Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: RSlWorgw6aig8GWyVOySK2gArvcbod+ah/W1GuXb/uo=
Subject key identifier: 3A:CC:FD:FB:C3:99:C1:FB:D0:17:BF:D4:FE:43:61:B5:FC:BB:56:66
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B49BA3EE77E451292442DC2BD43BE994184A65C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:14 +0000
ROA not before: Sun 30 Aug 2026 21:23:14 +0000
ROA not after: Sun 29 Aug 2027 21:28:14 +0000
asID: 136787
IP address blocks: 156.67.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:49:ba:3e:e7:7e:45:12:92:44:2d:c2:bd:43:be:99:41:84:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:14 2026 GMT
Not After : Aug 29 21:28:14 2027 GMT
Subject: CN=3ACCFDFBC399C1FBD017BFD4FE4361B5FCBB5666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:60:7b:a8:1e:89:6a:4d:26:df:a4:74:1f:
af:3a:af:30:30:da:ac:fa:66:21:2f:49:16:2f:2a:
9d:3c:a2:7d:d3:d3:e1:bb:52:79:2a:4d:79:33:95:
45:77:39:93:b4:b2:26:e0:44:7f:d9:27:a1:53:0e:
0f:17:ca:73:0a:53:45:15:c7:ca:8e:75:23:b7:12:
01:2e:3a:33:2b:cf:96:44:0e:90:bb:00:94:88:2a:
e7:c9:d1:76:df:a3:e9:da:3c:b2:f9:da:ec:44:15:
b7:bc:56:34:5f:54:68:d6:26:a3:bb:9c:fb:cc:98:
61:3c:cd:74:c3:b6:4f:a1:38:b3:78:96:9b:ec:8b:
7d:4a:57:3a:50:05:e5:f1:78:0b:84:fc:a5:87:26:
ed:05:12:17:f5:f6:a8:92:f3:3f:3c:c7:06:bc:ba:
8c:e0:59:32:3d:7c:62:08:88:d3:92:2e:a5:ab:8f:
2f:2e:d3:04:ba:4f:44:e0:26:1a:ba:0e:f7:4a:43:
2b:50:94:bd:b1:ff:fe:b0:40:9d:bc:99:3b:83:e1:
7a:5e:ce:61:9d:09:3a:74:b7:af:5b:dd:0c:02:53:
a1:3d:60:66:ea:20:f7:2a:80:04:df:a6:21:9b:bb:
30:2b:a1:3b:27:15:c8:43:5f:2a:14:08:91:ed:74:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:FD:FB:C3:99:C1:FB:D0:17:BF:D4:FE:43:61:B5:FC:BB:56:66
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.118.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2d:bb:15:4d:db:2b:5e:6d:f3:1f:f9:a4:93:61:9f:f7:3c:
e0:5b:c9:c6:b1:d2:cb:d0:ca:39:c1:8f:7d:ff:48:ae:67:93:
68:56:43:bd:42:b2:36:f1:95:a2:74:6e:ce:57:7c:18:f8:53:
7a:5d:cf:8c:18:a3:d0:0f:79:95:35:35:4f:85:74:ba:17:4e:
c6:23:ce:9f:94:2e:92:f8:93:39:d9:79:24:21:ea:5d:e1:c5:
3a:b3:67:ae:f2:cd:e0:18:cb:67:b7:df:c1:b6:cc:15:11:f3:
ca:a4:6e:f4:99:68:fb:2e:18:a3:31:13:30:53:45:69:6e:19:
13:af:a4:98:e0:70:a1:72:c3:52:67:87:18:eb:75:26:7c:6f:
b8:f8:16:04:6c:20:bf:42:4b:f5:6f:40:63:fd:5b:90:12:a4:
43:0e:41:fd:58:ab:92:67:cc:ac:25:16:1b:60:1a:fb:ef:05:
8d:3d:1f:c9:87:ba:48:a6:29:40:cc:ac:e2:06:14:75:b1:3b:
32:59:c6:a6:2a:e9:39:77:dd:7b:26:de:c9:88:68:4c:51:ae:
59:b2:4b:61:83:e3:91:fe:0f:ad:b3:ff:f9:81:61:0c:55:1c:
92:9f:1f:e5:bf:d4:b8:05:63:01:31:0f:56:8e:a4:35:16:d8:
90:39:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:24:57 2026 by rpki-client