Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5scZ0nkMByarDldz1J+URqGAC/qmGVRX+lH5iutzGCw=
Subject key identifier: 91:CA:D6:13:E8:70:DF:9C:4B:77:50:29:43:CD:39:93:94:A7:BA:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18395DB10ED74A383DBD57BE587CA6A8E52DFCBE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 03 Sep 2025 07:47:29 +0000
ROA not before: Wed 03 Sep 2025 07:42:29 +0000
ROA not after: Wed 02 Sep 2026 07:47:29 +0000
asID: 136787
IP address blocks: 158.220.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:39:5d:b1:0e:d7:4a:38:3d:bd:57:be:58:7c:a6:a8:e5:2d:fc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 3 07:42:29 2025 GMT
Not After : Sep 2 07:47:29 2026 GMT
Subject: CN=91CAD613E870DF9C4B77502943CD399394A7BAAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:b0:f4:9b:f3:71:35:1b:ac:29:3d:e0:85:
b0:3b:1d:9d:59:80:28:e4:ed:e6:e8:93:38:e0:16:
80:b9:75:4b:a8:03:77:76:a4:3a:6e:4b:f9:e3:17:
d9:b2:89:23:b9:ee:2d:95:21:77:50:3b:34:60:3a:
84:4b:57:f0:72:57:81:1f:34:92:95:37:9e:a9:0e:
cf:e4:ec:43:d6:b1:be:02:27:9a:85:a2:0f:0c:f7:
fa:90:08:e2:d5:cc:3f:bb:4f:68:da:5d:e6:d2:91:
af:f2:1f:e0:07:95:c4:5d:81:74:45:11:c0:f8:0d:
15:93:45:d9:21:e6:56:ba:0f:cd:86:fd:ab:97:d8:
57:e4:e6:66:8f:21:dc:e2:36:55:f5:d7:d8:9f:9d:
cd:32:c4:61:87:2e:fe:97:cd:96:b6:2f:68:46:bc:
13:20:c7:74:2f:ff:15:08:de:55:95:5b:92:41:cd:
a2:e2:40:c9:22:17:9e:58:ab:8e:b4:7c:20:74:c2:
f4:c5:a1:2d:ab:41:74:f6:93:7a:02:16:ec:1c:d6:
41:bc:3c:fd:f7:90:15:71:4b:69:43:77:31:4d:2f:
c4:77:c8:8c:39:d3:d5:89:29:95:97:ad:d9:37:19:
ab:85:55:73:70:c7:bf:4b:eb:81:63:da:b3:70:5d:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:D6:13:E8:70:DF:9C:4B:77:50:29:43:CD:39:93:94:A7:BA:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.76.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b2:87:fd:0d:97:2a:41:02:64:fd:8e:b9:18:e8:db:61:be:
e6:1b:78:a7:76:3f:15:6f:28:59:2c:7a:6d:c4:4d:e3:dd:0d:
62:01:f9:d5:6b:c4:5a:e2:4c:46:23:93:e2:ce:ed:27:3b:ca:
d6:7f:90:21:dd:e4:cf:90:6a:c5:55:40:bd:3b:63:f9:22:10:
f6:30:83:57:39:a9:26:f9:90:d3:c7:75:45:ff:79:7f:1e:50:
2e:25:00:e1:f6:f1:67:bf:d2:77:02:c5:c6:ed:b1:f6:87:a3:
07:49:10:42:66:30:4d:da:88:d9:4d:44:32:8f:82:ba:e6:00:
cb:ef:ed:97:07:3e:ef:d6:2b:1a:4b:97:0f:2e:26:83:9c:ad:
f8:ee:87:5e:39:22:86:3e:99:96:54:d9:80:55:59:e8:f1:8c:
3d:23:33:48:5b:72:80:2a:e7:9b:31:38:b8:6f:ea:85:d1:88:
7b:35:81:f4:09:99:ef:24:81:09:2d:81:84:4f:51:f4:68:46:
c8:35:dd:3e:eb:0b:97:40:92:33:29:b6:66:73:da:91:db:9c:
8f:6c:f6:84:a6:b2:79:90:cd:e9:75:36:dc:12:5c:a1:28:9f:
06:0c:bd:a8:13:29:1b:c9:2f:f9:57:6b:34:0c:b4:5f:15:56:
a9:1e:1c:8d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGDldsQ7XSjg9vVe+WHymqOUt/L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDMwNzQyMjlaFw0yNjA5MDIwNzQ3MjlaMDMxMTAvBgNV
BAMTKDkxQ0FENjEzRTg3MERGOUM0Qjc3NTAyOTQzQ0QzOTkzOTRBN0JBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOLD0m/NxNRusKT3ghbA7HZ1Z
gCjk7ebokzjgFoC5dUuoA3d2pDpuS/njF9myiSO57i2VIXdQOzRgOoRLV/ByV4Ef
NJKVN56pDs/k7EPWsb4CJ5qFog8M9/qQCOLVzD+7T2jaXebSka/yH+AHlcRdgXRF
EcD4DRWTRdkh5la6D82G/auX2Ffk5maPIdziNlX119ifnc0yxGGHLv6XzZa2L2hG
vBMgx3Qv/xUI3lWVW5JBzaLiQMkiF55Yq460fCB0wvTFoS2rQXT2k3oCFuwc1kG8
PP33kBVxS2lDdzFNL8R3yIw509WJKZWXrdk3GauFVXNwx79L64Fj2rNwXRYbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUkcrWE+hw35xLd1ApQ805k5Snuq0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM4MmUzMjMyMzAyZTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACe3EwwDQYJKoZIhvcNAQELBQADggEBAEWyh/0NlypBAmT9jrkY6NthvuYbeKd2
PxVvKFksem3ETePdDWIB+dVrxFriTEYjk+LO7Sc7ytZ/kCHd5M+QasVVQL07Y/ki
EPYwg1c5qSb5kNPHdUX/eX8eUC4lAOH28We/0ncCxcbtsfaHowdJEEJmME3aiNlN
RDKPgrrmAMvv7ZcHPu/WKxpLlw8uJoOcrfjuh145IoY+mZZU2YBVWejxjD0jM0hb
coAq55sxOLhv6oXRiHs1gfQJme8kgQktgYRPUfRoRsg13T7rC5dAkjMptmZz2pHb
nI9s9oSmsnmQzel1NtwSXKEonwYMvagTKRvJL/lXazQMtF8VVqkeHI0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:05 2025 by rpki-client