Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: efr0s3U+WoaQGrRiQ9QB5HqYX8EKgl3PdijUHRJoK4Y=
Subject key identifier: F8:2B:09:B7:06:8E:92:AA:13:AB:7B:E9:8C:8C:37:A9:F0:33:79:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C5F238C4534EA1E38EE7FD8BE19EA07338F9D89
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Mar 2026 12:23:26 +0000
ROA not before: Sun 15 Mar 2026 12:18:26 +0000
ROA not after: Sun 14 Mar 2027 12:23:26 +0000
asID: 136787
IP address blocks: 158.220.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5f:23:8c:45:34:ea:1e:38:ee:7f:d8:be:19:ea:07:33:8f:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 15 12:18:26 2026 GMT
Not After : Mar 14 12:23:26 2027 GMT
Subject: CN=F82B09B7068E92AA13AB7BE98C8C37A9F033791A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:81:34:d3:37:da:79:39:dc:71:67:f8:36:
db:de:96:57:2c:1e:e8:80:09:44:0d:51:fe:8a:fb:
10:7a:53:45:be:c9:7e:5f:02:b9:4f:f3:dc:dc:fa:
b0:7b:ea:88:26:f4:e5:bd:18:d1:72:97:6e:67:04:
7d:be:80:df:50:26:49:f6:70:f7:5d:08:88:80:3f:
c0:93:2d:88:c4:b3:d7:98:d4:19:8b:82:f8:67:09:
df:bb:86:3d:ce:c3:1a:d4:43:be:e3:d0:89:53:66:
c4:b7:26:3e:9c:53:66:0e:87:95:e9:21:1e:60:9f:
3f:e7:4d:68:e7:c3:bf:39:38:59:b5:2f:72:81:1d:
41:72:46:a6:d9:4a:8d:30:35:22:1e:5c:33:44:21:
0c:84:0e:5e:f7:b4:62:a5:4a:08:68:e3:bc:2e:42:
f9:5f:4a:4b:5f:30:9d:2d:ff:7f:78:10:28:8c:c7:
9c:8c:28:53:b4:4a:5c:f6:be:36:7b:98:ce:aa:d2:
21:9e:76:a4:e8:90:49:0f:c7:f1:eb:67:49:c2:9d:
bb:38:0a:80:59:2b:5c:7e:9c:5a:d2:b0:f5:fc:40:
b1:0d:35:17:42:15:79:d3:7d:28:7f:c5:15:ac:0a:
24:c1:a3:1a:c4:68:c1:1a:7e:44:e5:85:08:f8:53:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2B:09:B7:06:8E:92:AA:13:AB:7B:E9:8C:8C:37:A9:F0:33:79:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2d:c7:fe:71:13:2e:ef:93:fc:f9:03:a5:ab:48:cb:67:3e:
08:ff:ec:ce:a6:ee:d2:3c:eb:2c:80:aa:03:7d:7b:c2:22:fd:
1e:fb:a8:1b:9e:57:f1:a4:e2:c1:87:22:bc:7f:d0:be:66:24:
c2:50:93:e3:f5:f3:90:02:65:47:90:77:54:de:1a:5c:64:36:
74:65:55:7b:4b:25:fe:fa:e8:25:d1:1c:3d:79:64:fe:d4:cf:
a8:f5:de:4e:fd:80:f4:e5:46:f0:3c:9b:04:84:96:a8:05:52:
89:94:9f:5b:ca:1a:70:00:a7:2f:ff:b1:5a:c0:6f:df:2f:1c:
f4:31:fc:10:a9:05:f9:ff:bb:68:bd:25:a1:12:cd:95:1e:ca:
4f:27:fd:76:bb:50:3e:20:6c:90:a4:b6:a4:e9:86:d5:a5:2c:
fb:4e:3d:8c:c1:d8:97:0c:ca:5d:ec:16:26:1e:43:91:b7:20:
f5:dc:01:b3:97:3b:4a:f2:b4:e9:f2:03:80:7d:72:12:36:32:
4e:66:9f:bd:5d:d4:cf:a8:b0:ec:de:b3:f4:96:b3:01:8c:07:
a2:ad:42:35:25:14:bf:ee:ff:d6:cf:9e:35:fd:6f:8f:87:69:
e9:2d:c8:b1:25:2a:6b:b5:c6:f9:db:48:03:5c:35:f1:76:e3:
5a:d5:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:33:46 2026 by rpki-client