Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31372e302f32342d3234203d3e203632323430.roa
File: 3135352e3133332e31372e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: R3tZygGBlWRC42NC74DwCwvWAKjp/AWNN0TDoNDx03o=
Subject key identifier: 47:F9:AB:38:8E:62:03:7E:19:5B:7C:C7:B8:88:5E:5F:2B:FF:9C:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 71DC8122B2B6D77300147C48E6881EC573BC9F16
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31372e302f32342d3234203d3e203632323430.roa
Signing time: Tue 08 Sep 2026 10:28:38 +0000
ROA not before: Tue 08 Sep 2026 10:23:38 +0000
ROA not after: Tue 07 Sep 2027 10:28:38 +0000
asID: 62240
IP address blocks: 155.133.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dc:81:22:b2:b6:d7:73:00:14:7c:48:e6:88:1e:c5:73:bc:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 8 10:23:38 2026 GMT
Not After : Sep 7 10:28:38 2027 GMT
Subject: CN=47F9AB388E62037E195B7CC7B8885E5F2BFF9CA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:88:69:96:dd:69:bb:5f:1f:40:05:3a:e6:
2b:91:26:86:b6:ed:22:f4:44:79:df:f4:21:86:51:
33:4f:86:2f:21:fc:a4:73:ac:49:78:ec:4c:d0:9d:
fa:de:5a:1f:2c:f3:79:00:d7:30:a0:74:68:04:74:
0a:f5:c3:ac:60:de:1a:bd:45:a5:19:22:7e:63:78:
69:14:b5:2e:29:80:d2:96:2c:47:77:b5:6a:2d:95:
81:b8:6c:25:f2:34:88:07:e6:f4:0d:d0:04:b2:d2:
22:2c:ce:af:be:5d:0c:55:08:46:c6:d7:c9:dd:15:
0f:70:43:ee:23:15:c9:00:0b:fc:3d:a4:c8:fc:a8:
3e:a0:04:b4:22:18:33:38:4a:8d:46:f3:74:5f:19:
fa:b0:0b:95:d5:43:9c:12:35:ba:0e:39:d8:4f:02:
07:4b:a6:38:07:65:83:fd:b3:5f:a4:be:b4:e3:5f:
76:79:63:52:87:1e:82:0d:52:91:3f:d8:3f:11:a5:
65:6e:c1:e9:a0:e0:3a:61:ed:dd:d0:06:0b:d7:16:
97:13:ce:f2:04:d0:2d:3f:76:27:79:6a:3c:53:11:
a9:ed:4b:44:f8:17:74:a3:bf:de:ed:c4:ba:f0:a2:
a6:fc:36:95:0a:c7:b4:61:17:26:0d:ea:92:3f:16:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:AB:38:8E:62:03:7E:19:5B:7C:C7:B8:88:5E:5F:2B:FF:9C:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31372e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.17.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:c2:5a:8c:df:26:6d:7f:d7:42:8a:c2:ad:9c:18:27:7a:
8a:44:32:13:92:1a:bd:95:7f:15:48:a7:34:4f:52:f7:49:46:
97:bf:3c:ae:32:ba:ab:eb:7a:b3:4b:e9:3c:22:0d:a8:b4:3e:
0a:b4:70:16:91:16:e7:24:39:e9:33:66:a8:28:8f:c8:b2:b0:
49:c9:0c:5d:f1:a0:6b:bb:d2:69:66:b4:45:92:92:ec:9d:ff:
d2:62:57:53:dd:63:e6:8d:52:d9:df:f8:da:c8:6b:1e:12:92:
be:5b:fc:5c:66:05:c2:9e:32:bd:39:90:b1:59:3f:d8:db:e1:
21:8f:e9:ee:a9:05:f9:70:72:6a:32:62:ca:e6:bd:e6:0e:6b:
82:a3:e9:a2:23:26:96:ee:e7:6a:e9:84:f5:2f:ab:58:3c:fe:
ff:46:d9:04:0f:ed:f0:e8:86:a4:8b:67:41:a6:e1:2a:b7:ce:
2c:54:6a:a7:11:7f:1c:bd:98:ad:26:72:1c:6e:9f:c0:5e:da:
49:e2:6c:cb:fb:7a:de:41:3b:67:62:34:37:6e:af:fe:60:40:
54:95:5e:22:96:10:4e:25:eb:0f:51:5d:82:27:cb:be:22:ae:
89:d4:77:e1:25:de:3c:4f:9a:d3:b7:b0:0b:10:5f:df:fe:27:
fc:3f:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:44:45 2026 by rpki-client