Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: wAYte7aGt4tE7FkLgW+Ea738PWGY388yplytKKu1reE=
Subject key identifier: C2:23:93:B7:71:B6:DA:58:BB:DA:42:8C:00:95:8E:CD:D6:7D:B9:A3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 273FA72044FB7DF9F4BB16E869F2E1F70BA18174
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 05 Aug 2026 08:27:38 +0000
ROA not before: Wed 05 Aug 2026 08:22:38 +0000
ROA not after: Wed 04 Aug 2027 08:27:38 +0000
asID: 136787
IP address blocks: 158.220.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:3f:a7:20:44:fb:7d:f9:f4:bb:16:e8:69:f2:e1:f7:0b:a1:81:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 08:22:38 2026 GMT
Not After : Aug 4 08:27:38 2027 GMT
Subject: CN=C22393B771B6DA58BBDA428C00958ECDD67DB9A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:e7:e5:b8:df:1e:f5:13:78:aa:96:a8:6d:
87:db:7b:ac:e1:45:56:ab:2c:20:12:85:aa:38:54:
0d:85:fb:a6:24:4d:04:b1:3f:d9:41:aa:8b:5a:47:
6d:ab:c0:f0:11:46:09:7f:f2:34:5c:a2:b4:b6:5a:
a7:5a:ee:61:36:b7:d1:a5:93:8d:ff:89:44:35:d5:
d3:47:9d:b2:71:d3:29:5e:c1:7f:5a:02:72:bb:68:
30:c4:ae:ed:cd:a5:63:cf:7b:57:87:94:fc:1a:e4:
43:fe:d3:82:3b:10:50:16:b7:86:77:c4:9b:ca:47:
c7:f6:ff:cb:2c:ae:1b:6e:4a:6e:38:f8:03:c9:c2:
5d:15:4a:31:74:5a:37:d9:1c:dc:d9:14:22:a2:8f:
53:76:b9:5a:65:7f:ef:6a:9e:cf:14:68:6d:af:21:
93:47:7f:d6:6d:14:e5:fb:76:87:b3:a3:7e:78:44:
0b:62:85:38:3f:6b:cc:97:53:85:b2:f9:3a:8a:f1:
f4:92:43:8f:cc:bf:a4:a6:58:46:27:82:76:07:be:
9e:3f:e7:5c:00:eb:b2:ae:6b:7f:8f:91:db:ea:56:
a8:bc:67:b2:bc:b4:4b:c3:7f:79:2c:22:83:9b:e2:
0a:1f:ad:43:d5:94:b1:52:88:77:7f:60:27:03:54:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:93:B7:71:B6:DA:58:BB:DA:42:8C:00:95:8E:CD:D6:7D:B9:A3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.76.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e7:45:f3:fd:ca:02:9b:cf:74:19:1e:2b:eb:7f:5b:e1:4f:
0d:8a:35:8d:b9:1a:8a:01:bc:70:8a:c4:33:a5:f1:5c:97:f6:
5d:2f:69:90:d9:d6:90:aa:40:14:fb:b2:09:ba:d7:98:1d:ad:
3b:16:18:d7:37:23:1c:40:0a:64:8c:67:c9:b2:3b:77:ad:32:
fd:21:65:83:7c:92:2a:91:f8:f7:2a:8e:56:28:38:dd:16:bd:
27:d7:ba:f3:4c:13:92:bd:47:88:45:b4:b6:7d:7f:b2:18:45:
81:2d:4a:bb:67:73:cc:06:06:62:f9:d5:e4:c3:6a:7f:32:df:
d6:73:bf:43:c4:cf:0b:77:3e:c9:2f:12:6a:95:89:32:26:6d:
3e:98:56:ca:db:2f:c0:cd:ac:b5:cb:87:38:20:7d:fa:4a:80:
f8:7a:1b:5b:bb:9c:6d:ae:24:78:db:60:de:76:64:c5:3a:1a:
83:4f:99:da:1e:ef:ab:81:e8:bb:3a:70:96:3e:2c:d1:35:5a:
a7:7f:9f:cf:cd:36:c9:17:27:51:f6:da:4e:9f:64:95:b4:b7:
7f:89:65:f1:30:7d:2e:b0:c2:97:c8:a5:fc:a5:b8:da:1d:60:
50:6b:52:59:d0:16:d1:7b:d2:1d:67:96:8c:4e:d6:a3:86:10:
62:4a:ce:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:23:28 2026 by rpki-client