Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3132362e302f32342d3234203d3e20323132393638.roa
File: 3135352e3133332e3132362e302f32342d3234203d3e20323132393638.roa (raw, json)
Hash identifier: LWHi4J9ZSAQYHCA1ysiSPPg9natI/g3D2L9OQtJ42HE=
Subject key identifier: ED:A0:8E:2E:C4:BB:28:61:D8:34:90:DC:3C:AE:A2:C5:0B:D9:04:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C164754583845C056BCB7DCAD5F0389D2D13FA5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3132362e302f32342d3234203d3e20323132393638.roa
Signing time: Wed 13 May 2026 06:24:10 +0000
ROA not before: Wed 13 May 2026 06:19:10 +0000
ROA not after: Wed 12 May 2027 06:24:10 +0000
asID: 212968
IP address blocks: 155.133.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:16:47:54:58:38:45:c0:56:bc:b7:dc:ad:5f:03:89:d2:d1:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 13 06:19:10 2026 GMT
Not After : May 12 06:24:10 2027 GMT
Subject: CN=EDA08E2EC4BB2861D83490DC3CAEA2C50BD90470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:ce:5b:7a:df:01:b9:c0:ad:63:e7:38:8f:
bb:0a:aa:4d:90:6d:4f:6e:bb:35:df:47:4a:a4:a5:
44:79:df:06:af:32:db:bc:4e:8d:a1:e6:b7:89:29:
8b:02:64:10:e2:f1:c6:d2:db:f0:9d:4f:e3:c4:ae:
50:90:70:a9:a7:87:95:9d:5d:9c:5c:64:0f:ea:e5:
6e:68:5a:9b:0f:76:71:c2:50:1a:7a:a4:3b:9c:d3:
26:b6:bd:9c:96:7c:44:97:36:db:a7:f7:49:a4:4e:
51:37:e8:63:69:78:d4:24:b0:a5:b2:be:44:2e:8f:
78:ca:15:40:52:77:bf:d0:3b:b5:83:c5:88:7d:08:
c9:14:31:0b:0f:5b:c3:a3:e9:22:c5:b0:43:8d:fb:
c5:78:db:d4:9b:d3:04:e0:9e:08:0e:58:25:7c:99:
f5:b3:d4:93:cc:0e:ce:31:06:6b:7f:e2:07:17:d3:
3b:4e:34:1e:0b:8f:09:39:a3:88:20:e0:f9:0f:11:
18:d5:d9:df:fa:e0:42:f6:c3:a5:0d:38:cd:c8:1e:
1b:27:8f:20:4b:37:fb:96:20:5e:c8:b4:c8:6f:f1:
c7:7f:ab:29:62:99:4e:42:47:b4:63:c9:f3:f3:4e:
48:98:d0:c4:df:b0:2e:a4:90:a8:6d:e9:83:f4:65:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:8E:2E:C4:BB:28:61:D8:34:90:DC:3C:AE:A2:C5:0B:D9:04:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3132362e302f32342d3234203d3e20323132393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.126.0/24
Signature Algorithm: sha256WithRSAEncryption
16:60:43:6a:85:71:d1:ab:39:61:0c:37:cb:5c:a6:82:3f:a1:
b3:d4:29:af:d1:de:ef:5a:1f:98:b1:8f:4e:14:60:c6:7c:50:
9e:ea:58:11:e6:a4:38:0d:2a:89:48:2a:bc:5d:e5:83:7c:fd:
e6:60:fe:23:9a:c3:4c:cc:e0:13:a4:1c:98:0f:54:a1:78:89:
00:9c:e7:d3:9a:f4:54:9c:6d:1c:a1:7d:7e:b5:9f:b9:52:01:
7c:50:8c:f2:c6:75:09:b4:01:94:2a:b7:a8:bc:58:b0:06:1b:
87:68:5a:e9:b1:a0:5c:c0:0e:3f:9e:2b:3f:1a:8a:ee:29:93:
5f:e5:20:9b:1c:c1:15:29:72:19:a2:15:17:db:e2:d0:12:5b:
ac:ba:18:63:88:0f:51:a5:0b:7b:5e:4e:11:c5:7b:b8:22:8c:
5a:06:24:de:04:85:6e:df:50:c3:fb:51:a9:36:71:34:b8:c1:
7e:fb:6e:8a:3b:0d:ee:fa:e6:22:2d:e7:90:d7:70:87:8b:10:
37:42:19:4e:64:18:cd:2d:aa:41:c9:ea:9c:3c:f2:1c:0f:1b:
a6:63:f8:e3:98:81:16:49:78:39:32:3e:ca:a4:ce:d9:7e:5f:
4e:52:83:66:fa:16:cd:f8:7e:76:92:e4:96:eb:d1:7e:e6:b0:
4a:4b:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:33 2026 by rpki-client