Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
File: 3134372e39332e3132382e302f32302d3332203d3e203430303231.roa (raw, json)
Hash identifier: WdXLC3dpLwvvHbcuT/BnZtlJO9KNpfrxPcpfTIY6V3I=
Subject key identifier: 9C:89:9D:C6:88:0A:A7:42:7A:CB:5C:5A:BD:00:8E:52:19:EE:5C:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4445446015B77D9B2C2A522A165BAAEEC21C458C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
Signing time: Fri 25 Sep 2026 15:29:28 +0000
ROA not before: Fri 25 Sep 2026 15:24:28 +0000
ROA not after: Fri 24 Sep 2027 15:29:28 +0000
asID: 40021
IP address blocks: 147.93.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:45:44:60:15:b7:7d:9b:2c:2a:52:2a:16:5b:aa:ee:c2:1c:45:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 15:24:28 2026 GMT
Not After : Sep 24 15:29:28 2027 GMT
Subject: CN=9C899DC6880AA7427ACB5C5ABD008E5219EE5C2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:66:e3:17:54:34:5d:db:ac:32:91:b8:cf:
3a:9d:d0:86:64:b1:e8:05:ad:fc:1a:c8:7f:1e:53:
01:69:5f:46:3c:c8:77:a1:38:bc:2a:59:d3:4f:23:
39:2d:e4:6e:c6:d2:c2:a5:87:c8:2b:56:19:25:37:
4e:39:cd:fb:15:9a:1e:5b:65:cb:c8:b0:85:60:c6:
68:f3:06:e9:51:d9:96:a8:00:b8:07:69:c4:8e:9e:
c9:94:0e:54:e5:90:06:34:09:45:c1:a4:42:b4:88:
a9:ba:4c:d2:49:6e:31:6a:66:bc:08:89:64:2d:da:
a8:7f:94:a5:58:ae:d8:1f:4e:2c:bd:3c:95:ed:d0:
11:8b:1a:bf:a4:14:ca:02:d0:2e:4d:dc:27:cd:1f:
1d:5a:3d:50:5d:24:b2:4d:ec:37:66:d7:05:89:c6:
1c:56:d1:f8:4e:e2:56:7b:86:55:b4:3f:8b:5d:0d:
c5:a7:1e:a4:32:cc:9b:f1:d9:21:2a:92:c1:12:ab:
2d:4e:f2:8a:3d:34:6a:f6:57:d8:61:5f:7a:f9:f1:
47:aa:ce:38:28:42:24:b9:4a:27:16:ab:94:b0:c4:
1a:a9:29:c8:9f:44:f8:6b:54:aa:88:2c:65:0e:1c:
b0:6b:9f:e4:31:2e:e5:25:ab:89:e4:dc:9b:4e:48:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:9D:C6:88:0A:A7:42:7A:CB:5C:5A:BD:00:8E:52:19:EE:5C:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:73:54:e3:b2:8c:53:65:dd:fe:8e:10:79:ad:90:9b:85:f8:
98:6b:2a:7c:4b:67:2c:16:77:60:a6:15:26:e6:09:82:44:a8:
f3:f2:20:da:20:af:2e:8f:69:0b:d1:8f:77:82:70:01:67:44:
f8:10:c0:0a:95:c2:0c:26:91:09:46:4f:b3:cc:85:30:b8:14:
b5:88:71:d8:a8:6b:16:5c:18:1d:6e:11:6d:50:2e:95:97:c5:
46:83:8f:75:9b:96:ec:35:d7:47:81:ce:9d:fa:ed:5c:5c:88:
29:6d:e4:c5:19:58:a6:33:85:cb:d5:23:59:d7:a7:45:30:86:
dd:77:74:e9:62:25:20:6a:fe:60:10:f2:58:ee:be:77:c3:26:
89:a8:50:16:27:81:20:b5:9b:a5:79:48:d0:ef:69:94:75:f6:
28:68:67:e8:4d:3a:87:3d:e9:5f:2a:87:6b:3e:f7:ff:55:6d:
1b:07:4c:a5:61:62:ba:e6:5d:a8:c5:35:a0:69:8f:6d:f6:b5:
89:9f:37:46:3d:5d:62:97:9e:aa:e0:5a:00:6c:be:1d:b6:cf:
cc:a0:6e:20:65:01:29:71:09:79:66:a2:3c:20:e3:5a:c4:30:
86:ed:ab:80:0e:a2:78:be:01:9b:5f:b8:04:fb:9d:e9:0a:4b:
ab:b3:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:17:05 2026 by rpki-client