Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: LGUxoS4tYiNm9e12lWGr6s3nQkuwZsbdcQe1BuzlZLM=
Subject key identifier: 39:A5:80:62:43:79:FA:8F:E7:70:27:7D:BA:AC:47:57:BD:67:AA:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73D745F2877F79DB57116B2446F17D7FA7C16E61
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 05 Aug 2026 08:27:38 +0000
ROA not before: Wed 05 Aug 2026 08:22:38 +0000
ROA not after: Wed 04 Aug 2027 08:27:38 +0000
asID: 136787
IP address blocks: 158.220.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d7:45:f2:87:7f:79:db:57:11:6b:24:46:f1:7d:7f:a7:c1:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 08:22:38 2026 GMT
Not After : Aug 4 08:27:38 2027 GMT
Subject: CN=39A580624379FA8FE770277DBAAC4757BD67AA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:be:aa:b2:89:a4:04:14:1c:f7:be:4e:36:
39:55:1d:30:80:bc:d5:bf:f7:a1:c1:25:03:f0:41:
2e:fa:97:e2:15:8c:88:f3:64:2f:25:59:58:4b:09:
88:84:82:1f:90:77:14:ef:0a:1f:06:4a:9b:b0:6a:
0d:43:4b:dd:1a:40:5b:2f:b0:68:4e:8d:1c:42:61:
aa:7c:2f:95:0d:f0:1c:18:bd:f7:42:f4:aa:7b:34:
71:90:74:e0:29:54:d0:34:0c:b4:2c:c2:66:5a:0a:
db:c9:f0:7f:cf:01:4f:7a:00:ed:ac:70:fd:08:db:
35:cf:6f:2a:25:c7:62:24:ec:ae:18:8d:6f:b8:15:
e8:c4:51:72:1f:0e:79:71:1d:bc:a3:02:00:38:65:
cb:99:10:89:e1:e7:02:15:80:52:3b:1b:58:fa:59:
90:35:11:96:69:c0:ff:a3:94:5d:e2:1f:f1:82:03:
f3:43:79:67:e0:48:94:0a:08:12:6d:85:76:54:1d:
2b:07:9c:3f:60:e1:02:cd:7a:4f:06:a0:d3:0c:23:
29:28:15:39:5f:92:af:9c:d8:88:35:51:46:78:22:
4e:6a:b4:4f:89:88:0f:62:2c:07:eb:5e:c8:5d:d3:
b8:21:36:ef:db:41:5a:1d:ee:b7:24:d7:d6:15:6e:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:80:62:43:79:FA:8F:E7:70:27:7D:BA:AC:47:57:BD:67:AA:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:62:c7:e6:78:1c:04:4c:14:a7:19:98:71:3e:b7:2e:02:94:
ad:9a:7e:31:32:08:ce:b8:50:e3:a0:51:52:3b:6a:ff:9f:17:
e8:e9:37:5a:9c:ff:2f:90:6c:bd:4e:2f:28:c4:8f:80:45:a3:
64:2f:6b:2c:9d:9f:e8:8e:9b:63:76:01:08:24:d1:a0:1e:de:
94:81:c2:42:ee:11:ae:81:a6:34:fb:ea:68:54:80:5c:43:d8:
7a:24:da:aa:69:51:31:cd:4d:ff:ce:23:b1:ae:f7:49:7d:36:
10:ad:7b:e3:02:5d:a2:91:79:af:6b:5c:fe:be:e8:1e:10:37:
04:18:16:19:f5:61:66:9e:56:c6:32:69:ef:14:82:3b:ab:a4:
28:97:9b:c4:c5:74:c7:13:0e:7a:b1:de:62:90:14:e0:64:ba:
81:c5:4d:ea:57:ec:73:2b:16:d8:86:15:df:1f:0e:8e:ea:57:
c8:11:3a:82:38:52:f2:54:e5:6b:c6:4e:b2:76:6c:88:e9:37:
2a:99:6f:a7:14:6b:e1:1e:51:5f:46:c0:17:45:e5:bf:a8:e1:
e7:35:bf:b7:9e:bb:8b:bd:ba:75:86:93:63:80:12:3c:a8:e2:
3f:e6:8f:96:c2:dd:f7:d9:65:58:d0:18:67:08:16:6e:35:f9:
6f:c9:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:38 2026 by rpki-client