Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: N5XopgHig22RBt8SJv6UZwr55IKkEDV6LzhD9HdbbQE=
Subject key identifier: BE:EE:6B:62:F9:B5:48:4B:BC:E8:A0:62:AE:47:88:DC:92:7E:A3:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43AF0F47DD9C05E1D6D5E715F41AEB3921B4408F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:42 +0000
ROA not before: Sun 28 Sep 2025 20:42:42 +0000
ROA not after: Sun 27 Sep 2026 20:47:42 +0000
asID: 136787
IP address blocks: 156.67.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:af:0f:47:dd:9c:05:e1:d6:d5:e7:15:f4:1a:eb:39:21:b4:40:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:42 2025 GMT
Not After : Sep 27 20:47:42 2026 GMT
Subject: CN=BEEE6B62F9B5484BBCE8A062AE4788DC927EA32B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:22:b9:d2:a5:a3:ae:2e:e4:7e:71:29:30:
94:f6:55:b7:e6:6f:b2:f6:7e:1d:94:82:25:b8:d2:
a3:03:7e:39:cf:5c:d5:62:7e:4e:70:6d:6a:8d:f0:
a8:d0:95:67:a5:61:55:e1:99:62:3d:02:3d:66:d1:
d3:1e:6f:1b:86:74:2f:30:91:f1:e8:73:e5:4b:20:
83:5f:60:50:1d:37:e0:57:5a:9a:ce:c2:b9:40:61:
40:52:c2:62:b5:4b:4c:03:69:94:97:20:c9:7c:ea:
e8:2c:4d:a8:8b:c9:52:54:19:fa:d2:92:07:01:34:
10:eb:15:62:ba:af:f2:29:ca:31:88:17:04:53:c9:
70:0d:85:a2:44:02:b0:c8:18:96:52:26:64:95:63:
d4:ac:74:d9:e8:60:44:72:80:a1:7c:ef:b6:6a:63:
dd:c1:a1:3c:b2:5f:b7:a9:b5:67:75:4e:1e:db:b5:
b5:6b:65:91:f8:62:6f:07:01:70:ea:8f:f7:ee:f3:
48:ad:09:58:c4:1b:88:77:36:0e:f9:41:55:2b:f7:
6e:9d:36:75:e7:ee:0e:ad:68:1a:79:cb:9d:2c:c4:
14:c4:52:6f:8c:d2:a1:bc:d7:7e:3b:e6:4f:a3:f5:
d9:c3:13:07:fa:d0:42:c2:9c:da:d5:af:2c:da:03:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:6B:62:F9:B5:48:4B:BC:E8:A0:62:AE:47:88:DC:92:7E:A3:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f9:dc:19:2a:34:44:fb:13:21:16:01:44:0c:23:53:2c:81:
f2:bc:eb:56:83:03:a8:77:52:62:f3:69:d6:b3:71:f8:51:ca:
52:6c:31:be:a0:06:f5:6b:20:05:28:90:53:af:77:0e:e9:93:
1d:6a:ad:55:a4:28:a9:a7:ed:74:09:53:ef:b6:7f:8a:2e:2f:
2f:9e:d6:bf:08:85:18:3d:0e:9d:19:6a:e2:78:7b:46:e9:de:
50:5d:b2:8a:bb:cb:8e:08:78:aa:61:43:b3:20:1b:d1:d5:6c:
22:4a:fb:6c:91:84:11:33:c6:15:0e:87:07:db:2d:70:d6:3a:
56:1e:70:b1:70:b4:3a:d3:8a:f7:ab:97:70:85:df:06:8d:a7:
7f:cc:86:8c:29:09:ef:24:a7:8f:54:b3:31:39:b5:91:99:be:
82:6e:89:93:c9:28:46:3d:65:e0:c4:63:cf:3e:53:4f:7d:75:
cc:ba:4d:be:0a:f7:44:2d:60:06:fe:ac:ae:7e:94:9f:d7:0e:
e5:7c:57:b7:1f:25:66:2f:0f:86:58:28:b3:ac:c9:89:af:1e:
cc:1d:84:77:86:1e:cb:a4:9c:6e:a8:27:60:9f:e0:cf:5c:d0:
97:91:59:4e:d4:4b:c3:7a:a6:47:33:f7:2d:1d:24:70:cc:1b:
02:47:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:43 2025 by rpki-client