Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131392e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3131392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: HqPDqKjsgAdJMhmd40HAnIxSujNggimRBTkSVWLYvj4=
Subject key identifier: 60:D8:98:7E:5D:E7:31:5F:3D:FA:2D:1F:6C:AE:DF:BE:20:CA:81:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10783F42917D81BE347FE2AB0B11B726F58BD322
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:40 +0000
ROA not before: Sun 28 Sep 2025 20:42:40 +0000
ROA not after: Sun 27 Sep 2026 20:47:40 +0000
asID: 136787
IP address blocks: 156.67.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:78:3f:42:91:7d:81:be:34:7f:e2:ab:0b:11:b7:26:f5:8b:d3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:40 2025 GMT
Not After : Sep 27 20:47:40 2026 GMT
Subject: CN=60D8987E5DE7315F3DFA2D1F6CAEDFBE20CA8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:af:3c:9e:a2:c5:63:f7:32:d0:1f:21:36:
e1:3f:fb:ca:bb:af:ab:c2:7a:a5:30:43:3d:33:99:
a1:32:b1:2f:6f:39:1e:60:f1:9e:ba:96:81:8c:4f:
6e:9c:78:5f:3f:7a:45:a4:69:e5:bd:58:ae:a5:64:
e8:63:f1:58:83:ba:58:30:74:94:1f:de:f5:6d:82:
00:d3:01:3a:9f:00:5e:d2:98:ee:6b:ea:87:88:f0:
f8:88:22:65:b9:67:b0:8a:95:49:24:ee:4b:6d:ff:
06:83:93:3f:0d:f5:50:34:f9:80:e5:cb:84:d6:c0:
20:82:39:c4:57:04:1e:b9:a4:a6:32:62:5a:a2:43:
9c:71:12:16:a7:ca:5d:ae:e6:dd:26:0d:b7:38:41:
f2:ae:a7:ff:19:a6:9d:c1:d3:d8:9b:a9:94:0b:4c:
f0:40:d1:c5:9f:6b:42:a2:36:d9:4f:40:c2:1d:33:
6e:22:cd:a9:62:bc:84:95:08:f2:04:83:96:df:be:
b1:4e:bc:d8:ce:dd:b7:0a:b3:91:81:29:c5:85:d6:
2f:41:9c:78:59:3b:2f:d8:c8:2b:15:66:b5:44:d4:
1c:85:ed:c9:68:9b:65:dc:23:fa:d0:49:a8:8c:0e:
2f:ad:1b:98:b8:0e:e9:54:31:f7:74:a1:c2:97:53:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:98:7E:5D:E7:31:5F:3D:FA:2D:1F:6C:AE:DF:BE:20:CA:81:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4e:0f:84:55:f7:92:32:8e:47:d3:cf:0e:21:02:1b:11:46:
27:86:80:e5:5b:7f:a7:4b:9f:9d:4d:97:e1:e4:f9:cb:4e:47:
88:41:2d:d7:21:07:8f:3b:88:f3:70:46:9f:ce:23:39:2c:3f:
2f:e0:f9:fe:83:ee:1e:86:16:2b:5e:c0:bf:f6:ac:52:0a:33:
da:0e:e2:90:f4:f3:fc:5c:d8:bf:52:03:d3:b2:13:3a:94:c2:
6e:ab:b2:a8:73:0e:98:2c:38:57:99:98:cd:30:3b:d9:f5:5b:
73:2c:45:bb:85:5f:a2:c6:6f:4f:21:1e:74:69:1e:a2:74:8c:
6e:d3:6e:34:d0:91:c4:ba:e6:dc:cb:2e:69:c5:62:d5:bc:35:
b4:1e:69:9a:1d:50:7a:e6:a0:b6:c2:a7:b0:0a:5d:66:ae:6b:
ae:6d:f3:6f:cf:b7:4d:86:59:9c:4b:83:0a:aa:0a:06:4d:2c:
5b:e1:0c:f1:ea:5e:58:85:c1:ef:f3:da:05:d0:b7:09:2f:ac:
37:9d:54:31:32:e2:e9:51:12:fc:db:ca:68:ad:59:8a:ad:07:
4a:fb:da:29:9c:b6:fa:d3:20:44:d4:fa:64:27:d3:be:ab:71:
af:39:ef:cd:ca:d8:15:35:ea:3d:85:99:f1:65:9f:00:23:e5:
d8:3c:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:57 2025 by rpki-client