Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39322e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e39322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iexCiN/VAOGgmoVzyUKFWWPl2ICEt4x3fXFr5FrCDzY=
Subject key identifier: 58:DD:46:3B:F3:E9:17:EB:9E:FF:D2:59:83:67:8D:9F:F2:76:70:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5086E6F7F123AB45D6B23CADDBB4EED005F10D1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 29 Dec 2025 09:50:43 +0000
ROA not before: Mon 29 Dec 2025 09:45:43 +0000
ROA not after: Mon 28 Dec 2026 09:50:43 +0000
asID: 136787
IP address blocks: 156.67.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:86:e6:f7:f1:23:ab:45:d6:b2:3c:ad:db:b4:ee:d0:05:f1:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 29 09:45:43 2025 GMT
Not After : Dec 28 09:50:43 2026 GMT
Subject: CN=58DD463BF3E917EB9EFFD25983678D9FF276703F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:c9:33:00:03:e1:bb:ed:0f:f2:07:8c:32:
2a:ab:cc:2b:55:67:ba:2d:5e:fc:62:93:4f:e1:c3:
9a:19:72:98:fd:79:7f:0e:76:f4:ce:0e:a6:95:94:
fe:0a:07:ba:7d:28:f3:74:b1:fe:c8:5c:c8:38:80:
40:73:28:f2:f8:95:e6:0c:23:2b:f4:30:a4:77:21:
ac:f8:f3:58:7f:1b:d3:35:4d:6b:6b:7e:cf:91:22:
71:7b:09:5b:31:2d:61:8c:8c:c5:95:12:c4:7c:ff:
a5:38:5f:c9:54:73:38:a2:06:d7:0e:d5:e6:17:4c:
d1:c0:f0:21:61:f0:f3:c9:de:94:8d:e6:aa:d0:be:
88:32:2c:ad:b3:ba:3c:c1:ca:23:fb:ef:9a:c6:1b:
72:bb:7a:fd:b7:7d:65:69:0a:b9:07:29:00:b1:b0:
62:5f:e9:aa:f9:31:f6:a0:a9:53:08:97:39:e9:9d:
34:af:2a:95:29:9c:77:42:7e:d3:30:cc:5b:25:bf:
f4:71:9a:7e:71:a5:50:ee:0f:3c:d4:81:45:c3:68:
87:5d:7e:be:59:bb:3c:fc:44:fe:80:2d:65:61:02:
22:db:dc:73:51:df:67:7e:64:c1:7b:bc:17:69:f9:
dd:98:08:aa:88:02:e1:be:4f:59:08:e5:b5:51:97:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:46:3B:F3:E9:17:EB:9E:FF:D2:59:83:67:8D:9F:F2:76:70:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.92.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0c:e2:95:00:d3:54:42:4d:72:42:bf:2e:be:e8:80:d3:69:
d7:37:31:a0:14:59:a0:29:8d:71:c9:03:f4:89:fd:2b:55:d6:
e8:4d:fe:8c:27:56:be:3b:97:fb:55:d1:d7:aa:3a:ee:d1:63:
73:ce:5f:82:4e:cd:2a:4d:55:c6:02:36:69:c0:c6:5f:8c:9d:
14:4d:c5:42:59:f6:cf:ca:b5:c8:24:73:fb:be:f4:59:42:b5:
b1:ba:7e:4b:2a:6d:67:83:f2:3e:29:27:d0:63:de:78:04:d1:
d1:a1:25:3c:87:b5:ca:b0:c1:49:66:3b:0d:29:4a:a4:96:72:
83:3e:33:4d:a5:5c:ce:a7:9f:f1:b8:d8:b5:f7:e3:cf:0f:68:
4b:d8:95:9d:50:85:b2:ad:5b:63:16:31:ac:84:7e:15:cd:92:
fe:df:11:75:0c:d3:bd:a8:5a:e2:a4:fb:ee:09:8a:3d:87:0b:
5b:db:b0:db:d6:1c:14:c5:75:3e:22:a1:64:12:d4:7e:5d:75:
67:e2:85:b3:8b:f5:c8:6d:4f:5b:22:cb:31:92:d2:d1:a2:03:
48:8d:27:9e:f2:e4:38:e5:c5:de:33:62:88:06:dc:9e:5a:9b:
ed:c8:e8:be:07:2b:b7:5f:0b:b6:61:85:aa:b1:74:b6:04:31:
ef:58:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:18 2026 by rpki-client