:c9:dd:43:ac:b5:de:df:b5:76:2a:6d:2e:92:dd:
95:df:15:1d:77:ca:a4:87:4d:01:24:10:4f:27:77:
d4:07:7d:a3:14:42:9d:17:a3:dc:97:e4:d8:03:b8:
39:87:58:9f:39:16:5a:82:bc:94:ca:35:58:99:d0:
03:2d:77:20:28:a6:2b:d7:9e:cf:fb:27:8e:a9:36:
a9:bb:c7:47:18:4a:65:e9:7b:a6:fd:77:9e:77:fc:
2b:27:54:3d:8b:ea:71:34:be:41:25:81:94:4e:c1:
ab:3f:60:69:ec:a3:01:a0:b4:ae:d0:ad:89:78:d8:
c3:3b:06:7e:88:be:f5:26:29:54:76:35:02:f2:e0:
f8:76:b4:71:83:83:f7:31:b2:60:2c:4f:ce:04:19:
f9:c7:55:6b:6d:79:52:b4:ab:19:8f:2b:e9:ca:ea:
d6:70:b5:10:56:81:0a:42:e2:1b:40:da:e5:b8:fe:
da:3d:3f:2e:99:21:e2:4a:92:bc:d9:0d:4a:a7:3c:
af:83:4e:8e:bb:1b:e6:eb:bc:d5:be:e7:41:11:d3:
b6:ee:dc:d8:5d:38:63:c3:18:cd:9b:f7:5b:1c:ab:
58:3d:72:a2:e4:45:77:70:40:5e:54:df:05:61:a2:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:EB:27:EB:6D:FE:2A:88:DD:89:70:4C:DB:6C:A3:54:79:17:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.15.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4b:84:3c:18:32:a4:73:ac:6b:c0:e0:48:2d:f1:6b:97:aa:
de:f9:50:35:67:b1:92:8d:5d:13:37:f6:21:c4:1c:53:7b:1b:
de:6a:42:a6:e4:ab:ea:f8:dd:d0:76:22:df:7c:46:be:07:e9:
23:40:5f:d8:3f:29:28:1c:70:51:dd:d0:09:e3:b0:91:82:d4:
a9:79:17:a3:68:cd:6b:52:50:9f:61:19:48:55:81:24:c9:ab:
0e:c4:11:1a:ca:9e:29:e8:0a:32:fa:0c:47:f2:c0:b7:2b:5c:
58:3d:78:ef:da:ee:6a:6a:ea:ac:7b:67:f3:df:61:6c:e0:ec:
00:d7:39:31:53:ff:cd:07:bc:54:55:aa:b2:a7:3c:60:1e:83:
67:b9:a1:72:a4:6d:db:42:1b:b4:ee:b0:22:b4:50:89:f6:eb:
2c:9f:99:44:d0:24:c5:d3:e3:19:ff:11:86:78:8a:21:63:33:
56:17:d6:e5:af:31:51:22:78:6b:27:f3:1c:82:ea:89:d2:72:
8a:62:73:f8:a6:a2:48:a1:26:34:f7:07:a3:86:85:c4:9f:77:
6a:43:22:5d:ab:13:e4:34:b5:c9:e9:4c:fd:75:23:c9:c5:91:
0b:35:c5:b1:a1:db:7a:a2:22:e3:25:86:4e:1f:51:f1:00:a2:
63:f4:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:55:32 2025 by rpki-client