Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39302e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e39302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: FmdAsy0w20GBkA6j8pmBXNKUfMEc/qvLpVdFoWubV/g=
Subject key identifier: 6A:51:08:28:05:02:F4:AB:3B:3C:54:23:F3:BB:1B:44:F8:AA:64:88
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 433651603E59F3625C2A5A7FDFC619DF9EB55E82
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39302e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:23 +0000
ROA not before: Sun 30 Aug 2026 21:23:23 +0000
ROA not after: Sun 29 Aug 2027 21:28:23 +0000
asID: 136787
IP address blocks: 155.133.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:36:51:60:3e:59:f3:62:5c:2a:5a:7f:df:c6:19:df:9e:b5:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:23 2026 GMT
Not After : Aug 29 21:28:23 2027 GMT
Subject: CN=6A5108280502F4AB3B3C5423F3BB1B44F8AA6488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:2b:2a:e1:6b:b8:94:f1:e9:2e:bc:10:7a:
7b:d6:ca:23:d2:ad:65:4d:59:f2:fa:48:a9:f4:fa:
05:e8:84:54:75:bf:57:45:59:a7:0f:17:72:08:4a:
a6:3b:44:b2:e8:55:6c:79:22:2d:7d:7e:c3:15:0b:
ae:e2:f2:cc:96:82:4c:f8:51:1e:a9:0d:bb:9e:a2:
5d:32:bc:97:a1:56:65:ac:e1:4a:33:76:af:4a:9d:
cb:60:9d:bd:9a:c1:f1:b3:74:56:a3:4b:fc:4f:c2:
c5:27:fe:06:b1:af:55:de:cc:ac:6a:2e:13:92:5a:
85:a4:fc:56:58:ed:ac:e2:1b:ee:5c:09:f8:70:eb:
b6:76:f2:c6:ca:f6:85:40:97:b0:2d:15:2e:df:18:
04:59:87:04:62:a2:ec:17:7d:a3:ff:e4:15:7d:24:
b9:4d:85:68:91:d6:f3:6e:26:a8:bf:19:26:40:23:
0a:c8:4b:25:af:c5:69:23:07:3d:c8:49:21:6d:75:
eb:74:a8:2b:47:18:39:53:a7:e7:fa:79:65:86:19:
33:94:05:ae:66:e8:b2:86:4a:d8:8e:05:cb:88:92:
1d:b4:5a:a3:70:f9:4c:90:0a:4f:6f:b8:76:29:25:
0c:9c:1e:b4:84:cd:40:93:b3:bd:a6:00:34:5f:60:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:51:08:28:05:02:F4:AB:3B:3C:54:23:F3:BB:1B:44:F8:AA:64:88
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.90.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c5:48:bf:00:6d:2e:19:63:d3:f3:2e:ec:07:62:21:a1:f1:
63:8e:7f:7f:90:11:28:ee:0a:60:cb:62:50:39:3d:4e:71:6f:
a9:79:36:72:d0:59:7e:2d:d8:63:6f:19:8a:17:72:4c:9c:53:
62:3e:12:6b:88:53:a1:8a:00:2b:54:03:89:07:be:08:7e:47:
4a:08:0a:f9:44:d2:4d:77:40:91:44:cd:df:3d:44:26:47:9a:
33:cc:ac:ed:a4:41:bb:0e:57:2a:20:90:9d:c4:60:c7:da:3c:
02:50:0c:e9:bd:46:a7:fb:3c:e9:ea:e9:de:29:de:58:81:5c:
22:28:40:41:27:2a:d9:c1:f7:cf:99:2c:ff:7d:66:a4:13:9f:
c6:65:08:e1:b4:18:0c:83:19:5d:be:30:93:de:b5:c4:87:35:
cd:51:f7:1b:6e:f0:58:ab:61:4c:6c:57:1a:8d:77:30:08:a0:
c1:96:19:f4:fc:b2:47:b3:08:dc:7d:0b:6d:5f:c2:65:ea:58:
ed:1c:cb:3b:ac:8b:84:92:72:ff:6d:83:09:76:aa:6e:d2:bd:
2b:6a:76:0b:78:ca:3f:d5:cf:05:8c:0e:de:fd:67:70:87:53:
70:ab:fa:23:02:20:00:0c:32:2e:05:ef:0a:24:11:e2:85:20:
3c:fa:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:24:44 2026 by rpki-client