Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ft8B7m/S7847GTTcgdU4FUdmzaoV5Nn47LIfbDXLeww=
Subject key identifier: A2:91:AB:70:31:3C:46:B0:9B:8A:B6:72:E2:51:E3:8A:4A:EC:A9:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 089AC2C989ED2D6493F16D4A821C567E2C32DDE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:41 +0000
ROA not before: Sun 28 Sep 2025 20:42:41 +0000
ROA not after: Sun 27 Sep 2026 20:47:41 +0000
asID: 136787
IP address blocks: 155.133.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9a:c2:c9:89:ed:2d:64:93:f1:6d:4a:82:1c:56:7e:2c:32:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:41 2025 GMT
Not After : Sep 27 20:47:41 2026 GMT
Subject: CN=A291AB70313C46B09B8AB672E251E38A4AECA92D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:81:fb:a7:c8:24:39:7f:a8:e6:fc:17:30:
e3:c2:21:cd:d5:f9:c0:66:0c:10:62:69:f4:6f:a8:
51:da:89:df:6b:4a:9c:40:4d:b7:37:7a:96:03:af:
ee:7f:09:4b:99:25:78:1d:29:dd:6d:d4:85:d7:93:
f1:99:19:ab:70:f9:59:3c:25:9a:53:ef:b1:82:18:
48:c2:19:1c:41:ad:af:ae:bc:e8:d6:b3:86:a6:38:
a3:f7:fa:c7:91:e5:99:6b:e4:15:b7:07:04:6a:0e:
37:6f:af:65:b0:72:45:d0:bd:e6:a1:56:95:41:a4:
d1:c1:f2:41:70:7f:9e:c3:dc:65:b5:f4:2e:f3:56:
19:e5:bb:27:77:28:5a:a3:30:8f:43:63:65:f0:98:
0c:17:05:1c:90:00:e5:45:a7:a0:e9:b9:e0:cc:31:
e8:de:60:90:d9:0d:16:c7:b5:71:51:44:e7:39:56:
1c:c4:40:2b:96:1b:19:03:80:c9:5e:f1:51:b6:e5:
d1:74:80:ae:6d:10:b4:ab:1b:8c:55:80:a0:21:77:
92:47:ee:32:f3:a7:7d:65:50:0c:21:cc:b3:06:4d:
21:61:46:67:95:36:79:b0:53:57:2d:58:f0:40:ad:
13:1a:36:6e:28:f0:7f:9c:96:57:c1:dc:5b:c1:7b:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:AB:70:31:3C:46:B0:9B:8A:B6:72:E2:51:E3:8A:4A:EC:A9:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.67.0/24
Signature Algorithm: sha256WithRSAEncryption
96:74:b2:0e:69:ab:a0:a2:35:10:c9:7b:56:e6:1f:85:c3:c1:
17:7a:98:63:de:0d:b0:a2:e9:31:72:79:59:45:76:b9:96:74:
de:a1:07:c7:7e:6d:54:02:32:e6:eb:a4:f2:ca:0f:41:dc:94:
67:d1:e8:16:a0:50:6b:38:59:5d:8c:16:74:41:e8:a6:f4:8f:
c6:4c:20:b7:d7:ac:e3:4f:3a:d5:5e:55:31:4a:f0:01:93:cb:
68:84:d2:04:4f:4b:66:f1:93:7e:55:ef:1f:ee:24:8e:7b:32:
48:2f:07:dd:26:e5:92:72:4d:48:07:22:a9:b0:1c:38:65:26:
66:fb:35:d8:23:ea:8c:74:0a:34:36:09:48:9d:d9:14:22:33:
a1:e4:3c:a9:32:13:33:80:f0:23:19:fb:ed:86:d1:e4:79:7b:
4d:eb:6b:82:05:41:8b:27:1d:35:01:36:26:2b:ba:52:f3:4b:
54:72:b1:1a:0c:87:26:94:50:94:c1:e1:de:be:9b:a9:7f:58:
e9:22:2f:70:4b:54:7b:7d:70:1e:3b:93:90:8f:e5:98:6d:fe:
ec:b9:b1:41:fd:2c:8e:e3:24:83:64:d6:54:44:3b:8f:e3:bb:
e2:d9:32:e7:ae:c2:c3:1c:f0:07:65:e5:8f:10:70:e6:c3:5f:
70:34:2d:1f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUCJrCyYntLWST8W1KghxWfiwy3ekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MjgyMDQyNDFaFw0yNjA5MjcyMDQ3NDFaMDMxMTAvBgNV
BAMTKEEyOTFBQjcwMzEzQzQ2QjA5QjhBQjY3MkUyNTFFMzhBNEFFQ0E5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2oH7p8gkOX+o5vwXMOPCIc3V
+cBmDBBiafRvqFHaid9rSpxATbc3epYDr+5/CUuZJXgdKd1t1IXXk/GZGatw+Vk8
JZpT77GCGEjCGRxBra+uvOjWs4amOKP3+seR5Zlr5BW3BwRqDjdvr2WwckXQveah
VpVBpNHB8kFwf57D3GW19C7zVhnluyd3KFqjMI9DY2XwmAwXBRyQAOVFp6DpueDM
MejeYJDZDRbHtXFRROc5VhzEQCuWGxkDgMle8VG25dF0gK5tELSrG4xVgKAhd5JH
7jLzp31lUAwhzLMGTSFhRmeVNnmwU1ctWPBArRMaNm4o8H+cllfB3FvBe/4PAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUopGrcDE8RrCbirZy4lHjikrsqS0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM2
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACbhUMwDQYJKoZIhvcNAQELBQADggEBAJZ0sg5pq6CiNRDJe1bmH4XDwRd6mGPe
DbCi6TFyeVlFdrmWdN6hB8d+bVQCMubrpPLKD0HclGfR6BagUGs4WV2MFnRB6Kb0
j8ZMILfXrONPOtVeVTFK8AGTy2iE0gRPS2bxk35V7x/uJI57MkgvB90m5ZJyTUgH
IqmwHDhlJmb7Ndgj6ox0CjQ2CUid2RQiM6HkPKkyEzOA8CMZ++2G0eR5e03ra4IF
QYsnHTUBNiYrulLzS1RysRoMhyaUUJTB4d6+m6l/WOkiL3BLVHt9cB47k5CP5Zht
/uy5sUH9LI7jJINk1lREO4/ju+LZMueuwsMc8Adl5Y8QcObDX3A0LR8=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:38 2025 by rpki-client