Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130312e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: kbReqzEv0vvv+NIVGYGixTqrdsLEWdqgtH2vQPQSbPw=
Subject key identifier: FE:E4:97:65:83:94:76:25:B0:5B:F8:A8:39:F4:91:3F:F6:E6:82:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 513DE0547B652FB02D91FD8B10CAF48989CA0A2E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:21 +0000
ROA not before: Sun 30 Aug 2026 21:23:21 +0000
ROA not after: Sun 29 Aug 2027 21:28:21 +0000
asID: 136787
IP address blocks: 156.67.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3d:e0:54:7b:65:2f:b0:2d:91:fd:8b:10:ca:f4:89:89:ca:0a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:21 2026 GMT
Not After : Aug 29 21:28:21 2027 GMT
Subject: CN=FEE4976583947625B05BF8A839F4913FF6E68221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:db:0f:c1:1d:86:d6:48:0f:2e:a5:3d:d0:
9e:c7:5b:e5:4e:2c:1f:28:a4:60:7e:6b:76:ff:ad:
44:b5:ae:9c:f6:b9:bc:04:79:39:5e:3c:22:f9:e9:
e0:9e:f2:d1:81:4d:53:69:51:4d:ff:47:99:0c:6d:
a9:45:1c:23:8b:d0:ab:2a:12:05:79:69:55:e2:1a:
a4:0a:45:fe:70:7b:f0:b6:f5:b1:8e:44:17:25:f4:
ec:b7:a6:59:32:6e:94:ad:2a:22:25:82:a7:e8:08:
04:22:91:09:f3:17:54:f3:32:4a:7b:3c:91:ba:3f:
00:78:d0:25:cd:d1:30:27:ab:10:07:19:10:be:cc:
78:f7:7c:10:49:f7:ed:c0:4f:88:da:37:d9:2d:3a:
e5:1f:b7:fa:d4:35:0a:3d:b1:22:c6:ed:d1:49:b9:
88:30:01:dd:5d:63:ea:a5:0e:ed:66:47:ca:6d:94:
97:4d:d5:0c:19:20:86:81:1a:a3:73:1b:cf:8f:97:
9a:0d:5d:1c:93:52:03:a4:2d:d2:d1:8b:4b:1d:09:
d0:57:bc:bc:f3:25:55:12:06:0f:01:66:c5:b5:54:
5c:c3:b1:56:7c:cd:c8:e4:04:ae:47:bc:76:e0:10:
5c:46:1c:cc:78:da:20:48:25:5f:c7:04:18:5e:01:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E4:97:65:83:94:76:25:B0:5B:F8:A8:39:F4:91:3F:F6:E6:82:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.101.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4d:d0:c6:77:25:32:d2:78:7b:be:39:59:23:a2:c0:15:e7:
b3:64:5d:5f:6b:e0:91:cb:22:f1:8a:05:27:e2:70:11:ab:75:
9b:12:42:96:6f:32:bd:76:86:06:aa:17:0c:12:fa:08:4a:08:
a0:ce:f6:5b:c3:df:07:7e:b3:f9:c6:90:25:cb:40:d4:5a:a5:
74:b5:03:ba:f5:5b:aa:a0:5a:60:57:41:ac:00:bf:9f:7f:88:
36:01:92:fb:de:84:fc:57:c6:4f:dd:12:8f:e9:ad:b9:3d:51:
82:83:1c:6f:83:db:f9:21:f0:20:06:bd:71:67:10:97:93:d6:
94:71:b1:89:a3:ea:0f:66:61:06:22:5a:f3:30:ab:29:82:43:
30:1a:54:a9:63:1e:25:7f:ee:a6:e2:f8:52:7b:aa:6e:62:a1:
0a:6e:d6:35:7b:b8:88:0a:9e:f0:c5:75:23:36:8d:27:1a:c0:
5a:d5:e5:ba:61:8c:15:4e:fe:20:1f:29:a2:76:66:a5:a2:e3:
f3:f8:e9:36:cc:39:92:be:b6:ad:4c:ff:f7:5b:1c:63:43:13:
d7:11:7f:eb:3b:b4:88:6c:f7:aa:c1:e3:5f:12:b1:1a:a4:30:
6a:48:a9:22:b4:eb:04:b2:d2:ec:1c:b0:3b:53:e0:1a:ad:46:
89:16:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:48 2026 by rpki-client