Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CcE1rvBgT3I250W7GnWwhmbYd+g8kyp64Sm8DP4ajSA=
Subject key identifier: 19:6A:BC:72:B1:62:A0:1B:36:9D:45:86:E7:46:36:4B:EF:86:5D:A4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46D6C504EBF7FB5C427713928C47B34B5D2C42BB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:13 +0000
ROA not before: Sun 30 Aug 2026 21:23:13 +0000
ROA not after: Sun 29 Aug 2027 21:28:13 +0000
asID: 136787
IP address blocks: 156.67.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d6:c5:04:eb:f7:fb:5c:42:77:13:92:8c:47:b3:4b:5d:2c:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:13 2026 GMT
Not After : Aug 29 21:28:13 2027 GMT
Subject: CN=196ABC72B162A01B369D4586E746364BEF865DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:85:52:43:6b:1a:73:8e:95:62:23:64:3e:
81:01:3a:33:86:4f:db:21:17:9d:c6:ec:24:e4:70:
a2:b5:3e:32:36:a5:22:32:e0:35:45:7f:49:d2:78:
b6:99:4b:c8:d4:b4:c5:62:54:1f:d7:f0:ff:55:05:
b0:34:3d:b4:a1:aa:19:dd:f2:0f:20:52:84:27:c6:
1b:97:d8:8a:76:54:94:27:e4:87:9c:6d:72:5d:32:
53:28:41:bb:f5:03:50:23:cc:39:9b:20:06:d1:77:
fd:a5:72:de:46:70:aa:c6:b0:7a:2f:9a:91:4e:b0:
c8:8d:3d:35:bd:8b:12:fd:4c:20:a4:99:a6:c6:54:
45:af:76:0a:cf:80:66:7e:97:4c:19:95:c9:cb:2b:
77:e6:8c:00:9d:47:2e:72:53:4c:14:35:97:66:40:
ad:08:d0:1d:1c:71:3a:2b:78:ee:9c:cc:bd:70:fa:
9d:5b:2a:72:a7:cc:7a:87:21:67:b9:b4:4e:5c:5e:
d6:25:f0:b4:34:80:15:f5:06:51:6c:fe:d7:8d:57:
ec:bb:b5:70:10:3a:0b:17:12:4e:1e:3b:16:be:36:
c6:32:03:40:84:f7:70:b1:51:fa:5b:f5:f8:80:f5:
e5:b0:33:8f:2b:74:d0:19:85:b1:e2:a8:77:5e:3c:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:BC:72:B1:62:A0:1B:36:9D:45:86:E7:46:36:4B:EF:86:5D:A4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.126.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d2:36:c6:74:bc:e6:10:07:f6:74:f3:f6:d4:e0:dc:84:b8:
5b:0a:63:68:1e:a9:44:b5:7e:b1:59:88:9a:5d:ae:36:32:b9:
95:0b:de:71:36:57:69:19:cd:52:27:e6:4a:f9:49:7c:4e:eb:
47:2e:ff:8a:10:42:29:4f:97:56:37:80:81:7c:3b:ae:b2:51:
96:57:54:d1:2c:0f:b9:23:2f:f2:b1:ed:f4:da:e3:ea:7c:87:
f1:09:dd:11:a6:74:b5:ec:d7:f6:4d:da:b9:62:5e:7d:fa:6d:
14:c5:26:17:82:0e:d6:83:3f:32:ca:a3:19:98:d3:ad:d5:45:
97:f1:62:c4:f8:2c:8a:d6:11:9f:7b:5d:cb:52:13:92:72:18:
98:09:0a:e9:2e:13:d1:a1:32:d8:f8:73:69:86:b0:26:c9:fb:
85:08:40:46:ec:07:25:af:38:5c:77:e8:d4:c8:49:bb:91:2a:
0b:93:b9:5f:7d:12:eb:d6:89:bd:40:8c:9b:15:97:4c:5a:ce:
28:1b:55:40:4b:c9:a4:96:29:c2:5f:19:02:69:d4:ee:fa:62:
21:f5:da:d6:0e:a6:15:7b:5a:53:f0:e1:6d:78:50:ea:90:10:
be:8b:91:8a:2e:63:90:a1:18:7a:8a:e0:b8:9c:39:40:fd:91:
02:05:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:23:37 2026 by rpki-client