Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130392e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eLMrCmP2kCAluoXyNdrJimZFrvisCMS5GBcasied0kk=
Subject key identifier: B5:CB:B6:2E:66:D3:EF:E8:8C:84:83:99:2C:55:B8:8E:59:BA:D5:8B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: EC9359441BFCE02A5FF832B3B176F33C6075DF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:39 +0000
ROA not before: Sun 28 Sep 2025 20:42:39 +0000
ROA not after: Sun 27 Sep 2026 20:47:39 +0000
asID: 136787
IP address blocks: 156.67.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ec:93:59:44:1b:fc:e0:2a:5f:f8:32:b3:b1:76:f3:3c:60:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:39 2025 GMT
Not After : Sep 27 20:47:39 2026 GMT
Subject: CN=B5CBB62E66D3EFE88C8483992C55B88E59BAD58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:67:dd:03:85:86:b0:39:62:67:94:e2:45:
63:5c:bb:ef:b4:44:23:99:22:44:74:d7:55:a6:e6:
61:3d:08:1e:af:fa:4b:f5:47:e7:5e:59:b4:b2:61:
00:2f:bd:85:ae:19:9b:2d:4f:91:7b:55:2d:03:f3:
b8:bd:01:28:e2:e0:1b:c2:69:57:bf:2a:c0:fd:66:
34:ed:ca:03:ef:53:c6:32:5a:c5:f0:a3:9c:ee:83:
03:26:f8:36:36:ce:68:59:67:95:1c:e5:53:da:45:
cf:39:c5:94:2b:e4:ae:01:35:6c:d8:fa:76:36:0a:
33:fb:df:0c:45:30:30:bd:b9:fc:02:05:ba:70:92:
56:a0:82:65:07:7d:40:3a:2e:7c:ff:2d:f7:31:6f:
2d:e1:39:82:93:99:ed:d4:ea:6f:e4:1b:81:07:36:
73:00:53:9d:3f:1d:00:a4:7c:d1:13:a1:b4:e5:b8:
af:be:d7:c9:4d:9e:f7:d7:27:a7:72:e2:70:d9:1b:
45:cb:95:1d:6f:e4:98:42:5e:81:8b:b2:1f:0f:ba:
e5:ee:10:70:2a:6e:59:ae:e3:cc:d7:35:f5:f0:6c:
53:4c:00:4b:30:45:d6:b6:2c:c3:ff:87:61:dd:fe:
c7:20:24:9f:9d:49:86:bc:f2:e3:b0:82:e4:8d:61:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:B6:2E:66:D3:EF:E8:8C:84:83:99:2C:55:B8:8E:59:BA:D5:8B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.109.0/24
Signature Algorithm: sha256WithRSAEncryption
74:88:2d:fc:57:c3:e6:ae:7d:45:c5:42:e7:36:27:b2:da:bf:
f0:58:49:26:6e:5e:2e:b9:2b:1e:57:13:bb:26:d1:35:de:fa:
fd:4e:ed:76:21:d3:b7:71:a5:02:c7:59:f9:ef:13:90:0f:56:
86:2f:5a:01:32:7e:81:c9:6e:08:65:4b:94:9b:8b:73:bb:55:
14:31:0c:3f:18:ae:cd:be:34:48:1e:2b:f2:0d:b6:f8:dc:81:
b7:97:7c:62:6a:e7:d6:55:c3:13:80:39:17:2e:3e:de:b7:da:
b7:87:1f:7f:97:37:85:05:73:6d:2d:0d:46:82:7c:0b:6b:5d:
64:1d:ad:88:e9:6d:b1:14:63:da:c7:b5:43:4d:5b:17:70:8e:
e7:8b:cc:d9:9a:7f:09:7b:44:e3:12:2b:f0:9c:17:7b:5b:75:
a3:23:65:e6:6b:b8:7e:b3:83:34:67:24:e8:0b:3a:6f:b4:6d:
e5:b1:02:09:d1:28:5c:f7:74:56:c7:89:32:fe:07:44:2e:ac:
9a:13:81:fa:4c:de:8e:52:10:0d:ac:bd:07:76:a8:4b:08:7d:
33:09:d6:6e:8f:d4:b4:50:d4:d7:7a:b5:0b:c4:f6:1b:81:ad:
3e:9f:4c:df:02:76:cc:e1:c9:9b:e3:61:bb:6b:8f:5a:fd:24:
d4:67:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:07 2025 by rpki-client