Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
File: 3135362e36372e38302e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: L2QgVcDb2qHXQSWzy4O9qE2CtuJ4AFR9uP6EedvMEDY=
Subject key identifier: C8:4A:E6:5F:8E:91:05:4B:FB:D7:46:7B:A0:E2:55:3E:32:71:EE:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 387AC73F205BAD6D89300E55D88BEDBA2F65DDC5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
Signing time: Tue 10 Feb 2026 08:23:19 +0000
ROA not before: Tue 10 Feb 2026 08:18:19 +0000
ROA not after: Tue 09 Feb 2027 08:23:19 +0000
asID: 51167
IP address blocks: 156.67.80.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7a:c7:3f:20:5b:ad:6d:89:30:0e:55:d8:8b:ed:ba:2f:65:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 10 08:18:19 2026 GMT
Not After : Feb 9 08:23:19 2027 GMT
Subject: CN=C84AE65F8E91054BFBD7467BA0E2553E3271EEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:25:c6:3c:dd:b3:41:8b:83:76:4e:ad:71:
2d:db:1b:5e:b1:2b:2b:47:6b:71:7c:76:1c:aa:e5:
23:57:10:18:ed:b0:6c:b0:d6:a3:c4:f1:38:5a:bb:
24:32:c1:a4:4f:8f:16:dc:ca:11:df:0d:64:d6:5d:
b3:19:7d:4d:b0:0f:46:e5:34:eb:68:76:c7:aa:e5:
9e:b9:ab:2b:a3:97:04:1d:c9:38:64:b3:14:9b:e2:
5a:02:b9:81:5d:10:93:f1:84:d4:ab:8c:03:bb:9e:
96:73:09:48:f4:14:3b:18:ab:f8:0b:17:09:47:9f:
39:79:01:4a:a9:41:e7:68:71:b7:dc:55:b4:ad:92:
b7:18:65:f5:fa:c3:c2:7d:b8:52:c1:4e:cd:10:35:
55:a8:11:62:0c:6b:2a:2e:0a:03:8e:ae:70:3c:97:
9f:fd:fb:bc:74:42:53:b0:60:20:ca:00:8a:eb:6f:
df:4a:b5:8d:41:93:5e:e6:6a:1c:d6:a2:b2:2a:34:
f9:cb:03:81:84:fe:04:f8:f4:df:49:8a:5a:99:f4:
c1:1d:3d:8b:90:89:85:6e:81:f5:7b:8e:aa:63:51:
7a:ed:f5:7f:ee:b2:b4:ab:65:9f:26:08:ff:9a:28:
25:8b:dd:1b:86:15:9b:f6:d6:13:d1:57:0a:91:a2:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:E6:5F:8E:91:05:4B:FB:D7:46:7B:A0:E2:55:3E:32:71:EE:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a2:08:c0:5f:0c:52:c4:3b:ab:df:56:dd:6a:64:53:24:ca:
30:db:fd:91:2b:5b:0a:b0:ab:0a:1d:53:e2:a6:ea:63:cc:c3:
05:7d:a3:1f:76:e8:75:c3:c8:4d:00:83:59:f8:71:69:2d:70:
d1:f5:90:94:a7:c3:17:ce:b2:e2:94:7d:2a:37:22:e4:55:5d:
8b:f5:97:a1:dd:fe:75:91:88:c9:7b:c6:34:fb:c4:2b:7e:d2:
c6:fc:e7:8e:e3:f7:0e:bb:45:f2:c1:ca:30:40:ea:a9:89:af:
f8:36:6b:ea:db:f3:19:4e:f1:69:9d:27:ff:17:e7:e9:72:8a:
a1:bd:0c:e9:5e:e0:3b:1d:3e:5a:b0:f7:37:4d:7f:8a:0f:ee:
e2:d4:ab:84:75:34:bd:a6:4d:14:82:c2:76:66:0e:fa:a8:4d:
8a:30:30:bc:d5:d8:38:1c:a3:10:87:7e:03:42:fa:18:23:89:
73:2d:36:1c:16:72:70:dd:1c:7d:de:79:3e:a1:e5:7f:4a:1e:
f4:fa:32:2d:41:37:a8:c1:33:7a:b8:af:b2:c9:ba:da:59:8a:
ee:cb:37:63:65:f2:6c:23:3a:c1:a4:0d:16:f0:40:5a:17:ef:
4a:55:01:7f:4b:56:59:38:04:9f:6b:96:35:ca:cd:e0:66:b1:
3a:e0:08:05
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOHrHPyBbrW2JMA5V2Ivtui9l3cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMTAwODE4MTlaFw0yNzAyMDkwODIzMTlaMDMxMTAvBgNV
BAMTKEM4NEFFNjVGOEU5MTA1NEJGQkQ3NDY3QkEwRTI1NTNFMzI3MUVFQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOyXGPN2zQYuDdk6tcS3bG16x
KytHa3F8dhyq5SNXEBjtsGyw1qPE8ThauyQywaRPjxbcyhHfDWTWXbMZfU2wD0bl
NOtodseq5Z65qyujlwQdyThksxSb4loCuYFdEJPxhNSrjAO7npZzCUj0FDsYq/gL
FwlHnzl5AUqpQedocbfcVbStkrcYZfX6w8J9uFLBTs0QNVWoEWIMayouCgOOrnA8
l5/9+7x0QlOwYCDKAIrrb99KtY1Bk17mahzWorIqNPnLA4GE/gT49N9JilqZ9MEd
PYuQiYVugfV7jqpjUXrt9X/usrSrZZ8mCP+aKCWL3RuGFZv21hPRVwqRosdPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUyErmX46RBUv710Z7oOJVPjJx7rQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzODMw
MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApxD
UDANBgkqhkiG9w0BAQsFAAOCAQEAj6IIwF8MUsQ7q99W3WpkUyTKMNv9kStbCrCr
Ch1T4qbqY8zDBX2jH3bodcPITQCDWfhxaS1w0fWQlKfDF86y4pR9Kjci5FVdi/WX
od3+dZGIyXvGNPvEK37SxvznjuP3DrtF8sHKMEDqqYmv+DZr6tvzGU7xaZ0n/xfn
6XKKob0M6V7gOx0+WrD3N01/ig/u4tSrhHU0vaZNFILCdmYO+qhNijAwvNXYOByj
EId+A0L6GCOJcy02HBZycN0cfd55PqHlf0oe9PoyLUE3qMEzerivssm62lmK7ss3
Y2XybCM6waQNFvBAWhfvSlUBf0tWWTgEn2uWNcrN4GaxOuAIBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:18 2026 by rpki-client