Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e302e302f32312d3332203d3e203430303231.roa
File: 3134372e39332e302e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: LCYXWQirsusMZ3C3cMJ6zWiSeticjzHjiyKAoHJpXiU=
Subject key identifier: 2A:DA:21:AE:40:93:F5:59:D3:15:D3:2C:EF:3E:3A:07:9E:28:7F:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D71B1A0651BA611A019D349EDC10D66544D89A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e302e302f32312d3332203d3e203430303231.roa
Signing time: Fri 25 Sep 2026 15:29:27 +0000
ROA not before: Fri 25 Sep 2026 15:24:27 +0000
ROA not after: Fri 24 Sep 2027 15:29:27 +0000
asID: 40021
IP address blocks: 147.93.0.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:71:b1:a0:65:1b:a6:11:a0:19:d3:49:ed:c1:0d:66:54:4d:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 15:24:27 2026 GMT
Not After : Sep 24 15:29:27 2027 GMT
Subject: CN=2ADA21AE4093F559D315D32CEF3E3A079E287F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:94:8d:87:0e:81:21:a1:3d:94:4a:d4:6d:64:
25:d2:3e:97:d0:a0:8a:7c:f1:e2:25:cd:f8:c7:c1:
6a:ca:01:ea:4e:89:23:06:16:60:6f:76:df:d0:87:
07:11:c0:c6:a3:8f:e0:a5:21:3d:4d:53:a5:62:09:
33:88:c8:cb:a3:51:e2:6d:1c:09:8e:33:e8:dd:ca:
94:a0:d7:f4:db:86:a9:8c:09:76:72:2d:7c:f3:1c:
74:ac:97:b8:07:84:fb:e1:f4:43:d5:0f:75:e0:b5:
43:27:3a:3a:ec:76:bd:68:f4:0a:86:f3:2f:eb:f0:
16:6e:b8:90:65:69:9e:7f:04:70:5c:ee:0f:33:6b:
f8:b9:e8:c9:03:0d:bf:b1:ee:3a:98:a6:da:44:d8:
43:95:50:ba:88:9b:e2:ec:8f:32:22:f5:55:31:d4:
01:c0:0e:d0:51:b8:cb:29:63:5c:ed:07:f9:45:45:
c4:35:d2:e4:48:ca:c4:d8:84:18:81:12:43:f9:a9:
8c:95:a5:a2:40:ec:c7:e9:9d:d1:ec:95:b4:ee:4f:
18:e3:d9:a5:86:b1:5c:20:be:15:61:77:27:2b:e9:
c9:9b:91:57:32:0d:13:b5:b5:e9:f1:59:59:ca:22:
f1:46:f8:da:3f:68:d1:23:1e:33:30:ec:f6:f6:f9:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:21:AE:40:93:F5:59:D3:15:D3:2C:EF:3E:3A:07:9E:28:7F:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e302e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:b4:bf:fe:c0:89:60:2d:cb:aa:ac:f2:c9:cf:82:20:e2:04:
74:9c:70:74:6c:5d:48:05:50:0f:bd:ab:df:40:2c:45:da:d1:
2f:cf:4e:11:48:4f:58:96:fb:64:66:31:49:63:a4:7d:b6:b9:
12:40:a5:82:da:ad:7a:a4:4d:4c:b9:d2:e8:c9:19:02:16:6a:
0e:51:69:4d:a4:87:4e:06:35:03:c4:e3:7a:fc:a1:78:71:4f:
29:92:0e:43:d6:b0:67:39:bf:24:70:1b:fe:a2:2f:ad:fc:7b:
8a:32:63:3a:47:4b:a3:41:36:01:6a:02:28:68:28:ea:76:00:
c2:7f:f2:89:82:23:6c:36:ee:f4:2c:a2:fa:1c:45:4b:8c:ff:
2a:15:47:88:da:51:c1:bd:6f:26:23:eb:ed:32:8d:ac:01:c7:
72:fb:c2:89:77:7c:f6:aa:7b:6d:01:80:21:ff:e2:a5:ed:14:
d9:69:bc:c7:98:e4:ee:36:8b:77:97:ab:2c:bc:54:bd:5e:af:
54:a7:95:2e:da:ef:23:03:47:fe:33:6e:e6:3e:df:ee:d6:d6:
2b:d0:5a:50:2e:ff:44:78:8c:26:38:47:c5:79:90:9c:54:a7:
0d:5d:e5:1c:70:b8:32:65:3c:e1:a3:e5:4c:f7:04:5d:00:ab:
c0:5e:71:6f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUHXGxoGUbphGgGdNJ7cENZlRNiacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjUxNTI0MjdaFw0yNzA5MjQxNTI5MjdaMDMxMTAvBgNV
BAMTKDJBREEyMUFFNDA5M0Y1NTlEMzE1RDMyQ0VGM0UzQTA3OUUyODdGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDslI2HDoEhoT2UStRtZCXSPpfQ
oIp88eIlzfjHwWrKAepOiSMGFmBvdt/QhwcRwMajj+ClIT1NU6ViCTOIyMujUeJt
HAmOM+jdypSg1/TbhqmMCXZyLXzzHHSsl7gHhPvh9EPVD3XgtUMnOjrsdr1o9AqG
8y/r8BZuuJBlaZ5/BHBc7g8za/i56MkDDb+x7jqYptpE2EOVULqIm+LsjzIi9VUx
1AHADtBRuMspY1ztB/lFRcQ10uRIysTYhBiBEkP5qYyVpaJA7MfpndHslbTuTxjj
2aWGsVwgvhVhdycr6cmbkVcyDRO1tenxWVnKIvFG+No/aNEjHjMw7Pb2+SVhAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUKtohrkCT9VnTFdMs7z46B54of2IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzMDJl
MzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM0MzAzMDMyMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOTXQAw
DQYJKoZIhvcNAQELBQADggEBAH20v/7AiWAty6qs8snPgiDiBHSccHRsXUgFUA+9
q99ALEXa0S/PThFIT1iW+2RmMUljpH22uRJApYLarXqkTUy50ujJGQIWag5RaU2k
h04GNQPE43r8oXhxTymSDkPWsGc5vyRwG/6iL638e4oyYzpHS6NBNgFqAihoKOp2
AMJ/8omCI2w27vQsovocRUuM/yoVR4jaUcG9byYj6+0yjawBx3L7wol3fPaqe20B
gCH/4qXtFNlpvMeY5O42i3eXqyy8VL1er1SnlS7a7yMDR/4zbuY+3+7W1ivQWlAu
/0R4jCY4R8V5kJxUpw1d5RxwuDJlPOGj5Uz3BF0Aq8BecW8=
-----END CERTIFICATE-----
Generated at Fri Oct 23 21:03:36 2026 by rpki-client