Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38382e302f32342d3234203d3e203530303935.roa
File: 3135352e3133332e38382e302f32342d3234203d3e203530303935.roa (raw, json)
Hash identifier: dr0tDa/VhE6AV4Fn1vei7nqPg7IdLE7FCTpiiSh/z7w=
Subject key identifier: 86:71:22:EE:0B:11:4D:80:41:96:A6:06:D9:E5:C5:E1:38:C5:83:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 775887CCE844344F1EE04616B79AA93DCDD1D61E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38382e302f32342d3234203d3e203530303935.roa
Signing time: Wed 07 Oct 2026 17:29:41 +0000
ROA not before: Wed 07 Oct 2026 17:24:41 +0000
ROA not after: Wed 06 Oct 2027 17:29:41 +0000
asID: 50095
IP address blocks: 155.133.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:58:87:cc:e8:44:34:4f:1e:e0:46:16:b7:9a:a9:3d:cd:d1:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 7 17:24:41 2026 GMT
Not After : Oct 6 17:29:41 2027 GMT
Subject: CN=867122EE0B114D804196A606D9E5C5E138C583AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:a3:d4:6e:db:17:ef:34:37:63:40:c1:4a:
27:24:8c:4e:bd:fd:33:3e:85:29:4d:7a:7b:59:db:
6f:3c:7e:94:f8:3b:60:63:62:51:b1:a2:7f:01:e2:
6d:db:21:a7:5c:0c:b3:64:61:e9:ef:1d:25:c4:ec:
4a:4f:92:4e:1b:41:a0:e1:f7:11:82:f7:e7:0c:3c:
b7:0e:7d:c0:68:25:4a:b8:9e:fa:6b:56:23:bd:55:
b9:e3:ef:0f:8f:87:6e:48:04:54:41:51:58:3a:99:
92:8e:6a:bb:b8:15:6f:7d:50:d4:fb:1b:e3:04:f6:
b1:10:17:9e:72:e3:ae:68:cf:05:90:3f:68:72:72:
3c:ca:b3:fd:81:2b:73:ad:7b:c9:67:8d:25:3c:b6:
73:c0:aa:ba:6d:38:98:c3:23:98:86:f1:8b:60:dc:
7a:4c:75:56:4e:ee:26:09:32:83:e0:63:bf:35:53:
97:02:ce:97:bd:63:c1:72:88:e7:60:ed:74:16:eb:
52:33:70:bf:47:0b:6b:0a:76:48:e9:55:fd:28:b5:
49:1f:1c:a4:e9:c4:ed:69:3d:c2:78:a9:80:d5:d7:
0a:05:87:55:0b:76:b5:6a:84:71:e7:91:7d:ad:eb:
9b:56:dc:7e:45:c8:b5:c5:b9:dd:dc:0e:fd:52:09:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:71:22:EE:0B:11:4D:80:41:96:A6:06:D9:E5:C5:E1:38:C5:83:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38382e302f32342d3234203d3e203530303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.88.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a3:9f:99:84:e9:f9:28:e6:a9:40:19:71:46:8c:b3:6f:2c:
c5:80:e0:f4:86:b5:c4:8d:41:ad:72:b5:ef:8d:27:a4:31:c2:
3b:65:51:7d:5a:a7:21:25:e9:a5:44:26:58:bf:73:54:d3:c1:
e1:dc:df:82:8f:9a:43:12:6f:72:a2:04:71:34:e6:e5:0a:01:
f4:6f:19:aa:03:a7:26:b7:9d:8e:d2:35:9f:a5:fe:4f:85:3f:
78:66:bb:bd:cd:5e:6d:70:c9:43:1f:82:03:58:e1:2b:cb:73:
dc:0e:ef:10:be:fd:6d:c3:e9:11:a4:b7:ba:86:dc:1e:23:5f:
de:bc:d8:b6:25:f1:66:b2:2c:1f:85:96:48:a7:21:fd:6a:3c:
57:34:ae:d5:bf:f8:5b:cd:df:4a:a6:d4:aa:2c:1c:91:1c:2f:
30:53:86:6e:41:23:3f:0d:a4:b7:e4:3a:cf:a7:55:7d:07:16:
20:11:e4:bc:c7:9b:3f:d2:96:13:b4:a7:9b:e1:5b:de:33:93:
0c:67:9c:c5:cf:eb:84:af:78:fe:55:91:47:af:4e:64:01:e6:
3c:27:a9:d3:18:d0:ed:97:c1:4a:ef:5b:6f:d4:77:ec:3c:57:
95:2a:78:8e:96:d5:84:14:63:e4:ca:1a:7f:38:dd:66:c3:d5:
35:a0:d8:d7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUd1iHzOhENE8e4EYWt5qpPc3R1h4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDcxNzI0NDFaFw0yNzEwMDYxNzI5NDFaMDMxMTAvBgNV
BAMTKDg2NzEyMkVFMEIxMTREODA0MTk2QTYwNkQ5RTVDNUUxMzhDNTgzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+qPUbtsX7zQ3Y0DBSickjE69
/TM+hSlNentZ2288fpT4O2BjYlGxon8B4m3bIadcDLNkYenvHSXE7EpPkk4bQaDh
9xGC9+cMPLcOfcBoJUq4nvprViO9Vbnj7w+Ph25IBFRBUVg6mZKOaru4FW99UNT7
G+ME9rEQF55y465ozwWQP2hycjzKs/2BK3Ote8lnjSU8tnPAqrptOJjDI5iG8Ytg
3HpMdVZO7iYJMoPgY781U5cCzpe9Y8FyiOdg7XQW61IzcL9HC2sKdkjpVf0otUkf
HKTpxO1pPcJ4qYDV1woFh1ULdrVqhHHnkX2t65tW3H5FyLXFud3cDv1SCaz3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUhnEi7gsRTYBBlqYG2eXF4TjFg6swHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM4
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzAzOTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
m4VYMA0GCSqGSIb3DQEBCwUAA4IBAQAio5+ZhOn5KOapQBlxRoyzbyzFgOD0hrXE
jUGtcrXvjSekMcI7ZVF9WqchJemlRCZYv3NU08Hh3N+Cj5pDEm9yogRxNOblCgH0
bxmqA6cmt52O0jWfpf5PhT94Zru9zV5tcMlDH4IDWOEry3PcDu8Qvv1tw+kRpLe6
htweI1/evNi2JfFmsiwfhZZIpyH9ajxXNK7Vv/hbzd9KptSqLByRHC8wU4ZuQSM/
DaS35DrPp1V9BxYgEeS8x5s/0pYTtKeb4VveM5MMZ5zFz+uEr3j+VZFHr05kAeY8
J6nTGNDtl8FK71tv1HfsPFeVKniOltWEFGPkyhp/ON1mw9U1oNjX
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:06:31 2026 by rpki-client