Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39312e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e39312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: AzoGrm2pdkUZq/igg1b3JKBfPjGhCnDLdAdxdusHxYQ=
Subject key identifier: 42:EA:DE:82:75:CB:74:79:0F:2C:49:4D:E6:17:86:EE:C0:82:E1:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A64C5C06E305F06A6585D71839693EBB6F1CB9E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:25 +0000
ROA not before: Sun 30 Aug 2026 21:23:25 +0000
ROA not after: Sun 29 Aug 2027 21:28:25 +0000
asID: 136787
IP address blocks: 155.133.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:64:c5:c0:6e:30:5f:06:a6:58:5d:71:83:96:93:eb:b6:f1:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:25 2026 GMT
Not After : Aug 29 21:28:25 2027 GMT
Subject: CN=42EADE8275CB74790F2C494DE61786EEC082E183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:77:f3:49:4f:f7:3e:b1:0f:6b:b0:87:9d:
f9:7e:94:0e:99:85:34:53:63:9e:1b:96:4b:36:66:
4b:2d:1c:11:b5:e5:8c:43:5e:d8:48:e8:21:dd:8f:
12:1f:79:21:26:ec:41:78:13:0b:f5:aa:55:d4:25:
75:50:2e:95:0f:49:9d:47:aa:b6:02:d9:54:28:45:
9e:d6:09:b7:dd:d0:39:c3:54:b4:f5:2e:82:31:cc:
e6:db:9f:ad:53:88:df:18:a3:ae:03:97:5c:8a:5b:
89:6d:1f:b7:a4:82:bf:9e:8b:c1:8f:e5:bf:2c:10:
1f:b7:fe:16:54:a5:18:2b:da:05:cb:cf:2d:27:7e:
3b:af:83:26:56:e2:40:2d:ec:ff:4f:34:e9:de:bd:
b9:90:c6:b7:25:0f:04:9a:4e:4c:23:1b:f1:c5:f2:
e4:a8:4e:b0:2a:aa:c1:55:57:cd:9f:fb:5a:3e:d4:
6a:2d:fb:28:9b:4a:1a:b8:67:94:53:ba:c3:54:67:
ef:01:1b:89:f5:03:7b:42:45:81:ee:7c:9e:48:82:
6f:43:46:5f:87:d7:62:f6:42:c3:4e:bd:f0:7b:dc:
a1:43:16:25:55:7d:de:98:ba:fe:60:68:03:78:f0:
82:e0:cb:73:b8:99:14:bd:ae:5e:b3:fa:08:69:35:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:DE:82:75:CB:74:79:0F:2C:49:4D:E6:17:86:EE:C0:82:E1:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.91.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e5:40:9f:0e:12:1d:f6:59:1d:b5:e0:c9:06:7a:56:23:ea:
28:6a:4d:46:28:41:be:8d:ef:ae:32:64:b4:3f:e6:39:c8:4c:
7f:da:82:e9:5d:e2:b0:91:e3:5e:60:c2:62:38:a2:99:07:cc:
c2:7c:bd:b9:ec:b5:03:ce:aa:a8:75:ce:a1:9b:1e:a2:cc:d6:
74:c7:b3:aa:15:b1:7e:65:dc:5e:7e:47:e6:31:ba:84:5e:10:
52:91:cb:66:5f:30:c5:fe:80:fa:0e:0f:f4:37:10:4b:25:7d:
e9:04:76:d2:70:4f:fd:12:2d:2c:d8:54:bd:26:2a:42:03:a2:
28:a4:f7:8f:28:93:5d:e9:8c:ac:bc:37:78:56:f1:48:89:2f:
6d:96:14:62:98:5e:38:c2:a3:be:17:5d:10:68:36:97:ce:56:
53:83:02:0b:d5:00:01:0f:67:c2:89:64:2c:cb:b0:f3:f5:78:
64:78:79:65:f6:28:76:6e:a9:3c:63:f3:c1:45:5e:20:73:e3:
da:3c:76:12:0e:eb:1e:37:57:5b:fa:81:e7:ee:f1:2f:2b:9f:
bf:bd:ba:1c:5c:51:bf:6a:74:f6:f8:22:bf:05:a3:e7:a2:40:
f5:fe:6f:a4:f0:fc:18:fc:de:da:12:df:c1:04:8a:d2:6b:01:
69:d1:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:25:09 2026 by rpki-client