Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: FrNgGT44ywW1TdzVtpqPjefl1nNRE8pBUSREbB7uHSY=
Subject key identifier: AA:42:FD:FC:21:F8:2E:5F:46:21:14:F2:33:C7:FB:6A:72:60:24:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C79642779A39EB886CDD6DC4269FA5E9B62B564
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:20 +0000
ROA not before: Sun 30 Aug 2026 21:23:20 +0000
ROA not after: Sun 29 Aug 2027 21:28:20 +0000
asID: 136787
IP address blocks: 156.67.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:79:64:27:79:a3:9e:b8:86:cd:d6:dc:42:69:fa:5e:9b:62:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:20 2026 GMT
Not After : Aug 29 21:28:20 2027 GMT
Subject: CN=AA42FDFC21F82E5F462114F233C7FB6A72602457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:b4:fb:b0:c8:35:80:5a:f4:64:c1:e1:2d:
5a:a1:7b:ff:9c:60:b3:5a:f1:b5:13:51:98:ca:30:
a8:af:59:08:08:5f:39:d8:8d:93:66:2d:64:71:12:
db:79:5c:68:7b:c4:56:a6:7a:08:39:13:1f:ba:dc:
37:c5:71:8f:73:93:c6:64:55:9c:b4:08:30:b0:9c:
33:aa:41:4d:10:28:fe:65:f7:e5:61:26:c8:1a:56:
e2:c6:44:09:60:9c:35:c3:63:84:7e:62:83:ab:3b:
2d:0b:11:01:b4:84:fd:3f:4b:e7:ca:c2:fa:78:d8:
7f:28:b5:3e:b1:bf:36:08:73:fc:02:97:16:90:cb:
7d:1f:aa:d0:76:da:04:ff:ae:4b:1f:98:1e:56:b8:
bb:7e:b5:a0:e6:ac:38:4f:44:a6:85:bc:75:72:2b:
a6:90:81:6a:b4:73:47:ff:7d:ac:68:9a:db:fa:b0:
56:e2:e4:34:5f:da:db:a3:66:fc:47:49:dd:62:d0:
ce:61:d0:a3:e6:18:ee:87:08:ea:9a:9f:17:bd:be:
b2:2c:db:80:f5:f4:91:8c:93:15:5a:21:bd:2b:8a:
55:82:44:7d:8b:17:92:98:89:90:cd:64:65:78:02:
0b:8a:43:94:aa:fe:d3:46:86:42:e4:3b:b2:fd:08:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:FD:FC:21:F8:2E:5F:46:21:14:F2:33:C7:FB:6A:72:60:24:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b3:94:98:bb:ed:12:79:d3:76:4a:df:58:72:f0:2e:9d:23:
7c:09:04:60:6a:4f:84:f8:71:cf:fb:d6:73:c4:38:cb:86:a5:
aa:46:4b:63:79:e3:77:a2:78:83:ce:e7:b6:57:4f:d1:4c:49:
9b:00:42:7b:ec:32:1b:b0:f4:d3:60:d6:86:17:b5:4d:c6:a7:
1d:5a:54:f4:fd:f9:c1:21:76:64:d9:41:1d:94:36:0c:34:04:
c8:b8:ca:fd:47:b2:b6:2b:14:62:27:c6:ba:1c:55:55:66:09:
48:84:96:d6:08:02:2d:7b:11:ee:df:19:b2:da:27:cc:8d:04:
5e:e7:14:45:1c:aa:7d:4a:70:4f:09:19:28:f3:32:86:1c:5a:
9d:28:d9:b6:58:29:49:37:f9:60:a9:05:2b:00:84:a2:c1:d1:
74:ba:2d:38:f2:4e:85:86:24:0a:ff:55:69:7d:65:27:4d:3e:
1e:e3:51:53:f5:9d:0b:db:57:79:04:fa:8f:f6:7e:93:de:1b:
a3:f8:ee:3e:59:7d:5a:d0:3e:95:dd:74:f7:45:c0:ff:70:1d:
16:96:63:9a:74:e3:f5:7a:cd:e5:e8:5a:be:35:3f:53:b9:b6:
ba:8b:4f:61:fa:ef:bc:2c:44:df:fc:5c:c2:1c:ed:28:93:6c:
3a:1d:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:39 2026 by rpki-client