Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: NAf+EIjzycR6tmKqGnLzRCHV8WdZ0TI0oFWJ6urfhEk=
Subject key identifier: 29:27:A0:CE:1A:91:6E:60:15:39:B5:F9:BE:1F:F2:8F:50:DD:F3:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77C90F5AFD1F15237B9A684F0894C92D955481AB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:15 +0000
ROA not before: Sun 30 Aug 2026 21:23:15 +0000
ROA not after: Sun 29 Aug 2027 21:28:15 +0000
asID: 136787
IP address blocks: 158.220.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c9:0f:5a:fd:1f:15:23:7b:9a:68:4f:08:94:c9:2d:95:54:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:15 2026 GMT
Not After : Aug 29 21:28:15 2027 GMT
Subject: CN=2927A0CE1A916E601539B5F9BE1FF28F50DDF314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:36:83:10:0a:62:10:16:1f:61:0f:30:b6:
82:f7:c2:dd:33:7f:ac:26:74:95:b4:68:22:cb:5f:
dd:75:c1:cc:37:b3:f5:27:c3:52:4f:fa:a6:1b:3f:
8c:91:40:6d:0d:18:9c:67:33:e6:5f:0f:05:21:96:
20:de:57:65:dc:eb:c2:05:35:7f:f8:a6:42:a2:50:
ab:c7:5c:0b:a6:13:76:ca:76:e7:43:8f:eb:92:80:
dd:81:bd:d5:59:85:0b:6d:91:a8:33:f4:43:9b:1c:
c8:82:81:27:9f:b7:b1:19:97:90:d9:98:4c:9f:c7:
f8:7f:43:9a:95:bc:be:a1:af:54:e4:41:e9:fc:32:
fb:0a:f7:fc:a8:f8:5a:55:42:15:99:f4:8f:34:88:
a8:1d:c4:0d:0c:c3:c6:66:69:60:92:f8:a1:1f:28:
cc:2f:8f:54:cb:08:2a:f0:77:2a:0d:fb:d9:64:1b:
8b:4f:da:f5:72:de:f2:6a:32:2d:db:49:bb:c9:00:
e8:18:4c:f1:97:33:aa:b5:68:20:c7:5d:48:b2:6f:
7e:f2:58:c1:c4:d1:93:09:41:3b:3d:16:22:66:7f:
bc:4e:dc:00:f3:d5:e6:5a:59:11:d1:14:6e:6f:21:
ab:8f:6e:c4:4b:0d:b9:b0:cf:cd:98:60:6a:78:9a:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:A0:CE:1A:91:6E:60:15:39:B5:F9:BE:1F:F2:8F:50:DD:F3:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.72.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6e:41:68:68:f4:55:e3:18:eb:e7:61:96:17:df:3b:0e:b7:
86:31:1f:34:f7:16:36:d1:6b:e0:dd:ca:6a:c7:6c:9f:e9:3e:
8c:fa:b3:ad:25:2a:74:47:5e:a5:5c:b6:11:a9:e2:f0:6a:e6:
cf:4b:05:22:92:c9:c7:b5:5e:82:c5:28:23:28:d2:51:ed:eb:
e8:1b:23:57:11:dc:35:11:58:f9:03:56:a7:d1:04:be:bc:a7:
38:22:08:b8:c0:dd:52:da:3c:76:d5:2c:78:59:f8:be:bf:8c:
22:37:05:07:e1:ee:4d:5c:d1:a0:fe:14:68:57:c1:cf:6e:09:
19:1c:4c:50:aa:8e:35:97:2a:b8:e8:a3:64:1b:80:0f:37:33:
c6:61:f4:45:cc:bb:66:4c:6f:63:92:d7:43:62:fe:0a:4f:5d:
82:fd:c7:81:2c:95:c1:e2:ca:09:d6:34:8e:7f:ac:88:c6:98:
cc:8e:c0:ee:73:6a:b0:5b:54:3d:eb:87:d4:d8:7a:74:73:a9:
a7:90:02:76:1e:66:94:f2:ce:02:b2:c6:7b:b8:ec:80:90:f4:
45:e4:f5:92:0c:af:cb:75:5d:ae:55:f6:76:2a:2f:8b:b8:29:
af:cf:c3:2a:ba:d8:00:17:9a:8d:ad:21:fd:0a:14:83:86:75:
59:61:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:42 2026 by rpki-client