Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ttFdyt1QCGEZNC2CVh7YsgZ/gMACLDPDBbnWYqKCOOY=
Subject key identifier: D2:FA:10:2B:05:55:4D:06:62:9B:54:E2:A6:36:17:9C:86:74:D3:36
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 370B3E3C7D5E6CC828EE3A0408DB6BFE713AC0DD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:41 +0000
ROA not before: Sun 28 Sep 2025 20:42:41 +0000
ROA not after: Sun 27 Sep 2026 20:47:41 +0000
asID: 136787
IP address blocks: 155.133.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:0b:3e:3c:7d:5e:6c:c8:28:ee:3a:04:08:db:6b:fe:71:3a:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:41 2025 GMT
Not After : Sep 27 20:47:41 2026 GMT
Subject: CN=D2FA102B05554D06629B54E2A636179C8674D336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:d8:11:9f:45:f8:83:b9:48:1f:0e:68:0d:
66:0e:6c:4d:ba:dc:e9:cf:7e:41:5e:92:f4:f3:7f:
c3:b2:65:67:f5:d2:d6:86:7c:46:06:9e:fd:94:48:
7f:f2:51:93:84:47:ce:7d:b0:9d:20:32:ad:3d:74:
fd:00:ca:9c:f6:50:07:6c:86:0d:4b:80:c3:12:92:
15:14:16:c3:69:b2:84:8c:8f:a7:db:16:c1:95:9a:
8c:0a:62:ff:fc:8f:f9:f0:06:89:9d:31:69:4c:9b:
a4:06:7d:ea:a1:fe:5b:b7:b8:80:e7:31:70:07:31:
06:62:3c:e3:80:e7:d5:2d:bc:30:c9:53:a1:a8:f1:
9b:32:5f:8b:3b:69:e9:65:3b:4d:fb:98:d1:6f:9d:
83:a1:9a:e2:cc:e7:6a:32:dc:94:ba:49:cc:77:13:
3f:4c:ea:8a:be:20:18:c3:47:fd:fe:13:71:6a:9c:
fe:a4:41:62:ed:c1:42:95:b1:84:0c:64:55:bd:d8:
2d:00:81:5f:71:d0:f4:ae:f3:d2:14:36:0f:5e:fe:
d6:37:89:24:d2:2f:5c:3d:2e:7a:ef:47:21:a4:a9:
a5:5f:7d:32:f9:7d:f1:b2:fe:ce:a8:77:3a:88:6e:
02:b6:36:47:13:d9:a6:d4:fd:b7:c0:90:61:f5:a0:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FA:10:2B:05:55:4D:06:62:9B:54:E2:A6:36:17:9C:86:74:D3:36
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:95:53:ec:54:cc:0d:10:de:38:29:f5:f7:76:19:6c:19:68:
7e:8f:5a:b0:9f:bb:38:7f:67:d8:f1:10:7e:37:ee:47:ed:a4:
a2:ed:53:4d:51:87:76:1e:c7:8d:be:85:df:19:a1:48:9a:e3:
63:2b:f4:fc:f3:4c:e3:5d:c4:18:85:4a:3d:ff:9c:0b:03:7c:
fd:3b:47:4b:75:d3:91:0f:fd:68:f9:36:52:68:16:40:00:42:
95:c6:fb:82:b3:bd:36:94:7f:78:9b:d6:48:05:f8:90:b8:58:
25:f3:3f:6d:2f:ad:6c:23:d2:c5:c6:d3:e9:80:c0:5b:54:b6:
ac:24:22:03:61:6e:e6:e6:a0:cd:3e:bb:18:39:92:92:b8:a4:
20:bb:e4:cf:9b:42:58:55:b7:42:eb:be:c6:cc:b9:f5:b3:2a:
29:72:fe:5d:a7:c7:6b:a1:a1:4f:70:1c:30:01:79:47:e3:31:
6f:4f:11:d0:3b:7a:d7:df:7e:d9:8a:71:6a:1f:89:7f:c6:c8:
c5:3b:7a:d2:31:ab:43:41:f0:98:67:5e:89:db:75:16:37:c9:
40:b7:a3:18:e4:3e:c8:1f:6d:2c:b0:d8:a8:dd:8a:b1:ef:9b:
6c:aa:dd:c4:38:2e:06:d9:4d:6a:d8:0c:2d:a2:64:8c:23:3d:
9b:34:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:59 2025 by rpki-client