Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132302e302f32342d3234203d3e203538323931.roa
File: 3135362e36372e3132302e302f32342d3234203d3e203538323931.roa (raw, json)
Hash identifier: IhB8FCYe1L01B8bzcRiN3DRqo1hSMrFSNfC1qjYAreQ=
Subject key identifier: BF:8C:0A:6C:6D:FB:99:E4:63:FE:2E:0A:88:80:0B:47:0E:B3:D6:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D18FF6E9B12E22BE591E80F222767090DE4052B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132302e302f32342d3234203d3e203538323931.roa
Signing time: Thu 01 Oct 2026 13:23:53 +0000
ROA not before: Thu 01 Oct 2026 13:18:53 +0000
ROA not after: Thu 30 Sep 2027 13:23:53 +0000
asID: 58291
IP address blocks: 156.67.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:18:ff:6e:9b:12:e2:2b:e5:91:e8:0f:22:27:67:09:0d:e4:05:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 1 13:18:53 2026 GMT
Not After : Sep 30 13:23:53 2027 GMT
Subject: CN=BF8C0A6C6DFB99E463FE2E0A88800B470EB3D601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:ee:95:f9:9a:3e:c3:75:ce:f8:07:92:8b:
f2:2d:1f:e2:a6:f2:4a:5b:39:e4:2b:cb:23:d9:21:
8e:93:d7:82:37:8c:3d:72:ff:44:1f:d0:ac:3c:9a:
a0:96:ec:58:c6:1e:bb:1e:90:a9:86:34:8c:30:b7:
30:c7:07:93:16:31:24:49:7d:df:8f:ff:7b:7c:aa:
69:79:b3:b4:6e:9e:e7:36:68:f5:9c:84:54:76:29:
6a:91:63:30:1e:1b:51:98:86:fd:f5:c5:bf:89:a9:
5a:6b:0e:79:f7:c3:79:cb:45:cd:5d:bd:4d:b7:50:
61:55:e7:73:60:21:d4:3b:69:79:88:7a:5a:a3:91:
b3:47:d0:b4:ae:4e:57:73:75:bd:47:86:98:2d:05:
3d:d1:bf:44:c1:02:d4:ff:8a:51:f9:88:4c:36:19:
dd:37:ee:ce:cb:a6:ff:b1:27:1e:d5:c8:24:28:26:
12:0b:7d:91:0c:5b:8d:79:15:3f:ea:43:40:71:e8:
8e:2c:8c:2d:87:e9:b8:4a:2a:5f:11:5e:c9:0a:25:
48:7b:a3:c5:3f:9b:c5:2e:4a:fb:99:0b:6d:26:aa:
5b:03:87:29:3f:4b:dc:16:95:2a:17:3e:1f:c3:f9:
63:34:ea:ab:f7:00:10:5c:3e:2d:2a:96:15:39:46:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:0A:6C:6D:FB:99:E4:63:FE:2E:0A:88:80:0B:47:0E:B3:D6:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132302e302f32342d3234203d3e203538323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c3:7b:8f:6b:c0:03:43:94:39:26:fe:e6:3e:05:4f:9c:8e:
ac:b1:b1:ca:53:37:b5:42:7f:21:53:66:84:7c:4e:b2:d5:76:
33:64:54:4b:5c:98:37:9e:91:6b:48:a8:81:7a:9c:66:d6:97:
0a:55:02:89:25:64:b3:0d:46:28:b0:ab:03:37:cf:8c:a8:af:
0a:de:2c:36:02:e1:a9:c5:b0:3d:f7:db:9b:9b:a7:d7:51:f4:
10:f3:8f:b1:aa:e2:f1:65:aa:4b:b0:a0:a4:44:e9:ba:b9:2d:
37:18:fa:79:f5:8b:99:93:8f:32:ee:7f:68:f5:03:56:b1:29:
71:f2:f2:58:af:a0:cc:7a:dc:32:67:b4:30:6a:7c:8a:3f:c1:
24:2b:91:1c:48:20:35:90:54:d1:4e:45:76:83:84:22:f1:c9:
33:24:64:41:8a:ba:da:59:a6:ec:df:0a:41:99:34:25:b8:ca:
2f:fe:6f:3a:bc:e0:6f:e2:45:f8:b5:14:8f:da:e0:4b:0f:f7:
7f:02:f8:a6:83:43:4c:f9:93:47:62:43:ac:c5:62:af:74:9d:
a4:54:0f:4e:ea:6a:98:28:8c:c8:35:7d:ac:33:3f:cc:a3:77:
cc:61:31:e4:57:61:72:e2:45:71:17:3a:79:d2:5a:6e:1b:af:
04:df:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:43:56 2026 by rpki-client