Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39342e302f32342d3234203d3e20323132323338.roa
File: 3135362e36372e39342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: EuDs9maNefnqAj4kadP7hRSYyf+vw9O9WLJTShLVJyU=
Subject key identifier: BF:7E:98:85:CE:84:FF:F2:72:9C:76:AD:5A:A2:CB:2D:C7:1E:D0:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E4F6EAB622ABE786E84E5A0953F5858F4E05A27
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39342e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 01 Jun 2026 22:24:46 +0000
ROA not before: Mon 01 Jun 2026 22:19:46 +0000
ROA not after: Mon 31 May 2027 22:24:46 +0000
asID: 212238
IP address blocks: 156.67.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4f:6e:ab:62:2a:be:78:6e:84:e5:a0:95:3f:58:58:f4:e0:5a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 1 22:19:46 2026 GMT
Not After : May 31 22:24:46 2027 GMT
Subject: CN=BF7E9885CE84FFF2729C76AD5AA2CB2DC71ED03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:4b:b5:37:ae:19:04:e7:a7:f3:4c:5d:7e:
15:4c:40:6d:b5:db:ec:5f:d0:ec:ec:dc:95:ba:83:
01:b2:dc:1e:cc:f1:2a:ba:3c:68:de:87:c9:e8:f3:
c0:89:e7:8a:e8:42:07:52:6b:d9:24:36:a3:5e:34:
b6:cb:33:c6:00:3a:47:1b:b7:a0:6b:21:47:e7:9e:
0a:d8:f3:07:46:97:c1:b5:0e:09:bb:b1:7e:4b:31:
20:d5:82:3f:88:7b:50:6e:9f:be:d3:31:d3:e4:9d:
68:e7:41:fe:a7:b5:f7:79:66:d6:db:af:75:f9:f3:
e7:2c:03:c6:6e:91:5e:f7:5e:13:25:36:61:9f:50:
f9:12:8a:46:bf:44:40:cb:93:d0:9e:a2:34:c8:0b:
2a:ca:61:07:e2:7a:17:43:b8:89:38:26:94:18:b1:
f4:63:c8:72:ce:cc:85:17:b1:51:a9:55:3e:a7:dd:
08:fb:f1:f3:12:c8:83:f1:bd:3e:23:5f:fe:0f:35:
7d:ca:41:e2:9f:f1:8d:8d:a6:ec:51:42:72:a9:4e:
e9:38:85:87:c6:20:13:11:52:84:2a:3a:e9:3a:e4:
4f:3c:5c:30:a3:7c:e4:ac:f8:e1:9e:f7:10:15:e0:
2c:7e:be:a5:1e:39:60:43:27:b8:d7:80:eb:f8:3b:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7E:98:85:CE:84:FF:F2:72:9C:76:AD:5A:A2:CB:2D:C7:1E:D0:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:01:76:28:8b:6d:7e:2e:79:58:f4:76:47:46:94:7f:da:41:
43:8b:66:30:81:b7:aa:0f:d0:9f:1e:0f:cf:3a:26:59:4a:82:
f5:0e:96:07:7b:da:af:37:50:c6:79:e5:84:46:99:48:20:a8:
0f:e6:30:c4:5b:e1:07:a4:ef:37:f0:62:10:25:8f:1e:16:6f:
f5:4b:18:d9:4c:48:06:d9:20:e7:38:79:ab:01:43:7e:59:b5:
02:8d:e4:49:e5:63:ca:6c:95:62:3a:a0:e8:f5:a9:0c:b0:29:
7a:b9:be:69:6c:51:fe:6e:a1:8d:7f:4c:79:4a:b9:bf:62:dd:
6e:f2:b5:16:ed:a1:e5:08:70:04:41:d8:f7:68:6f:f5:6d:fa:
7a:fd:2e:48:09:b2:11:7c:40:a4:bd:83:50:58:3e:48:a8:e2:
52:5b:5e:cd:fd:d3:cf:f7:e4:26:63:10:3d:74:16:14:54:f0:
3d:21:a6:b0:6d:fe:a2:04:1e:8d:3f:3e:ac:96:29:68:72:fd:
31:cd:4d:40:e2:dc:50:f5:4a:5c:29:8c:6b:08:2e:d1:0c:02:
ab:1b:28:ab:9d:eb:1d:e7:2a:a3:c6:36:38:17:39:2e:d3:56:
7d:fd:d3:fb:f7:a5:4b:30:7e:4d:af:c9:02:0c:cb:15:07:3e:
c5:63:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:12:50 2026 by rpki-client