Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ls9ZrcMP9klkdj9GsdGNItBYz1bnB1wi7LswFxt5X9U=
Subject key identifier: BF:5B:D0:5E:00:75:25:8E:D9:D7:B4:E6:E2:2D:24:32:02:B0:B2:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 65D7FEF7724B77FCC3B69CF4D49B2CD5534A281E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:24 +0000
ROA not before: Sun 30 Aug 2026 21:23:24 +0000
ROA not after: Sun 29 Aug 2027 21:28:24 +0000
asID: 136787
IP address blocks: 155.133.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d7:fe:f7:72:4b:77:fc:c3:b6:9c:f4:d4:9b:2c:d5:53:4a:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:24 2026 GMT
Not After : Aug 29 21:28:24 2027 GMT
Subject: CN=BF5BD05E0075258ED9D7B4E6E22D243202B0B222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:c1:8c:36:2b:7e:b1:96:2f:b2:f5:3f:e9:
09:10:68:de:4a:c6:c6:00:6e:db:08:78:0d:64:14:
d1:92:63:c0:cd:6c:a9:b7:6a:a6:ef:18:7c:3a:10:
7f:89:cd:39:b7:65:70:65:cb:13:17:c2:7f:9f:00:
b9:42:ab:2c:4d:67:16:c7:7b:b5:7b:a3:5d:ad:dd:
14:f4:be:18:b8:96:a8:45:13:56:32:98:ec:15:b6:
1d:48:8c:c7:9c:cd:77:1d:03:8d:84:6e:1f:63:e4:
6e:af:6c:82:f4:9b:b5:52:20:8d:35:4f:1f:cb:bd:
7d:0e:ce:a8:4f:c4:9a:65:08:10:65:9f:64:33:55:
ac:a1:d7:85:72:b6:f6:4f:ec:4d:da:0a:ed:92:be:
d8:35:4b:08:c7:fe:71:83:33:36:11:28:f3:f2:79:
81:bb:a1:4a:22:09:0c:3e:52:b7:0f:69:28:b0:74:
62:6b:91:0d:7e:c8:53:bf:2a:06:2c:82:82:2b:bb:
9c:78:b1:ce:59:99:ab:e8:b8:53:c1:4b:57:05:b1:
8e:f5:9e:58:d6:28:b0:fd:12:eb:f1:4b:d3:70:89:
f7:bb:27:e3:1d:4f:2a:91:a1:d5:42:a4:e3:84:a7:
16:ce:df:ee:89:4c:51:53:94:bb:d5:75:89:64:34:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:D0:5E:00:75:25:8E:D9:D7:B4:E6:E2:2D:24:32:02:B0:B2:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
55:25:73:33:09:c9:ca:7d:90:3f:8f:0b:12:7e:3d:ec:91:96:
c5:df:a1:c1:e5:24:a6:a3:b8:2e:d3:46:4a:3c:9e:4c:d3:c6:
65:be:2d:55:73:e0:77:3f:e7:54:a8:19:f3:d5:5d:91:1f:1f:
0d:d7:28:f4:f7:ae:bc:59:ea:e3:c6:b9:fd:3e:2a:00:7b:0b:
2e:c4:44:c8:42:81:0d:f3:e2:28:0f:11:74:6f:2f:75:f0:c8:
03:93:32:dc:69:4e:c8:34:f0:63:9a:78:e3:b3:dc:c6:e4:bc:
a7:4f:fb:43:c9:8a:18:dd:fe:b6:c0:34:f8:a3:40:9a:6e:12:
89:b9:4d:2c:a9:6b:67:df:77:cd:c1:7a:46:5e:3c:37:74:64:
00:d7:3f:eb:d3:9e:71:23:94:92:21:2f:3b:dd:be:55:38:93:
57:01:a1:a4:1b:db:d1:b0:8d:d2:de:ee:80:eb:66:57:78:f8:
a1:cf:0e:fe:41:11:da:8c:88:86:f4:7d:5b:a5:9e:51:5b:9a:
0c:2e:f8:2d:bc:e7:88:1b:a2:32:20:b6:72:8c:fb:2d:fe:12:
f2:8b:0b:72:f3:bc:bc:aa:e9:75:05:ea:18:33:f6:65:62:a9:
bc:22:3e:3f:d8:d3:81:9d:f6:24:19:39:07:65:c0:94:56:97:
b9:1e:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:59:28 2026 by rpki-client