Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130302e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: A/Y1Utm1QYvke+yMKls6dxllLYouBTjt/wzpypxSkQQ=
Subject key identifier: 63:08:56:91:D1:A9:BF:8F:F8:8A:D2:60:9B:88:97:C7:1D:9A:5F:68
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 277DD87395FBAD8369830D284FAAF440B2F64831
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130302e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Mar 2026 12:23:26 +0000
ROA not before: Sun 15 Mar 2026 12:18:26 +0000
ROA not after: Sun 14 Mar 2027 12:23:26 +0000
asID: 136787
IP address blocks: 156.67.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7d:d8:73:95:fb:ad:83:69:83:0d:28:4f:aa:f4:40:b2:f6:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 15 12:18:26 2026 GMT
Not After : Mar 14 12:23:26 2027 GMT
Subject: CN=63085691D1A9BF8FF88AD2609B8897C71D9A5F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:3b:a6:2e:20:0c:f0:09:31:43:b5:7d:e6:
c3:79:72:5d:2e:84:90:5f:18:8c:e8:1c:c1:82:df:
a0:96:e6:ec:bc:4a:7a:d3:1e:aa:aa:1b:0f:3b:3c:
56:7b:bc:a3:b2:82:20:5b:77:af:80:99:e2:54:34:
c0:b9:49:3e:5f:91:b3:9a:ee:ad:7c:19:c6:a4:53:
67:41:5d:b0:bd:8c:7d:0a:64:39:3d:ca:b3:0a:ff:
e9:ce:22:4b:89:fe:94:c2:35:7b:55:1f:de:27:09:
26:7e:fe:08:6c:80:d4:71:44:e5:a5:a3:6c:6f:f2:
7f:19:72:94:d9:ad:cb:06:b4:27:01:4d:10:46:c4:
27:87:f2:84:36:96:9d:a1:f8:cd:87:c1:82:cc:52:
43:6d:73:fd:80:10:10:74:76:ee:2d:97:d0:70:4c:
ec:12:af:af:60:ef:bc:b9:79:2f:f3:7c:4b:ad:15:
c1:06:4a:06:b6:f6:4a:24:77:54:bc:ee:ef:93:07:
cb:45:74:75:60:d0:49:54:a1:d0:a4:e2:2c:fb:a1:
3a:9c:40:f2:7f:d0:38:e9:2c:8a:c2:42:72:4e:97:
c3:d2:fb:8b:66:c5:38:70:20:47:7a:6a:d7:dc:ae:
a5:fc:30:5a:c7:87:be:4c:e5:0f:7e:48:5d:28:86:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:56:91:D1:A9:BF:8F:F8:8A:D2:60:9B:88:97:C7:1D:9A:5F:68
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.100.0/24
Signature Algorithm: sha256WithRSAEncryption
96:04:f8:75:4f:59:57:76:d6:3f:6a:d1:39:4a:18:ec:cd:e0:
70:7b:e3:05:0a:f9:36:0c:51:02:e0:e1:52:e7:ce:5e:1f:69:
25:64:2f:cd:a1:f2:fa:90:bf:55:18:d0:d8:e3:ef:96:07:07:
6e:74:dd:29:f5:99:e7:58:e5:08:8c:4d:bf:03:17:1e:d8:38:
71:5c:cb:1c:80:c3:95:5a:b8:fb:44:df:a0:a8:e0:79:5e:36:
18:52:85:bf:78:0a:31:64:91:aa:c4:c6:3b:08:bc:6b:a4:5d:
64:2d:b9:53:2f:8b:11:05:57:64:3a:93:6d:31:0c:b0:54:5c:
5d:1e:f9:85:45:83:89:99:fd:da:c0:3f:40:b4:21:57:62:54:
cb:f0:fb:a8:88:05:70:e7:5f:33:a7:64:f5:87:07:8f:e8:a7:
68:09:6e:82:a2:5c:54:d7:ef:3a:59:e6:2a:b3:31:aa:4d:50:
08:3b:c6:24:55:65:2a:a9:fd:1c:ad:a2:0b:b0:8a:da:ca:51:
6c:12:ae:79:c1:51:b9:9b:c2:73:a9:1c:0f:9e:da:5f:35:68:
60:d9:f0:a4:04:c8:be:dc:c3:d6:27:b8:44:95:63:0b:08:9f:
91:17:01:4e:80:bf:c5:96:42:15:e3:84:7f:80:70:e3:48:6c:
c4:14:49:36
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJ33Yc5X7rYNpgw0oT6r0QLL2SDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTUxMjE4MjZaFw0yNzAzMTQxMjIzMjZaMDMxMTAvBgNV
BAMTKDYzMDg1NjkxRDFBOUJGOEZGODhBRDI2MDlCODg5N0M3MUQ5QTVGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3zumLiAM8AkxQ7V95sN5cl0u
hJBfGIzoHMGC36CW5uy8SnrTHqqqGw87PFZ7vKOygiBbd6+AmeJUNMC5ST5fkbOa
7q18GcakU2dBXbC9jH0KZDk9yrMK/+nOIkuJ/pTCNXtVH94nCSZ+/ghsgNRxROWl
o2xv8n8ZcpTZrcsGtCcBTRBGxCeH8oQ2lp2h+M2HwYLMUkNtc/2AEBB0du4tl9Bw
TOwSr69g77y5eS/zfEutFcEGSga29kokd1S87u+TB8tFdHVg0ElUodCk4iz7oTqc
QPJ/0DjpLIrCQnJOl8PS+4tmxThwIEd6atfcrqX8MFrHh75M5Q9+SF0ohioHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUYwhWkdGpv4/4itJgm4iXxx2aX2gwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzMTMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACcQ2QwDQYJKoZIhvcNAQELBQADggEBAJYE+HVPWVd21j9q0TlKGOzN4HB74wUK
+TYMUQLg4VLnzl4faSVkL82h8vqQv1UY0Njj75YHB2503Sn1medY5QiMTb8DFx7Y
OHFcyxyAw5VauPtE36Co4HleNhhShb94CjFkkarExjsIvGukXWQtuVMvixEFV2Q6
k20xDLBUXF0e+YVFg4mZ/drAP0C0IVdiVMvw+6iIBXDnXzOnZPWHB4/op2gJboKi
XFTX7zpZ5iqzMapNUAg7xiRVZSqp/RytoguwitrKUWwSrnnBUbmbwnOpHA+e2l81
aGDZ8KQEyL7cw9YnuESVYwsIn5EXAU6Av8WWQhXjhH+AcONIbMQUSTY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:32 2026 by rpki-client