Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132372e302f32342d3234203d3e203633343733.roa
File: 3135332e39322e3132372e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: yUdEHoJn5ZNcD4EphoPMJ22AGukYBt1fUj4XkzseDdE=
Subject key identifier: 6A:A0:E5:74:CF:CB:24:D4:6F:59:97:51:0D:77:E8:64:FE:8F:4F:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 60689F50325350D6B9C087D337DC81BC49DE8048
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132372e302f32342d3234203d3e203633343733.roa
Signing time: Mon 06 Oct 2025 10:47:49 +0000
ROA not before: Mon 06 Oct 2025 10:42:49 +0000
ROA not after: Mon 05 Oct 2026 10:47:49 +0000
asID: 63473
IP address blocks: 153.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:68:9f:50:32:53:50:d6:b9:c0:87:d3:37:dc:81:bc:49:de:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 10:42:49 2025 GMT
Not After : Oct 5 10:47:49 2026 GMT
Subject: CN=6AA0E574CFCB24D46F5997510D77E864FE8F4F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:6c:2b:7a:26:18:62:bf:11:df:4f:0b:2a:
1d:7b:ec:7d:9c:e8:d8:a4:33:2a:e9:df:a7:a8:8e:
38:67:cc:0a:16:07:54:6e:80:14:94:30:c9:0b:61:
2e:f7:5e:ec:62:99:03:e2:4a:e0:35:da:d8:c5:f8:
1e:b9:34:52:e5:17:10:23:10:bb:9d:b8:b2:80:af:
4c:21:fb:d6:92:9b:1a:32:e5:5a:89:72:19:7f:70:
d5:5a:be:4b:83:b8:f1:f7:64:33:67:d0:f9:61:e3:
f0:45:2c:21:4f:9c:10:0e:93:4b:87:54:f1:c5:15:
5b:bb:2a:f0:c6:a0:d2:3b:d7:82:c6:91:ca:87:c5:
97:f9:f7:4e:7f:9c:c3:5f:08:a4:fb:fd:4a:d9:ae:
10:70:31:04:11:3a:26:31:a1:87:b8:5d:dd:00:3c:
e9:60:40:b3:9c:5a:6d:9b:6d:5c:bc:91:1c:ad:e2:
da:cc:b5:e8:88:aa:39:1b:30:0c:d3:f6:8a:96:47:
dc:b5:f0:cd:21:d9:11:94:ce:b7:60:fd:c3:72:aa:
f2:00:e6:e6:58:2c:0e:b1:14:69:7e:15:5a:ee:1a:
2d:a1:85:b0:d1:99:6e:d3:0a:6f:3f:04:1a:31:c7:
9f:ff:5a:ba:e0:e8:12:ab:80:35:03:30:a7:65:23:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A0:E5:74:CF:CB:24:D4:6F:59:97:51:0D:77:E8:64:FE:8F:4F:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132372e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8c:e6:64:b5:be:70:48:46:a2:c0:be:58:91:38:6d:0f:8f:
38:23:96:0e:86:5a:e4:42:05:df:1a:39:0e:88:cc:7c:2d:2b:
a3:9e:03:4e:33:13:7c:bc:ca:d0:5a:1f:e1:d9:9a:af:04:53:
2a:7e:d6:25:28:6d:d4:40:7e:53:3b:03:18:a2:62:a7:cc:36:
75:4c:61:a4:d3:12:eb:89:1b:6f:31:41:53:8f:04:5b:7a:b9:
0c:ba:c8:07:2f:93:15:30:5a:16:85:b8:f8:50:b4:36:04:08:
b6:f7:68:12:df:1c:e6:d4:31:ac:ab:a4:4b:0a:f5:8b:e5:dc:
b6:77:48:39:c0:5e:50:87:17:e6:55:65:bf:7b:45:52:a8:13:
77:64:7c:b0:b2:77:67:16:4b:75:7a:f6:cc:bd:f7:3f:88:d8:
d4:73:ae:ec:bd:0b:f7:37:d1:8d:3d:a7:81:14:c5:ef:63:77:
9a:64:d7:6d:9c:f4:de:e5:c5:2a:6b:09:ed:a0:6b:7d:f8:cd:
f4:a5:a2:60:ea:f9:e3:7d:f9:99:80:b7:42:2a:95:c5:fe:96:
e9:53:a7:84:6a:c2:33:25:1e:0e:e9:f9:a4:bb:81:3f:1e:c2:
f2:f6:19:0f:0d:91:65:dd:5e:f6:6c:37:28:b2:c0:43:ba:86:
e3:ed:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:11 2025 by rpki-client