Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36382e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e36382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Vx0PyjW3/yyGH548CyACmmdtA58JpSL/ZnfyneX7+Hc=
Subject key identifier: 82:D1:2C:56:2C:66:46:98:B0:46:AA:BE:23:84:D6:55:67:24:F0:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 789CEC5A48449A54A7D065BE43262E602C6567E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:22 +0000
ROA not before: Sun 30 Aug 2026 21:23:22 +0000
ROA not after: Sun 29 Aug 2027 21:28:22 +0000
asID: 136787
IP address blocks: 155.133.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9c:ec:5a:48:44:9a:54:a7:d0:65:be:43:26:2e:60:2c:65:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:22 2026 GMT
Not After : Aug 29 21:28:22 2027 GMT
Subject: CN=82D12C562C664698B046AABE2384D6556724F0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:66:31:f8:07:45:ec:70:81:6d:54:b4:89:
7a:3c:32:20:31:47:db:e6:76:75:6c:91:2e:61:45:
d9:36:4b:a2:3e:cc:22:4e:4e:a6:0c:30:bc:2d:74:
dc:96:83:9d:26:4d:82:df:60:1c:ba:9e:7f:8d:e8:
8d:7b:6e:2e:26:07:07:b7:99:13:1b:9e:58:89:bb:
5f:ad:32:ca:76:52:e8:28:fa:a3:09:cc:19:c7:ba:
bb:1f:2e:a9:c3:c4:ae:ca:22:54:1e:32:6e:46:90:
50:cf:f9:ab:28:41:08:f2:2d:fa:bc:36:2c:5e:ee:
3f:ed:61:7b:07:bb:35:98:a5:26:db:88:37:b9:11:
83:c3:19:87:a7:9d:9d:e1:5f:6d:2a:ae:67:56:a3:
5a:84:0e:b5:4e:6b:3e:0a:7f:90:bd:0c:e7:98:c1:
1f:bd:17:03:7e:4d:db:b9:e8:a1:e7:e4:41:84:68:
b8:45:cf:c3:55:66:ed:ba:30:31:c9:e7:bc:2b:94:
a7:73:d4:45:6a:4a:a2:9d:39:8c:b9:b5:bd:ee:d5:
3c:cc:95:c3:d6:a4:68:99:7b:6c:03:41:30:49:80:
ac:6d:52:da:72:24:9d:0c:d7:dd:8c:9e:45:c8:5d:
d4:e6:dd:03:52:ba:b8:bd:56:0e:78:61:c3:25:55:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:2C:56:2C:66:46:98:B0:46:AA:BE:23:84:D6:55:67:24:F0:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.68.0/24
Signature Algorithm: sha256WithRSAEncryption
91:85:86:ea:0f:85:5f:e6:c1:d1:30:16:f7:eb:88:d5:4e:c3:
e0:08:69:6d:36:3e:5f:c1:c8:bb:a7:88:42:4b:85:3b:97:4d:
d1:16:69:3f:20:a3:50:a8:5b:fc:0a:48:2e:20:4b:aa:85:a7:
31:db:d1:62:1a:e3:e9:99:0c:3e:91:f9:b6:34:1f:54:9b:08:
10:74:bb:e8:c1:8c:6e:fa:68:b2:6f:fe:7b:15:6a:32:a9:60:
ee:8e:45:4a:fb:68:51:8f:42:06:d9:be:74:ab:d1:b7:39:69:
95:29:24:b0:78:a3:95:79:ed:ef:ad:0d:1e:31:d2:19:4e:dc:
87:f1:59:f3:e7:57:47:57:8b:4d:c2:83:7b:96:ff:ca:c5:a1:
ed:fc:42:d3:55:d5:1d:b3:9d:d1:83:7b:08:07:23:06:52:2b:
a1:49:2e:72:0e:47:a1:c7:fe:6a:f8:29:55:94:a1:3e:41:0c:
98:a7:a2:6a:cf:73:60:d9:30:28:b2:52:5c:68:ff:0d:97:e7:
99:2b:2b:f0:0a:0e:c3:bc:0c:70:f9:cd:f9:4e:c2:58:e6:b8:
d4:bd:62:c8:f5:b4:c0:27:d4:58:1a:36:9c:ba:73:88:87:c9:
66:e9:cf:09:42:dd:37:86:43:a6:5e:d7:80:6d:3e:d8:93:58:
23:87:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:28:27 2026 by rpki-client