Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37342e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e37342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6IqatthHlgDfMwxYt5EfzdLPEYw80LdM1o3Dlw5LIcg=
Subject key identifier: 0D:FB:D4:4A:EE:34:8B:23:C6:15:52:93:08:67:61:C3:C4:0F:20:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7728CCED87F9293A4133AC3CAC3D5AA882DB3AD9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37342e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:22 +0000
ROA not before: Sun 30 Aug 2026 21:23:22 +0000
ROA not after: Sun 29 Aug 2027 21:28:22 +0000
asID: 136787
IP address blocks: 155.133.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:28:cc:ed:87:f9:29:3a:41:33:ac:3c:ac:3d:5a:a8:82:db:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:22 2026 GMT
Not After : Aug 29 21:28:22 2027 GMT
Subject: CN=0DFBD44AEE348B23C6155293086761C3C40F2014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:e5:73:5c:84:90:03:00:0a:7c:66:75:ce:
89:c9:67:3c:63:65:14:d2:c9:87:65:b8:de:73:e0:
90:98:89:db:ea:d7:b7:7b:5a:86:01:ad:5b:b2:75:
1e:08:8a:ab:8e:dd:ae:fb:85:10:67:99:2f:50:9b:
2e:22:54:ca:ed:2f:7e:14:51:52:aa:88:f4:0d:f7:
ed:ea:84:b5:64:03:75:e3:57:41:53:f1:4d:91:2a:
ce:15:06:67:43:50:ff:46:aa:73:32:0c:2d:ef:a5:
e1:8e:09:0e:a3:b7:1d:8c:8e:60:cf:f9:ee:7c:5d:
ac:bf:88:b2:69:4b:cf:a2:c1:8d:27:21:7a:ba:c9:
04:75:5b:f4:af:d5:a6:3c:ac:9f:20:82:3c:a9:79:
3c:14:78:0f:fe:eb:1d:2c:55:18:04:92:17:8c:3f:
02:7d:23:39:bb:c7:08:fc:83:91:59:bc:7b:3e:8d:
96:dd:77:6e:36:a6:67:b0:b1:5f:01:94:32:8d:6d:
74:92:60:de:d7:4e:0d:97:f1:e4:a3:00:c4:1b:f5:
22:8c:d4:3d:7b:98:ff:62:a2:83:93:4a:8a:6e:87:
57:39:97:a9:e2:04:04:73:38:42:c9:3d:b5:fa:c3:
22:72:2f:50:30:42:00:9e:70:d3:c0:3f:b3:41:91:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:D4:4A:EE:34:8B:23:C6:15:52:93:08:67:61:C3:C4:0F:20:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4a:69:01:78:5b:53:7e:c8:74:05:5d:56:a9:22:91:f2:2a:
3f:f6:74:91:59:10:91:dc:1a:28:03:ed:77:c7:fd:4a:4e:9c:
7f:21:ee:41:38:53:b4:40:e4:82:2f:1d:50:fc:e3:84:fe:15:
17:86:a8:c7:c0:c6:65:3d:c3:34:1c:23:98:09:ac:14:08:c1:
d1:4e:fd:8e:3c:f5:75:60:e2:0a:a4:b0:d5:6a:1b:44:3c:bc:
b3:b8:27:d7:65:a2:28:c9:59:62:c2:f4:b7:5d:46:5d:f0:6b:
a0:5f:d9:25:36:c8:80:49:35:33:bf:33:f9:2f:eb:13:4a:22:
8c:bf:b4:93:c0:cd:da:98:3c:32:57:19:1d:bd:6b:dc:5d:d4:
79:ab:01:7a:1a:93:ca:a3:90:e5:aa:49:5f:41:77:46:6a:bb:
93:8b:17:da:98:0b:0e:d5:bc:cc:76:d7:7c:b6:a5:a7:85:8e:
89:0d:94:4c:64:37:5b:e8:3f:ea:24:8e:8f:4f:4c:e0:79:2e:
87:4a:61:68:99:3e:32:d1:88:55:1d:99:f2:b0:7b:ad:f1:9f:
2f:45:ab:b0:75:40:ff:17:62:2e:1b:0d:41:55:9e:02:bc:28:
cf:82:e4:41:04:77:d5:1a:89:ab:10:cb:93:04:98:80:32:75:
24:76:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:09:28 2026 by rpki-client