Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: B5S+lLpWAiDQ07P6yB3Oumm5D9SJJfGPCh/jkgDJAMg=
Subject key identifier: 8C:CF:61:D5:45:11:EB:A3:62:4F:2E:94:10:B7:79:E6:B0:1C:28:52
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F5CFC82E8B87BB95EB51E9F9857A9FD3842677A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:38 +0000
ROA not before: Sun 28 Sep 2025 20:42:38 +0000
ROA not after: Sun 27 Sep 2026 20:47:38 +0000
asID: 136787
IP address blocks: 156.67.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5c:fc:82:e8:b8:7b:b9:5e:b5:1e:9f:98:57:a9:fd:38:42:67:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:38 2025 GMT
Not After : Sep 27 20:47:38 2026 GMT
Subject: CN=8CCF61D54511EBA3624F2E9410B779E6B01C2852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:b9:a1:37:c5:20:64:8a:4e:4c:de:ed:19:
76:a9:9c:28:79:6e:17:3c:c8:84:d3:b8:c2:9a:ce:
f0:11:5e:1f:a6:84:45:6b:13:39:29:dc:9b:17:35:
01:70:46:f1:86:04:e6:66:13:a7:d7:77:f9:05:7e:
84:1b:14:11:5a:b9:86:7b:3b:ff:8c:4f:c2:5a:f8:
f3:be:91:12:7f:12:f7:51:b9:2d:aa:50:fe:d3:76:
4f:6a:7d:0e:6d:76:3d:af:fa:4b:b6:75:4b:3f:47:
94:27:7d:42:45:9a:6c:6d:b2:a1:c7:2b:66:09:0e:
ea:23:a5:f4:10:35:94:6c:4d:a3:04:15:4c:56:69:
88:e5:6b:88:6a:67:dc:cf:65:89:7f:9c:11:ad:ef:
8a:aa:f2:67:37:f1:01:4b:05:b2:7d:4d:7d:99:47:
83:af:d4:77:8b:73:ce:c1:ce:ed:fb:a6:ca:12:67:
e0:5f:45:7b:4d:df:80:de:1a:b0:23:0b:82:d7:7f:
fa:0f:7e:1f:14:25:c7:7c:2f:50:d3:71:59:14:fe:
5a:59:b4:87:b4:d2:2f:1f:4b:3f:74:23:38:21:68:
16:20:12:f7:24:4c:80:45:2c:a9:41:21:52:6c:73:
c4:c3:3e:d6:63:4c:5f:45:b8:28:16:cf:10:8e:aa:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:61:D5:45:11:EB:A3:62:4F:2E:94:10:B7:79:E6:B0:1C:28:52
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.118.0/24
Signature Algorithm: sha256WithRSAEncryption
42:83:5a:11:11:12:9c:9f:9e:c9:5a:81:74:53:95:5a:c5:ec:
6c:b0:84:39:f5:49:c0:eb:89:d2:18:3d:31:8c:f3:31:b4:43:
0c:ae:65:cb:a9:19:de:70:0b:06:22:25:9f:6f:63:cc:42:26:
85:be:01:76:f5:04:89:3c:96:d8:1d:d5:57:1f:62:ab:34:30:
ec:8d:d2:43:4c:16:41:4f:6d:4b:6d:71:52:e2:c9:88:a4:66:
88:e0:d9:0b:bb:4b:84:00:2b:6f:63:bc:4f:73:de:58:de:a7:
b9:a9:38:ee:8c:85:77:d0:47:d7:b1:08:72:38:67:6b:19:c4:
22:8a:4d:0c:88:ab:6b:45:69:70:50:ee:6b:46:b7:ea:86:db:
1e:56:3f:63:40:8c:26:08:76:3c:30:ee:15:77:d1:86:27:27:
5c:ed:a3:16:88:75:8f:fb:16:7e:09:6f:a2:7a:7a:1e:e9:6d:
c5:6b:b1:d4:10:a4:47:ff:05:45:53:1b:c3:91:be:b9:fd:f9:
3f:1a:14:8f:f6:41:8c:ed:35:27:f8:a8:fa:c3:7f:6f:05:b1:
04:07:49:87:d1:4c:0f:69:75:e4:c1:c9:fa:a6:2a:b6:73:15:
23:d4:4a:b0:13:96:1e:87:22:5a:b5:10:3f:c4:e0:28:5d:62:
fe:40:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:22 2025 by rpki-client