Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36362e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e36362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5W3FQgMXiCyIpBpcwEqN/6jUzmdRxptQAO2Y6r/3oPs=
Subject key identifier: E1:B3:99:B5:7F:EC:E1:18:EE:67:27:68:B7:D1:1B:8A:6A:E2:9E:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B4B045318AE0956F147775354DB9282BE06DCD9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:19 +0000
ROA not before: Sun 30 Aug 2026 21:23:19 +0000
ROA not after: Sun 29 Aug 2027 21:28:19 +0000
asID: 136787
IP address blocks: 155.133.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4b:04:53:18:ae:09:56:f1:47:77:53:54:db:92:82:be:06:dc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:19 2026 GMT
Not After : Aug 29 21:28:19 2027 GMT
Subject: CN=E1B399B57FECE118EE672768B7D11B8A6AE29ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:c5:93:d1:25:f5:16:94:36:56:62:f6:18:
72:47:68:ba:f9:1d:8b:d7:33:76:38:b7:2a:c0:d3:
18:21:5e:22:88:c1:8a:37:59:5e:6f:6d:55:23:bc:
11:93:47:9a:2e:77:40:46:64:98:d5:2b:47:61:c5:
19:50:71:a6:c0:37:33:0f:02:9a:1c:51:5e:67:59:
d4:92:7a:74:60:f1:85:9e:2d:05:37:61:2a:39:ba:
a0:4f:99:c7:29:16:a9:5e:27:02:0c:14:b3:f2:55:
6b:52:ce:df:80:a4:f9:2b:95:73:49:e0:23:c6:f4:
9a:b9:49:f3:5b:21:bf:a3:a1:36:22:7b:e6:f3:82:
b4:d1:13:cf:49:85:f3:12:7d:f2:5a:c4:77:18:76:
2c:cf:f6:8b:aa:08:42:a5:16:e4:4a:5a:d4:87:41:
4f:e5:49:39:ec:ec:b5:f3:ba:0f:2c:e6:9e:71:be:
3a:8b:e2:b4:5d:d3:7c:61:12:69:d2:17:87:a9:96:
8f:52:4d:3d:98:44:1b:c5:6d:f9:e4:cc:c0:19:c9:
f1:6e:81:f5:c4:d0:53:60:35:5f:dd:bc:91:e6:c0:
3f:49:02:83:a8:2d:e5:fe:1a:b7:ef:21:6d:23:bd:
af:36:29:f0:a8:db:7e:b2:88:55:bb:04:7c:57:aa:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B3:99:B5:7F:EC:E1:18:EE:67:27:68:B7:D1:1B:8A:6A:E2:9E:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f2:2e:63:cd:68:43:5a:b9:8a:47:ef:3f:81:e6:9c:a4:5f:
45:6f:54:6d:7b:f0:1d:4a:32:1b:a4:aa:9c:cb:86:67:f0:c8:
f9:d9:4a:4a:fa:89:88:6c:b5:3a:cd:0c:d4:09:93:69:10:e3:
8c:6b:76:d4:c0:e5:b2:82:bb:a6:72:51:04:7d:4b:ce:a5:82:
42:f0:88:5a:6c:df:f4:25:35:b2:4d:c9:c6:55:55:8a:de:36:
ce:6f:4f:35:de:51:bd:1f:cd:00:f3:91:ff:50:e0:77:31:ed:
76:40:9c:93:a9:ff:99:e2:9f:44:01:75:83:08:79:2c:10:0c:
57:d4:76:a5:ee:7b:bc:93:df:47:0d:91:14:29:c4:03:5a:d9:
58:54:15:de:6f:a9:ac:4a:31:7f:c3:1b:30:cf:db:7a:2b:9e:
0a:cc:d6:31:ea:5e:41:49:a3:55:38:41:9b:fd:2c:e8:c7:e5:
57:6d:6d:d7:cb:93:3d:e1:3d:57:dd:6d:06:c9:69:87:53:f7:
39:53:2b:1a:e1:99:e4:04:73:dd:05:0e:53:67:c1:71:e4:ce:
51:8f:be:29:b5:c0:a3:c6:45:e3:3f:ac:73:94:4c:10:2b:34:
9a:27:1c:f8:36:33:16:3e:19:50:fe:36:55:ef:3d:cf:59:31:
68:aa:26:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:23 2026 by rpki-client