Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: BD05rJ1ED70H4eMxYGyIY2aB7/RYj/7W/mIOmiaP590=
Subject key identifier: 56:EF:84:9A:21:3A:FB:04:C8:68:B3:76:29:A8:FD:0A:04:9A:1C:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7AC1ABE73E8553DD32DDD53C0865E88C19C3C431
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:38 +0000
ROA not before: Sun 28 Sep 2025 20:42:38 +0000
ROA not after: Sun 27 Sep 2026 20:47:38 +0000
asID: 136787
IP address blocks: 155.133.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c1:ab:e7:3e:85:53:dd:32:dd:d5:3c:08:65:e8:8c:19:c3:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:38 2025 GMT
Not After : Sep 27 20:47:38 2026 GMT
Subject: CN=56EF849A213AFB04C868B37629A8FD0A049A1C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:78:69:4d:f6:8b:02:30:d1:15:72:27:98:
81:28:7f:f1:9b:80:43:f4:8a:e5:0a:ef:68:d5:20:
7c:73:ea:be:de:b0:f5:47:f2:f8:3a:cf:e3:0c:bd:
e1:53:39:aa:be:b7:91:b1:bb:f0:3e:31:1c:61:8e:
49:9b:4e:6c:2e:6b:6d:96:37:1d:8a:10:01:b2:7b:
bd:c9:9f:3e:28:b9:56:88:95:29:da:00:51:46:33:
84:d1:66:41:bf:be:b3:66:a5:ee:6f:88:6e:39:68:
41:0c:3e:6c:88:dc:5a:a0:66:95:2e:59:03:69:da:
ca:1e:eb:8a:06:01:25:1a:08:72:09:0d:f5:f6:02:
8b:92:85:1f:1c:0e:a5:d5:cd:0e:7c:01:e3:a3:6c:
87:57:0f:79:d5:8c:62:84:72:b8:01:63:c2:61:c2:
8b:6b:fe:78:1f:d6:46:f2:36:89:54:7d:9e:79:a1:
04:b1:76:53:5e:17:6c:d8:2c:c4:c0:da:af:e1:78:
18:3d:a3:81:bd:4f:61:ba:6c:7f:ed:12:27:8b:4e:
7e:9b:e0:b2:22:cd:e2:0e:7d:ec:45:3e:78:fc:ad:
e0:2b:ad:cd:f3:7b:b2:11:ca:7d:25:b9:2e:94:ef:
8d:db:d0:cc:52:3a:f3:23:64:b8:39:15:a2:6e:24:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:84:9A:21:3A:FB:04:C8:68:B3:76:29:A8:FD:0A:04:9A:1C:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:56:96:3a:d7:f6:0c:94:1f:27:8d:c2:b2:70:02:d8:f8:01:
30:65:d6:9c:95:8e:b7:3d:c6:d8:a8:4e:68:a0:aa:41:9c:26:
db:1c:57:ca:ec:77:cf:db:79:3f:42:07:3b:8b:11:79:c3:ab:
5a:92:f7:e4:fa:42:fe:25:25:db:bf:38:d1:1c:4a:e9:a3:11:
89:74:b1:33:d8:90:84:6c:f0:1a:78:f1:52:2f:73:f0:1a:f2:
88:e7:4c:cb:ff:98:c3:6f:8c:47:19:6e:70:4e:bc:cf:8d:56:
23:b5:76:42:5d:02:06:be:48:65:d9:a7:f6:ed:24:7d:81:52:
e4:5a:a4:4f:a0:c3:ee:27:da:ab:a6:a4:c4:ac:07:82:29:be:
28:9f:98:58:e9:be:63:cf:f3:dd:91:58:e2:30:dc:e0:24:19:
2f:4a:65:87:cb:18:3e:fb:9f:9f:49:54:c2:57:c2:f9:a0:7e:
f5:05:30:e5:a6:b1:4a:6f:f9:62:ed:e6:f9:9f:d1:71:0b:98:
5a:56:4c:1c:07:ce:f7:43:e1:96:5f:87:c7:d1:a5:b7:27:a3:
f6:b1:f9:a2:fb:1c:9c:17:71:8c:ec:a8:77:69:80:ed:49:78:
3d:92:44:7f:fc:32:ec:fb:4f:f0:f8:d2:8f:31:e4:d5:04:cb:
c0:48:3b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:57 2025 by rpki-client