Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38302e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ePODyclZ/v1EjYGSCrEBLJLH8P2/1nWuBUnocCfGi7M=
Subject key identifier: 43:D9:44:FD:01:7D:31:E5:E4:DB:9B:17:16:47:92:E4:D3:7A:3A:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AF7A94D2FA2CC2B4B8D89F8B10A1AB4D626CBF7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 03 Jan 2026 22:51:15 +0000
ROA not before: Sat 03 Jan 2026 22:46:15 +0000
ROA not after: Sat 02 Jan 2027 22:51:15 +0000
asID: 136787
IP address blocks: 155.133.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f7:a9:4d:2f:a2:cc:2b:4b:8d:89:f8:b1:0a:1a:b4:d6:26:cb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 3 22:46:15 2026 GMT
Not After : Jan 2 22:51:15 2027 GMT
Subject: CN=43D944FD017D31E5E4DB9B17164792E4D37A3A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:fc:c5:1c:fb:76:92:27:0d:d3:69:8c:b8:
1d:09:49:b6:d8:f1:22:34:86:8e:00:76:c1:ae:02:
ef:17:1d:2b:5b:3a:cb:fc:c2:dd:c0:b7:cb:bf:26:
c5:50:dc:bb:47:76:be:92:8e:66:7f:20:ca:9a:2d:
e8:ac:ad:36:46:7d:e9:36:d1:8c:a5:14:e8:27:75:
6c:8d:a3:4d:0d:fc:2d:bb:1e:44:93:60:be:f0:f8:
f0:61:05:5c:c5:12:c3:50:ab:b5:17:a0:ae:a9:b6:
54:e7:5b:9f:03:4b:63:96:77:83:a0:5f:e1:25:a6:
80:77:3a:4e:b6:51:7e:2e:2a:94:5f:49:74:35:ac:
50:22:03:78:3f:1c:12:49:fe:e8:c2:22:15:b1:f7:
88:d3:95:e9:3b:92:ce:22:8f:3e:6b:74:c8:04:12:
a3:31:a0:ae:92:41:01:39:b4:33:6d:a0:d4:94:f7:
bd:3c:b8:ca:89:4c:e6:a2:82:62:e8:db:42:b1:0a:
7c:5a:6d:e7:8d:8f:11:d4:a6:ce:8e:28:e9:8e:97:
86:a7:5f:7d:86:d0:04:05:6a:49:ae:6d:fa:f3:b4:
9f:d5:5f:d8:61:be:2f:c6:e0:89:15:fc:fa:48:98:
9c:7f:28:d2:db:1c:cd:3a:5c:59:6c:82:ba:0e:3c:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:44:FD:01:7D:31:E5:E4:DB:9B:17:16:47:92:E4:D3:7A:3A:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
72:65:5d:b0:5b:60:78:c5:6a:5c:df:02:70:ac:c1:b0:b3:39:
1f:54:a4:b6:3d:82:7e:a0:5c:5b:64:79:a9:e3:31:a0:20:b4:
c9:43:63:b3:70:68:62:67:79:c1:84:63:d1:a7:c7:98:ae:c1:
a7:02:78:48:f5:00:1b:5f:73:55:32:11:e4:80:05:21:93:ae:
d1:9c:fc:28:28:ed:69:fa:8f:43:35:eb:18:9a:fd:f2:bd:b2:
de:a7:43:3a:89:71:4a:13:39:17:42:3b:10:78:6a:e4:13:37:
d7:01:fa:af:c8:57:f1:e9:07:87:14:79:35:eb:67:c6:ec:65:
71:61:0f:d3:d5:79:10:e0:ba:b5:d7:4e:ff:ab:e3:c1:bf:f6:
f9:44:2f:5f:8c:73:3f:92:98:c0:a2:b9:1b:62:85:09:b9:b4:
94:c9:04:1b:fa:49:91:23:18:b0:ab:9d:bb:5c:74:19:e4:7d:
f4:91:cd:a7:16:51:17:a9:44:b1:50:66:e0:94:92:99:c6:48:
da:70:c9:63:ab:f0:8e:4d:8f:9b:42:92:94:44:7a:25:89:93:
55:1a:00:bb:8c:ff:1e:0c:3c:41:5f:92:8d:30:d3:6c:e6:e1:
da:c7:68:9d:76:1a:08:8e:c5:51:82:a0:93:f1:71:ed:5d:b7:
f8:f5:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:20 2026 by rpki-client