Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e382e302f32322d3234203d3e20323034313730.roa
File: 3135392e34382e382e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: DO5OSdljrWwmJ9w7x+7XZ3de9fInu7EDSGK7rkALZI0=
Subject key identifier: E2:5B:20:62:27:0B:B6:BF:C4:AE:A6:7A:3B:EC:9F:E4:77:87:3C:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C14EAE4584A9581C624557DDCBB477997881403
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e382e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 23 Mar 2026 10:23:28 +0000
ROA not before: Mon 23 Mar 2026 10:18:28 +0000
ROA not after: Mon 22 Mar 2027 10:23:28 +0000
asID: 204170
IP address blocks: 159.48.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:14:ea:e4:58:4a:95:81:c6:24:55:7d:dc:bb:47:79:97:88:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 23 10:18:28 2026 GMT
Not After : Mar 22 10:23:28 2027 GMT
Subject: CN=E25B2062270BB6BFC4AEA67A3BEC9FE477873C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:fc:81:c6:79:4a:c4:74:61:31:10:b6:21:
a7:16:30:85:2f:a4:5a:92:09:18:b3:12:ae:45:b5:
e9:63:0a:af:81:02:38:fb:91:9a:b5:12:d7:e1:b0:
61:a8:b0:c4:39:ff:65:20:69:21:80:33:53:8c:29:
ea:7a:48:b4:29:90:3b:3b:92:f3:d3:56:10:21:b2:
04:3e:66:49:68:69:82:0b:f2:b2:1c:f2:a0:77:f6:
d9:43:20:ed:a2:a1:00:b1:5d:b4:d2:91:49:74:11:
f7:cf:7b:6f:5e:41:d8:4a:c5:13:b9:9b:2f:38:00:
59:f8:48:5e:36:f4:6a:8d:c0:0a:d9:6b:c8:da:60:
41:ae:a9:c2:bb:42:bc:00:91:d6:7b:82:30:af:59:
ee:16:06:b6:6e:24:62:4c:2d:2a:39:55:0c:be:d5:
6a:c6:ef:8b:cc:4e:c2:44:b9:f3:9f:03:8b:f4:b4:
62:8a:3a:3f:db:3d:ed:18:a4:80:69:8c:9b:fc:dd:
64:fb:c2:84:ae:a8:05:c1:83:4b:9a:3e:db:94:e2:
b3:9d:ab:c3:58:a4:0b:95:46:e4:af:8d:78:b8:fc:
80:10:8f:70:f9:b9:85:cf:41:f1:52:85:2e:7f:fc:
0e:98:47:ef:c5:dc:0e:16:c8:31:48:cd:3d:fa:02:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:20:62:27:0B:B6:BF:C4:AE:A6:7A:3B:EC:9F:E4:77:87:3C:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e382e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.8.0/22
Signature Algorithm: sha256WithRSAEncryption
42:10:d0:6d:fd:e7:27:b6:de:cf:b8:f1:9d:80:1c:5f:50:3e:
62:3a:9e:7a:5e:8c:66:d2:48:ba:8f:83:db:df:6b:a6:80:64:
dd:12:40:01:ea:e0:ea:a1:95:41:ad:a4:71:4d:ca:32:03:2a:
d3:b6:1a:93:f1:93:7c:2b:bc:1c:bb:aa:53:ec:98:23:5d:e8:
f2:3d:bc:c6:a9:8f:f8:02:38:02:ab:1f:a0:b2:32:91:ee:bc:
ce:a8:59:00:45:39:6e:88:8e:1c:27:d9:80:29:1a:db:02:7a:
54:67:ef:56:ef:e4:70:21:8c:1f:65:98:4a:19:31:91:f6:ea:
d7:5c:38:77:ee:da:81:1a:f3:da:0e:09:98:e3:d0:c0:fb:15:
6d:8f:b1:32:18:27:b9:5e:28:49:ca:56:bd:f6:4a:29:fd:8a:
25:8c:b1:af:e8:31:8a:db:c4:55:0c:dc:8f:5a:07:62:1b:2a:
04:ac:6c:c7:ad:61:a2:93:4d:23:6a:bc:aa:53:f1:0c:18:aa:
ff:88:c2:5b:18:de:d5:c0:9a:21:29:fa:40:42:8e:0f:2f:31:
18:f1:59:9d:be:2c:de:c2:4c:32:69:60:63:33:17:ef:2b:e4:
91:16:d6:86:8d:57:7a:72:ae:5e:7c:1e:99:93:40:10:c2:8f:
d8:55:aa:16
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHBTq5FhKlYHGJFV93LtHeZeIFAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMjMxMDE4MjhaFw0yNzAzMjIxMDIzMjhaMDMxMTAvBgNV
BAMTKEUyNUIyMDYyMjcwQkI2QkZDNEFFQTY3QTNCRUM5RkU0Nzc4NzNDM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uPyBxnlKxHRhMRC2IacWMIUv
pFqSCRizEq5FteljCq+BAjj7kZq1EtfhsGGosMQ5/2UgaSGAM1OMKep6SLQpkDs7
kvPTVhAhsgQ+ZkloaYIL8rIc8qB39tlDIO2ioQCxXbTSkUl0EffPe29eQdhKxRO5
my84AFn4SF429GqNwArZa8jaYEGuqcK7QrwAkdZ7gjCvWe4WBrZuJGJMLSo5VQy+
1WrG74vMTsJEufOfA4v0tGKKOj/bPe0YpIBpjJv83WT7woSuqAXBg0uaPtuU4rOd
q8NYpAuVRuSvjXi4/IAQj3D5uYXPQfFShS5//A6YR+/F3A4WyDFIzT36ApaxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU4lsgYicLtr/ErqZ6O+yf5HeHPD4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM5MmUzNDM4MmUzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp8w
CDANBgkqhkiG9w0BAQsFAAOCAQEAQhDQbf3nJ7bez7jxnYAcX1A+Yjqeel6MZtJI
uo+D299rpoBk3RJAAerg6qGVQa2kcU3KMgMq07Yak/GTfCu8HLuqU+yYI13o8j28
xqmP+AI4AqsfoLIyke68zqhZAEU5boiOHCfZgCka2wJ6VGfvVu/kcCGMH2WYShkx
kfbq11w4d+7agRrz2g4JmOPQwPsVbY+xMhgnuV4oScpWvfZKKf2KJYyxr+gxitvE
VQzcj1oHYhsqBKxsx61hopNNI2q8qlPxDBiq/4jCWxje1cCaISn6QEKODy8xGPFZ
nb4s3sJMMmlgYzMX7yvkkRbWho1XenKuXnwemZNAEMKP2FWqFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:50 2026 by rpki-client