Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36372e302f32342d3234203d3e20313336373837.roa
File: 3137362e3132362e36372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: XwiwcnSgOPuDHVQwTsVp9HCqkaStGn7MeJ7WAgH7ilo=
Subject key identifier: 87:07:EE:FB:D2:79:D7:3D:27:AA:54:B7:AF:7F:63:70:56:D4:6E:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3088C5B47E1F69384042EC270FAB969395CA39A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:43 +0000
ROA not before: Sun 28 Sep 2025 20:42:43 +0000
ROA not after: Sun 27 Sep 2026 20:47:43 +0000
asID: 136787
IP address blocks: 176.126.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:88:c5:b4:7e:1f:69:38:40:42:ec:27:0f:ab:96:93:95:ca:39:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:43 2025 GMT
Not After : Sep 27 20:47:43 2026 GMT
Subject: CN=8707EEFBD279D73D27AA54B7AF7F637056D46E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:6f:d6:1f:a9:31:89:0b:1e:e4:b5:b6:54:
a2:da:7b:79:d3:20:cb:e0:00:ca:96:9e:ce:c2:d5:
d7:e5:fd:6e:2c:f0:4d:f6:cd:85:07:b5:dd:71:e5:
4d:ba:ae:59:0c:33:b3:01:6b:8f:1e:41:1c:0a:df:
74:48:d2:b9:06:f9:db:be:d3:8d:9c:07:15:1f:ec:
dd:44:cf:11:a0:5f:cd:1b:56:2b:fd:60:49:6e:da:
2f:f2:52:52:ae:14:ec:6b:3f:c7:e2:5e:f9:cc:26:
2b:f5:3a:f9:99:1e:32:88:cd:9e:68:00:ce:1c:48:
d5:c2:08:63:31:d1:33:50:11:6b:0b:5a:86:3d:cc:
4c:c9:0c:31:b9:ef:4f:9e:2e:48:4b:7d:3c:3b:a3:
20:00:86:0a:4a:d7:62:d5:3e:35:aa:5b:4c:74:8e:
92:72:10:3a:e7:47:8b:25:c8:c1:03:f5:29:f1:89:
b7:07:ec:5f:e0:b4:e7:6e:f7:fa:0b:40:ee:34:ed:
0a:27:8c:2b:f7:a5:9c:88:b8:d7:eb:a3:0a:62:bf:
3a:f9:d5:24:4e:3c:c2:8d:e7:26:aa:90:33:f6:8e:
02:64:05:db:9c:fd:61:b1:7e:76:0c:37:23:c2:eb:
1a:d9:47:cd:13:1d:4f:cc:d9:c4:5f:52:de:8b:b9:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:EE:FB:D2:79:D7:3D:27:AA:54:B7:AF:7F:63:70:56:D4:6E:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.67.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1a:93:3c:7e:2c:26:e2:b4:a2:99:15:d2:e1:b7:ac:45:6d:
2f:1b:68:4b:d2:42:76:ce:af:6f:77:5f:9a:b1:1e:ba:0f:5e:
55:6e:64:b7:e6:2f:48:49:6c:1f:6b:94:df:19:4e:c7:f3:ce:
50:de:0d:92:ee:0c:ab:74:9a:1c:77:88:3b:05:82:44:61:52:
c5:d4:e7:d9:a8:f8:6e:87:1d:df:72:ff:cb:e8:91:5a:06:b3:
59:24:2f:22:8c:37:d9:54:32:1c:2e:98:46:0e:82:38:85:d8:
8d:02:e2:d9:59:89:bc:05:a5:ad:5f:0c:d4:b5:a9:a9:0c:19:
a9:fe:36:62:44:2d:05:46:08:c9:48:61:ea:55:88:64:af:08:
4f:b1:c3:17:61:47:7c:b1:c9:eb:a0:22:cf:85:1b:9f:4b:90:
09:59:96:22:1d:bd:33:b5:44:b9:93:be:d0:76:b2:90:8f:17:
3e:38:b5:de:e0:d0:ff:f6:e0:9a:3d:18:50:06:d4:71:be:d9:
c9:e3:c5:01:63:d2:d3:b6:49:ac:6d:9f:6d:7a:7a:5c:84:7e:
94:50:f8:18:75:50:d5:30:90:cd:58:50:4f:d8:94:0f:a8:70:
9e:51:18:1e:32:8e:1d:2e:64:df:a4:6b:1f:63:92:30:5b:7e:
1a:20:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:16 2025 by rpki-client