Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37372e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8gu6MtEW40ePTjsRyrp+JNoTCrMw7cqQCGelngQ+iUs=
Subject key identifier: ED:88:05:B9:A2:A4:E0:73:97:11:6D:FE:2F:9E:5B:3E:98:05:25:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 102FDB68272F8E75B218C9F6E9F7B6EB390BAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 29 Dec 2025 09:50:33 +0000
ROA not before: Mon 29 Dec 2025 09:45:33 +0000
ROA not after: Mon 28 Dec 2026 09:50:33 +0000
asID: 136787
IP address blocks: 155.133.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2f:db:68:27:2f:8e:75:b2:18:c9:f6:e9:f7:b6:eb:39:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 29 09:45:33 2025 GMT
Not After : Dec 28 09:50:33 2026 GMT
Subject: CN=ED8805B9A2A4E07397116DFE2F9E5B3E980525AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:42:79:39:4e:88:36:fa:46:c1:0d:40:36:
29:d0:a8:d8:36:83:0d:5f:3a:a9:ad:17:a3:56:9d:
49:c3:a5:e6:6e:7c:49:95:90:71:92:2d:ca:91:67:
97:ad:c4:52:ea:8d:76:f7:75:3e:90:c0:5f:c8:d3:
a0:e8:6c:df:4b:e3:38:7c:2b:9c:64:5f:ee:65:a0:
90:95:ac:b5:21:4e:c8:eb:eb:ba:25:2b:ed:78:c9:
f8:47:59:69:d0:d1:08:7c:21:09:dc:84:73:3e:34:
44:88:2d:c9:b7:9b:51:9c:1e:61:a1:b6:da:a7:ff:
31:40:d0:99:df:c3:73:b1:c3:55:8b:a8:0f:11:34:
a0:d8:d9:88:9e:d0:af:38:bd:66:e6:76:88:d7:42:
fa:f0:18:bc:a0:8b:f6:5e:45:79:a0:6c:ed:57:22:
6d:91:ef:09:96:31:9d:c8:dc:c1:43:86:8f:5c:b0:
d6:13:fe:40:10:f7:8a:61:b1:7b:80:bf:b4:5e:18:
77:46:8b:eb:92:eb:b7:b0:f9:04:7f:0a:87:dd:09:
44:4b:14:80:81:1b:0e:9d:4f:99:13:a6:d3:03:f0:
25:99:89:e2:77:d9:0b:2f:04:44:be:0b:b4:e0:1b:
2f:ad:68:44:3c:6c:7c:39:8f:cb:47:b6:05:dd:a8:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:05:B9:A2:A4:E0:73:97:11:6D:FE:2F:9E:5B:3E:98:05:25:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ce:44:69:72:d6:4e:b1:91:0c:3e:61:43:ef:f9:d8:db:2d:
84:28:03:89:63:bf:02:3c:59:7a:22:f5:88:a9:d1:56:76:d5:
c8:d0:55:5d:32:da:51:61:c2:77:c2:cb:59:38:a3:40:86:36:
ec:f4:cf:a9:50:e9:4f:61:06:60:af:0c:4c:9f:b1:ea:fa:49:
7e:6c:fe:6f:dd:eb:ac:8d:8b:02:e5:68:e9:48:c5:34:ff:f8:
95:4f:57:8e:36:d4:df:dd:3e:a3:d7:cc:8a:d1:a0:17:db:16:
99:d5:47:be:a6:75:fe:70:58:21:91:56:f0:79:46:4e:4f:81:
e9:15:13:cd:9e:29:2c:84:95:3c:f0:24:fe:38:ee:0d:2c:54:
c1:4f:74:58:83:98:20:b8:c7:1b:11:99:84:f6:62:66:41:21:
0e:78:ef:5e:30:c7:f6:75:26:75:a2:92:06:24:17:8d:14:f3:
13:3f:14:b0:97:a3:09:8f:36:67:fc:c2:7b:31:80:b6:4c:f0:
b3:c9:b8:0c:b2:2f:c1:88:67:91:6a:66:c1:70:e0:e0:c6:f4:
fd:66:8e:f8:f0:2c:b1:be:ff:96:ed:07:f4:d7:8c:25:ca:99:
bc:67:f0:13:3c:25:45:9c:92:bd:4f:4e:6e:15:0f:74:b0:be:
69:a9:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:19 2026 by rpki-client