Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37352e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: WlVT02H70HNg/kntZVoccr/59RgAsGbBG4Iw8VXd2yM=
Subject key identifier: 2F:F7:43:3B:38:AB:68:E7:82:24:8D:31:77:F9:C4:69:29:2D:A0:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76B6CD6C9E1B4031641D58A3874DEABFF7236244
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37352e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 11 Aug 2026 22:27:49 +0000
ROA not before: Tue 11 Aug 2026 22:22:49 +0000
ROA not after: Tue 10 Aug 2027 22:27:49 +0000
asID: 136787
IP address blocks: 158.220.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b6:cd:6c:9e:1b:40:31:64:1d:58:a3:87:4d:ea:bf:f7:23:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 11 22:22:49 2026 GMT
Not After : Aug 10 22:27:49 2027 GMT
Subject: CN=2FF7433B38AB68E782248D3177F9C469292DA0D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:bf:df:a3:93:a0:c6:71:37:46:90:f6:9e:
2d:47:a4:d2:21:19:62:21:a9:70:1c:8d:7b:e0:7d:
6a:f5:45:d0:db:e5:7d:e5:b6:b2:5a:83:ae:13:e3:
87:97:27:9e:23:ae:a1:66:54:75:52:57:77:18:9a:
0d:af:e6:16:93:55:0b:c6:38:fe:12:a3:2c:59:ea:
ab:73:0e:f8:db:a4:22:6d:04:58:dc:fd:db:e1:23:
79:e9:cf:85:1e:9a:a8:f9:72:82:b3:22:55:ea:08:
2c:6a:dd:f2:57:03:af:cd:c4:44:63:77:46:f5:07:
75:9f:0e:7d:44:33:30:e1:cd:56:dc:bc:47:bb:b0:
f2:a4:d1:d3:5e:0f:db:8b:59:d8:32:2a:64:f5:88:
4f:e3:39:c0:bb:0f:28:5b:ff:30:00:d2:71:b8:1f:
02:3a:18:ee:73:87:18:ea:a2:6f:90:fd:cd:5d:b6:
ea:60:5b:c5:dd:64:c5:23:d7:84:57:06:be:c9:59:
9f:ba:0b:a0:d9:a0:9e:fe:15:c3:63:53:bd:f3:14:
db:f6:29:0a:2b:17:88:c0:09:6a:33:c3:aa:c3:21:
1c:21:f8:42:4e:0c:ae:23:92:01:57:b5:59:f8:62:
1d:b1:c5:e7:b3:11:dd:29:83:5e:88:dd:7c:a6:7b:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:43:3B:38:AB:68:E7:82:24:8D:31:77:F9:C4:69:29:2D:A0:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1f:60:5d:2e:ce:43:32:ef:32:b5:56:cd:bf:93:a0:c5:69:
31:18:6e:43:8d:86:2a:ce:33:9e:25:04:8e:d8:af:4e:dc:3a:
9c:c3:4a:bb:4d:18:b0:fe:d7:e2:3d:d5:ec:5a:af:f6:2c:8b:
84:0e:1c:f5:c8:af:b5:60:fd:4a:0d:16:12:04:92:f7:e5:37:
63:d9:e6:9c:96:9c:d7:bb:a3:ab:3a:53:7e:12:3e:88:39:64:
a5:3b:f0:79:43:fa:b8:b1:19:c6:72:0c:81:b0:a3:08:6f:aa:
f2:ab:77:5b:b7:c0:e5:94:19:a4:6e:60:01:24:b8:8f:48:51:
02:9f:86:5e:ab:29:c3:f3:57:71:9d:7b:6c:7c:cd:5d:74:2b:
da:8e:7a:65:a2:8f:5c:b9:56:d7:6b:5f:b7:3d:9f:2b:b0:62:
4c:8a:21:ca:f6:f9:48:d5:e8:11:29:3d:71:2a:dc:34:c9:77:
1b:dd:3c:47:31:b2:29:1d:0d:7d:10:ad:ef:64:de:28:da:34:
cc:07:12:28:f3:13:2a:d5:58:d2:7d:9d:27:55:a8:eb:f2:a7:
69:d6:a5:71:78:1a:8c:b6:13:78:a8:34:18:c6:30:7b:aa:dd:
2b:9a:09:53:a2:33:50:d1:c5:ec:db:40:b7:f3:76:11:6d:3d:
f0:10:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:24:51 2026 by rpki-client