Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: MP1M12idVktuJ2XTevb1d9Zpj6n+GFLIsAkgqii7DG8=
Subject key identifier: F9:96:01:BC:86:33:7D:6D:2F:E4:32:F7:C9:D7:A0:60:E0:28:71:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D885AA7520F4B6EE08569CB5E99FAC325C7A99B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:15 +0000
ROA not before: Sun 30 Aug 2026 21:23:15 +0000
ROA not after: Sun 29 Aug 2027 21:28:15 +0000
asID: 136787
IP address blocks: 155.133.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:88:5a:a7:52:0f:4b:6e:e0:85:69:cb:5e:99:fa:c3:25:c7:a9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:15 2026 GMT
Not After : Aug 29 21:28:15 2027 GMT
Subject: CN=F99601BC86337D6D2FE432F7C9D7A060E02871A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:1a:fa:ea:4b:4b:16:e7:0a:49:c8:bb:e7:
29:5a:56:b2:bf:46:53:f6:52:d4:80:36:7d:35:69:
ff:94:7f:0f:a5:fa:9f:49:d9:64:51:46:8d:9d:43:
04:cc:01:81:4d:0d:3b:ae:63:b2:38:67:06:fe:6e:
de:6e:eb:57:80:c1:d4:db:3d:79:b2:44:a7:c0:84:
c4:41:ce:41:08:b4:6a:62:a0:79:fc:2c:28:83:2d:
ed:98:ef:2d:8f:81:3b:4b:5d:3b:41:cd:85:fa:34:
ad:84:87:5f:14:f8:aa:3d:29:cf:3a:95:dc:af:68:
58:62:f7:96:8c:60:a3:21:e3:a1:fa:18:fd:0c:15:
55:3f:82:62:54:0a:00:13:8b:d9:2b:fd:79:f1:72:
07:3a:ca:dc:0e:26:f7:09:98:55:eb:2a:a0:08:09:
99:a9:18:b4:50:4c:30:d1:b0:3b:95:4f:97:c9:05:
ba:c1:9a:a3:ff:e5:27:7f:e3:e8:db:95:67:14:c5:
8b:59:6a:4d:d2:d6:9e:83:42:63:82:d0:60:cd:d1:
1c:05:6f:fa:da:b0:59:2c:7b:f6:33:35:5a:f5:51:
bd:ce:da:18:de:25:c0:ec:67:64:0f:19:4b:d0:78:
7d:a6:29:8b:39:3a:c9:70:21:b6:d8:7a:e2:2e:a9:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:01:BC:86:33:7D:6D:2F:E4:32:F7:C9:D7:A0:60:E0:28:71:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.16.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3b:62:aa:97:86:19:a7:56:82:a0:21:60:30:1c:af:15:a2:
91:e9:79:9a:be:a5:7d:3b:b2:b0:06:24:d9:d3:8e:9f:a4:c9:
b8:c4:c3:7d:54:03:21:de:fd:a5:e2:ff:e3:d4:26:37:f8:ac:
a9:47:21:71:b0:53:1d:21:92:64:d3:89:28:81:72:b8:38:99:
ac:be:6f:21:8a:88:a2:72:1e:42:59:a4:35:ad:02:65:23:f5:
3b:70:b8:20:29:f6:a4:76:00:5d:fb:80:c9:3c:c4:0e:3b:8d:
e3:79:1a:c3:da:c2:c9:62:90:d9:f0:2f:ad:b2:42:05:41:8e:
df:ed:90:c9:c0:d0:bc:f5:2c:3a:cf:6c:5a:1b:89:a3:a3:66:
47:0d:c9:f5:7a:65:6c:0a:4c:1e:7f:a3:df:2c:c3:ce:66:0e:
0b:16:63:ba:50:45:23:24:7b:f5:4c:a2:90:30:a1:04:31:6b:
d2:22:50:b3:1d:53:10:a7:2b:99:13:44:a3:fb:e3:26:c7:5a:
44:e7:5e:96:05:a0:e4:ba:20:bd:00:75:59:ad:9d:2e:78:63:
4f:e6:b4:d3:de:58:4c:f4:8a:86:e1:06:a9:df:66:28:d4:3e:
c0:87:ff:2f:48:6a:9e:fa:fe:6c:3c:7c:2d:dc:9f:28:91:80:
34:c1:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:13 2026 by rpki-client