Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38352e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cekKqX6a5UDQMBmxQMPSeX55xJbmUptgJqPvRAZ+9Fo=
Subject key identifier: 3B:EF:E9:BB:7D:73:43:E3:23:3F:45:D6:08:6D:82:D5:8D:90:67:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3FB64208AAF790F20F16D0BD9458224BB066B939
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jun 2026 16:25:48 +0000
ROA not before: Fri 26 Jun 2026 16:20:48 +0000
ROA not after: Fri 25 Jun 2027 16:25:48 +0000
asID: 136787
IP address blocks: 156.67.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b6:42:08:aa:f7:90:f2:0f:16:d0:bd:94:58:22:4b:b0:66:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 26 16:20:48 2026 GMT
Not After : Jun 25 16:25:48 2027 GMT
Subject: CN=3BEFE9BB7D7343E3233F45D6086D82D58D906759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:9d:d9:e5:80:1f:b8:c2:1f:a9:2e:31:53:
cb:1f:ac:67:c2:54:a9:50:39:2c:0a:b1:15:a4:0b:
79:93:16:b6:f5:4f:eb:21:29:4a:af:af:d5:64:4f:
15:67:bd:d1:5e:ae:d1:7c:73:39:da:48:3d:d8:6f:
e4:ae:c4:39:20:ba:28:81:08:a3:d6:88:d5:5a:84:
20:39:6f:1d:38:8b:2b:db:ea:a0:ad:14:a6:21:9a:
9e:eb:f6:c7:72:03:07:42:09:b3:8a:7c:ce:df:6e:
09:87:44:36:96:68:e9:bc:18:c4:43:bf:e6:ee:b0:
3c:3c:bb:03:8c:84:3d:78:00:f6:27:17:4d:73:35:
a8:fc:0b:7f:f4:ff:a5:fd:e5:28:2f:40:54:6e:44:
90:33:ba:73:12:e5:92:2a:53:3e:61:ce:e7:ab:ca:
60:53:04:2f:4f:2f:74:4d:81:f7:ac:37:b9:f9:cd:
0a:81:ca:9f:4f:ea:f6:8f:4d:5c:bb:9d:14:79:62:
b6:b9:e2:49:38:c9:44:6a:c5:fa:26:a6:29:16:2d:
71:c0:85:83:c9:3c:3d:a6:16:40:d1:d4:a9:2f:fe:
8a:f6:24:ca:39:08:e8:07:ac:24:03:6f:5b:9b:45:
c3:4e:10:bb:87:b4:da:83:c6:7d:1b:74:0d:b6:e6:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:E9:BB:7D:73:43:E3:23:3F:45:D6:08:6D:82:D5:8D:90:67:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.85.0/24
Signature Algorithm: sha256WithRSAEncryption
96:87:b0:b1:b2:94:a2:82:65:d8:5d:11:8f:44:91:49:81:5d:
a3:76:01:0a:02:d2:99:f1:bd:d7:34:e9:dd:12:5b:b3:5b:e3:
9f:68:ed:74:ac:f6:78:f8:3c:7e:34:ea:ec:94:7b:ad:1d:ad:
7a:92:15:11:1a:f2:0f:9d:8a:af:18:3f:e5:6d:fe:c9:ac:44:
f8:4e:47:ed:9e:57:f3:70:9b:3b:68:be:0f:a3:a4:8b:f1:c1:
b5:a7:c8:7b:b2:87:5c:7d:6f:69:7b:08:e1:b6:79:f5:dd:cf:
58:cc:fa:2a:2a:2a:2b:8d:5e:bf:27:71:ad:b8:a0:40:64:2e:
6e:bf:d5:10:0e:17:8d:b1:4c:27:36:94:06:f5:46:fd:a0:3c:
b0:2a:59:bd:12:99:86:7e:a7:af:9b:21:84:9c:88:f0:4d:8b:
4e:c6:54:27:0a:43:d4:9d:b2:3d:e9:8e:61:02:2e:17:c6:c4:
ad:63:25:17:46:02:84:c9:be:cb:5e:a7:b4:3d:37:33:51:70:
13:2d:87:fd:a5:17:9e:ae:3e:03:af:ac:b4:44:0b:d8:e7:6d:
23:58:6d:d7:0b:77:a7:97:49:94:cd:65:25:72:47:74:9c:a5:
2d:f9:86:9d:e9:b7:0b:28:d2:55:f8:4a:ff:60:00:b9:0f:51:
62:1d:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:48 2026 by rpki-client