Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38332e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e38332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: skVju18X7wF2vcxPrFhQ8udGOWL/Nbzxbs+krRLxIZc=
Subject key identifier: 73:F0:41:5A:A1:43:69:5F:2D:23:36:D7:6B:70:C1:BD:14:21:BA:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 296C36AC051FAC82E9EDF235EAC23C0F9C377A9B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:17 +0000
ROA not before: Sun 30 Aug 2026 21:23:17 +0000
ROA not after: Sun 29 Aug 2027 21:28:17 +0000
asID: 136787
IP address blocks: 155.133.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6c:36:ac:05:1f:ac:82:e9:ed:f2:35:ea:c2:3c:0f:9c:37:7a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:17 2026 GMT
Not After : Aug 29 21:28:17 2027 GMT
Subject: CN=73F0415AA143695F2D2336D76B70C1BD1421BA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:c7:59:e4:3b:65:29:f6:04:3f:2a:27:68:
da:07:33:b5:f4:4f:18:36:cf:41:50:1e:f9:8b:95:
21:8e:46:8e:e5:1c:b4:f9:d5:24:3c:86:22:89:27:
10:b0:03:3a:c1:cb:03:61:46:3e:12:7a:39:a4:4c:
68:89:b6:79:8f:ab:cd:93:41:6c:ef:37:ca:f8:cf:
2f:a2:44:4a:64:6b:ba:ab:65:f9:02:52:a2:e8:48:
ca:26:1f:d6:49:97:9b:c7:58:f2:d1:77:c9:36:a4:
a0:5f:27:30:ad:2e:95:e3:28:1d:10:cb:32:32:fb:
88:f7:f0:51:2b:17:0b:11:97:4c:af:d0:ee:2f:10:
40:af:f9:65:65:28:4a:25:2b:89:cf:d9:37:fb:69:
36:ee:c6:bc:7f:fc:2f:35:8c:cc:63:45:ad:79:00:
e4:03:7c:95:dc:96:a5:e8:a9:a8:ba:5f:f3:fe:59:
04:8b:55:61:34:78:4f:2c:10:9f:e9:20:a4:54:f6:
51:86:c5:83:6c:cc:41:39:33:1e:be:19:e3:99:35:
b0:f2:a8:3c:75:8e:62:cd:a6:23:c0:a5:80:46:14:
ac:4c:d9:b8:cb:19:e8:1e:f2:69:1e:c0:42:52:99:
14:88:b4:7c:af:05:ec:67:0f:6e:1f:5b:87:b9:29:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:41:5A:A1:43:69:5F:2D:23:36:D7:6B:70:C1:BD:14:21:BA:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7c:77:84:75:00:52:4a:ba:2e:29:a6:20:c2:96:30:2d:89:
20:c5:f8:4e:09:7c:16:93:e0:d8:6e:72:a2:eb:29:f1:72:08:
af:a7:9d:c5:1f:7e:93:38:46:01:82:30:99:82:93:34:45:27:
cc:d3:a6:0f:f9:a4:75:74:21:4c:1f:2f:5f:70:b3:45:c6:66:
00:e1:91:02:8e:af:d0:61:68:df:69:8e:5b:e9:8f:3a:b6:b0:
10:98:0c:6b:40:3b:8f:53:98:59:f0:40:d6:05:1e:f9:a0:22:
ee:ef:de:1b:01:db:20:f6:c3:8e:a9:4e:a7:e1:63:af:c6:04:
9b:e5:b5:b6:e3:58:3f:85:7e:fc:fa:53:e4:07:6f:e6:e4:48:
56:71:42:5a:e3:95:25:58:94:24:dd:8f:25:7d:d6:1a:7b:f6:
44:bc:87:8b:19:1e:79:1e:65:3a:38:ba:b6:a6:96:0e:ce:9c:
c2:d4:b4:84:7d:96:d9:4d:a6:09:61:f9:85:97:f2:55:29:f0:
1a:00:0e:85:02:8b:9d:1a:5c:25:6a:0a:6b:a9:22:9d:be:13:
da:23:dd:42:a6:36:5b:ad:40:e1:79:ec:e2:dc:a9:34:90:7f:
be:f1:ad:6b:b5:ee:a6:27:21:0d:8c:ae:2a:59:28:7e:5a:60:
96:dc:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:59 2026 by rpki-client