Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e362e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4Azu7YTiWYd/nYTTA2xcoL4eVpusjOAFTMpJJ4WJvTE=
Subject key identifier: CB:B7:74:8E:60:D4:A0:B2:D1:94:13:AD:34:EF:1C:B2:A7:81:BC:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 312CD027B4C82769F76255EE1E6785873A93750C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Mar 2026 12:23:25 +0000
ROA not before: Sun 15 Mar 2026 12:18:25 +0000
ROA not after: Sun 14 Mar 2027 12:23:25 +0000
asID: 136787
IP address blocks: 155.133.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2c:d0:27:b4:c8:27:69:f7:62:55:ee:1e:67:85:87:3a:93:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 15 12:18:25 2026 GMT
Not After : Mar 14 12:23:25 2027 GMT
Subject: CN=CBB7748E60D4A0B2D19413AD34EF1CB2A781BCC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:ce:43:ce:6d:0a:ab:a5:96:95:45:ca:b9:
05:22:56:7a:b2:b6:7b:68:12:87:da:a8:ee:ca:43:
69:22:26:44:d8:7c:8f:cc:36:d9:49:16:ee:5d:51:
e1:c0:a6:91:1b:69:65:27:91:08:10:39:2e:9b:24:
88:bf:12:18:2c:7d:32:fb:a7:29:41:45:cc:f4:f8:
e9:39:1d:c9:69:d8:22:1c:80:a3:0f:04:90:12:d3:
4d:93:7a:17:f9:38:e2:d9:c2:7f:00:32:60:3b:b0:
d3:73:de:03:83:e3:f0:57:02:07:5d:36:02:ca:55:
a6:4f:9a:2a:01:d8:77:97:aa:fa:7a:c1:a3:a3:4e:
30:bb:e1:6a:2b:13:97:73:a5:e2:9e:5c:05:9b:87:
3f:16:b0:43:34:19:51:26:6c:5b:d0:3b:d3:27:35:
f3:02:55:ff:8a:b5:58:e3:7b:2c:ba:db:3d:b6:a6:
c7:a2:14:b0:27:8a:e1:f7:68:ca:21:b7:41:5e:8c:
5e:5a:56:56:2f:ca:81:5d:b1:50:c2:a5:90:07:41:
f2:64:ee:56:b4:d1:d0:b7:3d:a1:c5:08:41:f0:08:
af:2f:de:e9:46:aa:31:0e:26:9f:b1:a8:39:4a:b8:
df:d2:3a:0a:90:ac:49:1c:63:ae:25:71:56:59:92:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:74:8E:60:D4:A0:B2:D1:94:13:AD:34:EF:1C:B2:A7:81:BC:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ce:10:c9:d9:33:e3:ca:2a:78:dd:b9:fc:4c:4c:ad:0e:74:
02:40:51:ec:61:07:d6:66:13:39:23:07:89:dd:70:66:44:8b:
52:55:0a:df:17:5e:4b:1d:de:13:d9:58:a5:72:46:59:b1:10:
1c:6b:10:bc:3c:3a:45:fe:88:e2:bc:3d:fd:87:39:72:a2:2a:
9b:54:6e:43:34:97:66:dc:17:46:6f:2b:cc:6e:1d:64:1b:f5:
c3:a0:33:fa:da:d4:1d:a7:41:84:41:bc:6b:c4:28:57:cb:11:
66:fa:8a:fe:04:ea:a2:82:0e:60:a1:9a:8f:8c:68:93:6f:46:
ac:84:80:73:b6:02:b7:6f:25:42:1f:89:3f:4c:94:35:18:50:
5c:6d:ca:29:61:7f:e6:dd:fa:63:ed:24:2a:06:e5:fc:8e:65:
df:b3:1f:ff:3b:d9:72:f8:b2:12:a1:2f:f8:36:2f:25:9d:b0:
d7:4f:12:7b:75:ff:30:91:1a:e1:99:f1:c0:98:fc:1a:29:9d:
bf:1d:c1:b9:15:d0:2f:2b:a0:cb:ba:67:30:9f:41:37:6f:00:
64:d5:76:e0:52:ad:8c:a0:c6:0c:1f:b4:04:56:a6:8b:2f:e9:
ed:45:3e:62:ee:a7:41:ac:14:3a:f6:bc:a5:18:5f:00:f4:01:
e1:99:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:29 2026 by rpki-client