Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32312e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e32312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: V1pYYsQHeUmJY8SWo+MRLh+K7OnKE9fV1qpOhRytIHU=
Subject key identifier: 35:79:A3:8C:53:1E:1C:84:2D:CC:A3:40:59:7D:5B:E7:1E:65:58:E3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3CB1D9DD0661F8DFEA92140D643D2BC9495108AD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:40 +0000
ROA not before: Sun 28 Sep 2025 20:42:40 +0000
ROA not after: Sun 27 Sep 2026 20:47:40 +0000
asID: 136787
IP address blocks: 155.133.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b1:d9:dd:06:61:f8:df:ea:92:14:0d:64:3d:2b:c9:49:51:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:40 2025 GMT
Not After : Sep 27 20:47:40 2026 GMT
Subject: CN=3579A38C531E1C842DCCA340597D5BE71E6558E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:4c:57:23:ec:6b:3c:a8:60:b4:1a:b7:fb:
5c:95:c5:6e:a5:be:75:f9:0c:67:7f:0b:f5:6c:d2:
2c:5c:2d:08:bd:6e:2c:f0:e1:5a:26:17:7f:55:89:
fa:4a:17:95:59:cd:1d:24:1b:5c:2f:b7:20:b6:ff:
c7:fd:a0:c5:e0:26:25:b8:ee:df:4b:04:84:9d:4a:
a1:bb:f2:15:3f:95:34:fc:a3:9e:0b:26:b7:ae:50:
c1:96:2b:c8:62:29:d2:60:0a:bb:60:ac:73:c6:d9:
76:50:03:85:27:8f:38:a1:cf:a5:99:98:0e:1e:23:
44:d7:25:ff:cc:79:d8:f0:c6:04:47:b8:a8:56:84:
b9:07:55:bc:bf:ef:59:19:45:41:e3:92:d8:47:52:
97:7d:4a:98:f4:ce:d7:e5:c5:b3:58:f3:a2:cc:9d:
85:b7:45:fd:31:43:0d:c4:3e:62:aa:9c:39:f7:20:
51:63:94:91:bc:6a:4d:2c:91:6b:2e:3d:ef:fd:d8:
6f:78:e7:0c:49:98:8c:00:b9:32:a5:b3:95:01:bc:
e1:73:7b:cf:08:79:d6:32:4d:1f:6c:f3:81:c4:f2:
21:7c:20:fb:5e:55:56:8d:c2:ca:90:e3:ea:36:c6:
66:c6:92:c4:d2:bf:2b:5f:1d:c6:3f:a7:99:bd:f3:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:A3:8C:53:1E:1C:84:2D:CC:A3:40:59:7D:5B:E7:1E:65:58:E3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f9:ef:87:d2:47:1d:77:e5:b8:18:a4:bb:53:d2:0e:af:8a:
c8:79:10:f2:30:43:05:75:db:16:d5:4f:3e:ef:97:84:44:6e:
cf:b2:4d:16:57:eb:58:b8:a0:02:b6:47:d0:eb:12:3c:00:07:
d8:7c:dc:dc:cc:2d:39:bc:31:96:53:8f:ed:29:48:52:81:ee:
85:01:50:26:6d:65:8f:30:a2:bd:ad:d6:8a:4a:2a:7e:db:61:
a0:69:ad:45:ba:d6:f5:94:48:7f:08:07:31:a4:41:ad:5d:da:
15:07:07:87:a5:7f:04:de:d3:f5:ec:9d:e8:6c:62:75:e2:b3:
a8:0c:86:5a:f0:74:ce:0a:fa:84:2b:2c:16:0d:48:e1:dd:d9:
22:4d:7e:46:41:53:4f:8e:b5:c1:f8:5b:fb:5c:99:b8:ee:74:
35:f6:ed:f2:b5:e3:f8:65:fb:7d:9d:5b:8b:d8:2b:52:25:6c:
12:b7:27:2a:71:de:ae:d2:2b:98:d0:fa:0e:1e:2b:5c:db:8a:
cf:74:ec:50:7e:b0:0f:33:55:1a:60:08:9e:d0:7b:d0:35:95:
c4:74:ca:5a:44:5a:6b:1b:84:32:7f:eb:83:14:38:1a:67:bf:
75:ae:6e:24:32:fb:aa:b8:cd:5c:a8:63:5c:74:09:0e:83:65:
d4:01:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:47 2025 by rpki-client