Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jfaUWSj4NWcq+gcCr+RA6JP7FaJ02DHCLDTGNsuXhAg=
Subject key identifier: F1:1A:FC:DF:C4:E3:DC:54:26:4F:3F:86:5B:B4:85:1A:5F:12:34:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D453343FC6B4EE35FA48A5967F9C925231E60FB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Mar 2026 12:23:27 +0000
ROA not before: Sun 15 Mar 2026 12:18:27 +0000
ROA not after: Sun 14 Mar 2027 12:23:27 +0000
asID: 136787
IP address blocks: 158.220.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:45:33:43:fc:6b:4e:e3:5f:a4:8a:59:67:f9:c9:25:23:1e:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 15 12:18:27 2026 GMT
Not After : Mar 14 12:23:27 2027 GMT
Subject: CN=F11AFCDFC4E3DC54264F3F865BB4851A5F123494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:11:0d:27:ab:9d:32:54:5f:2a:16:d1:20:cd:
3b:56:dc:e4:26:da:cc:73:87:06:47:4e:80:fd:64:
93:6a:54:00:37:05:4a:d2:d1:93:4a:aa:19:7f:8d:
1c:d4:c3:e2:57:df:f9:08:d5:54:5a:8a:18:43:17:
cd:b8:3f:80:d8:59:24:19:fb:ea:4b:5d:76:c8:28:
5f:a1:15:0d:df:38:85:71:02:c6:6d:12:a6:73:80:
1a:a3:79:78:84:94:41:4e:b8:3f:f3:3d:22:68:39:
4d:2d:50:55:71:6e:2b:b6:bd:e6:2a:23:a2:89:c6:
e4:28:a3:33:81:6a:b2:a0:ab:3e:52:72:72:1a:67:
ab:88:c2:61:30:e4:01:9a:5e:9c:e6:07:c2:c7:3a:
a6:81:d7:f9:16:d8:a9:c2:e8:c5:cc:ed:4d:e5:93:
40:4e:cd:76:e2:e5:9b:4c:24:c6:69:b1:78:8e:01:
b2:0b:e1:74:29:36:5e:6f:e7:ce:96:06:89:8e:ff:
f0:d8:f6:7c:a7:25:37:2a:4e:86:74:ca:4d:02:85:
db:2e:85:c9:d2:4e:32:36:16:03:5a:cd:16:d3:1c:
95:33:1b:7e:64:1c:40:5e:d7:e0:64:cd:2f:56:60:
c4:50:0c:1d:3b:12:3d:43:84:5e:64:e0:c2:e8:7e:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:FC:DF:C4:E3:DC:54:26:4F:3F:86:5B:B4:85:1A:5F:12:34:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.73.0/24
Signature Algorithm: sha256WithRSAEncryption
63:30:d1:71:b9:87:29:e8:95:25:e9:c2:bf:cd:07:f8:af:55:
ad:01:9a:41:a6:a8:00:f7:7b:9d:a6:26:65:eb:37:4e:18:ff:
9a:ba:f0:12:44:d1:ee:e3:a7:5e:6d:ef:5d:40:24:a5:8d:23:
b8:d2:13:25:62:36:e2:e8:cf:fe:4e:7a:54:e3:da:68:31:88:
6e:10:ae:c7:50:bc:95:b7:2a:f4:63:e7:46:c6:fc:1c:e1:6a:
1a:f5:12:1f:92:d4:7e:2a:53:b0:cf:1e:5f:9c:49:c4:6f:8e:
76:a0:64:c3:26:4c:01:33:c2:e1:ff:f8:b0:2e:c4:24:ad:d7:
be:b3:bc:e7:de:67:a6:f5:72:43:f8:48:5e:a8:01:cc:70:7c:
ba:54:aa:4d:f8:53:5d:4b:d9:9b:d5:19:42:df:11:c9:73:55:
a8:dc:9b:a4:92:50:73:a1:b4:d2:8f:92:9c:48:b6:31:ff:da:
ba:2e:80:0b:92:cf:cf:c9:c5:15:e3:7f:d0:a3:34:ee:4b:66:
02:bb:3a:3a:88:12:51:c8:9a:5b:0f:ce:b1:85:13:24:2c:6c:
21:70:ed:4f:f8:ea:43:4b:f1:b6:76:13:bb:aa:cc:82:13:b1:
21:c7:bc:ff:45:18:83:11:19:91:96:dd:02:61:d7:e0:aa:6e:
04:b6:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:45 2026 by rpki-client