Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132372e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3132372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Ka674cTORd6Mk2jdf9HS/CC1m8eQGqM6//xE0RuJf+g=
Subject key identifier: 1F:65:3B:4E:63:65:F6:6E:9E:AD:C3:33:24:A4:F4:60:95:B7:19:35
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 231DC3E03B174DC740FB0FA76FA4041265AE2013
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:38 +0000
ROA not before: Sun 28 Sep 2025 20:42:38 +0000
ROA not after: Sun 27 Sep 2026 20:47:38 +0000
asID: 136787
IP address blocks: 156.67.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1d:c3:e0:3b:17:4d:c7:40:fb:0f:a7:6f:a4:04:12:65:ae:20:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:38 2025 GMT
Not After : Sep 27 20:47:38 2026 GMT
Subject: CN=1F653B4E6365F66E9EADC33324A4F46095B71935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:58:3e:54:96:66:81:33:12:90:ea:25:2d:
08:8f:82:27:4f:b6:ce:bc:bd:49:c7:0a:0d:68:45:
06:60:3c:f0:34:46:c2:74:ba:d4:70:78:ee:ac:af:
0b:24:52:55:9c:7c:e1:38:20:4a:c3:6d:80:c6:81:
62:11:81:c5:58:68:de:c1:23:ed:ed:fc:c2:13:13:
35:52:9a:a4:b1:fb:13:d7:61:ba:e9:73:46:a5:05:
16:b7:81:26:89:10:6d:3c:fe:2c:5f:14:3e:01:4e:
af:8c:cf:36:90:cb:03:30:d3:47:66:31:e2:f7:5b:
ca:d7:9e:35:86:b8:de:65:66:03:d9:57:74:89:9d:
d4:54:9a:ac:5d:22:76:18:a3:36:f5:66:5a:d7:f7:
f1:c8:fd:6f:5b:72:f0:e8:1c:03:10:83:1c:67:0a:
d4:23:bb:7f:39:70:44:82:ae:b5:b9:e4:38:b6:16:
4a:37:f8:d2:e2:b7:3f:05:13:e6:90:a4:c1:86:b6:
82:ab:ff:52:fe:89:f8:1a:84:a4:f9:9f:fb:e0:ba:
1e:0b:91:fa:27:ce:dd:31:a1:3c:3c:fd:20:16:9d:
80:49:a0:29:6b:c3:f7:54:1c:0c:f8:34:78:2c:eb:
f8:89:1c:be:48:b6:dc:62:5c:b3:5f:13:99:31:32:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:3B:4E:63:65:F6:6E:9E:AD:C3:33:24:A4:F4:60:95:B7:19:35
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.127.0/24
Signature Algorithm: sha256WithRSAEncryption
64:48:d9:46:ff:d1:0f:23:51:6c:16:f5:43:85:8a:2e:48:25:
fb:51:3f:a4:23:a8:19:3d:e5:0c:64:c5:8c:e8:63:24:c6:e5:
1e:dc:da:87:10:8e:92:da:e7:85:8c:92:44:4f:49:b8:81:f1:
29:f5:7c:d2:b0:15:2b:d7:c5:01:d8:d8:25:a2:13:da:84:ec:
bd:27:10:23:d4:e6:ce:22:30:12:fc:ad:02:65:0c:55:14:e4:
29:ff:ae:d2:0f:14:a7:d4:a6:29:ca:e8:b4:e2:71:e8:40:39:
42:91:98:20:a6:c2:d5:c3:d0:e6:fa:50:44:a8:c3:88:22:91:
7d:d5:4b:fc:96:cf:df:49:4c:ed:de:aa:d9:3d:6a:bc:b3:90:
58:21:00:4c:4e:f2:40:89:c1:6a:fe:ec:2e:a9:53:f3:30:37:
02:88:2a:05:98:c1:84:c6:bd:e6:f6:55:62:cb:4e:36:1f:35:
f2:4a:a9:d5:74:f1:ef:86:cd:11:70:bc:77:8a:7e:36:99:62:
66:f8:bb:8f:d4:4c:c0:b3:b9:90:38:eb:e5:15:b7:71:f7:7e:
89:91:e9:33:28:e3:5f:19:44:8f:cc:66:c5:4c:16:c7:6b:e2:
a3:70:2f:48:09:90:d6:ab:46:96:0c:a5:cc:c6:2d:ed:27:3d:
7c:28:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:40:45 2025 by rpki-client