Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CKOyhHKhLRktGvDcZQfzB8CIVzUnEGllZcyL083e7rI=
Subject key identifier: 76:CB:AA:37:8D:49:BA:98:69:42:B2:92:47:BF:64:B2:9F:5B:E0:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 286175E19589FECA6603E9FD9AF0BD9001EC879F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:43 +0000
ROA not before: Sun 28 Sep 2025 20:42:43 +0000
ROA not after: Sun 27 Sep 2026 20:47:43 +0000
asID: 136787
IP address blocks: 158.220.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:61:75:e1:95:89:fe:ca:66:03:e9:fd:9a:f0:bd:90:01:ec:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:43 2025 GMT
Not After : Sep 27 20:47:43 2026 GMT
Subject: CN=76CBAA378D49BA986942B29247BF64B29F5BE034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:9a:b2:d1:71:c7:7e:a8:8c:61:58:de:3e:
82:35:72:bd:d4:f4:98:79:be:9e:18:7f:dd:f1:11:
65:0b:9f:ef:92:d8:0c:13:e5:b6:d9:a5:ec:53:ac:
fa:d6:1b:0c:e4:3f:52:d9:03:20:2d:65:dc:88:33:
17:65:74:17:05:13:67:b0:0f:36:a6:d4:13:db:9a:
67:dd:a1:f0:05:78:bb:d2:d9:89:eb:8d:1f:36:6c:
03:66:2a:72:f8:92:e4:f1:b3:29:a2:e3:ea:49:37:
9c:95:e7:8b:0d:55:17:95:99:6a:83:6b:a8:4f:b6:
73:7f:e6:9f:f3:72:6e:70:e8:c8:d2:b6:37:00:39:
f8:72:83:40:22:73:83:d7:74:36:c0:be:20:ac:6f:
b2:8a:1a:22:30:5d:71:10:dd:13:7b:14:66:2c:7a:
e1:9f:0f:51:7b:b3:d3:e8:5b:f1:90:4b:59:14:d7:
76:2d:a3:d7:2c:c2:df:af:c0:c1:6f:18:4d:b7:f8:
a4:a3:0d:54:8b:57:6b:17:1f:f7:0b:60:a4:41:8d:
3a:92:cb:f1:29:10:6a:31:80:d5:33:95:57:84:27:
01:b5:20:4b:a4:c9:12:36:88:ed:19:19:5b:ea:30:
f2:f9:8a:b8:68:0b:fc:dc:fc:69:76:36:b4:ed:2f:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CB:AA:37:8D:49:BA:98:69:42:B2:92:47:BF:64:B2:9F:5B:E0:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.72.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0d:95:04:00:d0:79:0d:40:7f:5d:b4:2a:7d:a5:47:dc:98:
f8:33:dc:7a:23:fa:85:40:f3:a3:34:19:d6:41:4b:be:ec:99:
c7:9a:e3:fd:47:23:25:9a:0c:fe:2e:84:40:2f:ff:47:9a:9e:
1f:7f:d4:35:dc:c2:85:d9:e1:32:a0:dc:f5:af:1d:98:d9:30:
a5:79:b2:c6:23:43:6a:e3:00:40:34:9a:40:0c:65:97:23:81:
69:d4:c1:aa:73:02:62:ef:2b:ae:fb:3f:c0:1b:63:da:1f:47:
46:71:b0:b7:63:73:81:d4:29:f8:bc:ba:fc:59:a7:db:89:65:
a5:86:78:65:2e:f5:9d:ac:ce:4d:bb:0e:3b:bc:5b:38:5c:35:
bf:de:e7:16:48:c3:ee:73:34:81:9d:70:ef:46:7f:93:5b:d0:
a7:16:01:6d:88:95:09:f7:16:52:85:8e:7f:55:c3:87:62:82:
89:36:43:49:f5:66:c7:f0:36:be:aa:04:f2:e7:36:b2:bd:eb:
7f:e7:c8:e9:f0:33:47:ab:4e:3b:1c:46:65:62:66:87:5a:2b:
c0:bf:9b:cf:83:c6:06:9d:f1:cc:58:40:8b:c0:9e:40:d6:13:
c6:f3:98:e4:87:60:de:83:a3:af:6f:5a:14:9a:36:a1:66:ca:
b0:09:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:10 2025 by rpki-client