Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130382e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Sm2rElbgXthvPGB+EBDiIWLmn+DbhESxNRpyun4cpVs=
Subject key identifier: F1:9C:18:A8:FE:A2:AD:29:DD:F6:B8:94:D9:84:44:90:57:C9:ED:06
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 753434D499FABC6DA931F40A7A4D49C2554C3379
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:40 +0000
ROA not before: Sun 28 Sep 2025 20:42:40 +0000
ROA not after: Sun 27 Sep 2026 20:47:40 +0000
asID: 136787
IP address blocks: 156.67.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:34:34:d4:99:fa:bc:6d:a9:31:f4:0a:7a:4d:49:c2:55:4c:33:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:40 2025 GMT
Not After : Sep 27 20:47:40 2026 GMT
Subject: CN=F19C18A8FEA2AD29DDF6B894D984449057C9ED06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:32:e5:d8:de:5c:ec:84:07:83:d0:10:18:
4f:18:72:19:cb:24:00:e1:9d:bc:7a:c4:d5:86:02:
9a:40:28:9b:90:3a:99:00:75:25:fb:91:6c:83:96:
9e:6d:66:87:39:1b:eb:c2:42:e4:2c:77:44:d9:2f:
11:47:a0:8e:f3:ef:8a:30:51:46:10:30:f5:6a:45:
92:88:df:47:93:64:79:25:56:7a:81:66:c7:0e:e4:
c4:39:88:48:d5:cb:6b:a8:7b:ad:5a:0b:f1:2a:c8:
d0:3b:51:46:e7:36:7a:da:de:77:55:d0:2a:58:28:
79:f2:4b:cd:a9:44:c8:c4:35:87:3c:04:5a:54:77:
d4:80:98:40:77:a7:76:b8:55:ba:78:3d:e8:3e:fa:
5d:d5:6d:47:30:17:33:e4:c9:37:5f:92:42:3e:0e:
33:16:77:b9:a2:8c:5c:95:a2:c4:d9:7d:d7:72:50:
46:06:a0:12:6b:3c:7f:96:4d:78:c5:2f:7d:ed:cf:
f5:d3:16:de:ed:5c:80:6c:87:37:e4:1e:a9:70:7b:
7c:ea:32:02:d4:65:c9:f5:24:8c:35:77:cb:21:6e:
ca:2e:4c:ff:49:49:44:45:e9:89:b6:05:bc:de:20:
2b:74:ec:ae:c0:71:20:17:cf:72:10:d7:d1:0a:f2:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:18:A8:FE:A2:AD:29:DD:F6:B8:94:D9:84:44:90:57:C9:ED:06
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.108.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0c:b5:0b:6f:f5:06:af:1a:f8:19:e3:61:5a:64:bf:89:d9:
ae:14:85:9a:6a:5c:12:72:19:04:d0:29:b6:7e:62:3b:03:2c:
7e:70:77:86:30:47:41:7b:f8:7e:47:2f:13:43:ef:ad:cf:2a:
12:75:fc:ef:e2:f1:08:8f:87:16:be:55:12:dc:20:a4:1f:0a:
86:24:bb:e9:a7:42:80:c2:c3:33:64:13:8b:81:79:67:ec:fe:
9e:7c:6c:95:2d:ac:83:9e:d3:cb:7f:8b:16:1d:a8:a0:c5:4c:
59:10:f8:cb:d6:06:b8:08:36:37:a6:d2:84:53:1d:92:96:4b:
b1:5f:39:4d:a2:d9:7a:db:20:e8:62:4f:17:9b:df:3f:fe:2c:
37:0e:d9:fa:ff:04:c3:6e:2c:89:cd:fb:70:aa:9b:c9:c9:bc:
03:19:21:0e:a9:2b:63:1f:78:ae:a3:cd:41:27:3f:c7:e6:41:
98:08:78:6a:a8:4f:82:7b:73:b1:d2:b3:b0:cf:fc:b3:f2:5a:
59:9f:c7:4f:64:9d:c9:82:25:9d:8d:9e:5c:17:ed:22:fa:fb:
71:ee:ff:35:c6:7f:2a:6f:05:9e:de:56:98:74:e6:86:57:e3:
2e:d8:68:44:99:6a:50:6c:4d:89:fc:01:9f:4b:5f:c9:7f:f0:
98:84:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:05:41 2025 by rpki-client