Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
File: 3134372e39332e31362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: QjqMGQRVQNsLNsRHx73ceq7II8IcrPwwXGHYofGFNpU=
Subject key identifier: 3B:77:92:D7:18:A5:A1:24:70:A5:9B:AF:76:66:8B:C6:E9:BF:BC:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6817D71392BD2A46DB0F7EC9441DAE4D449540CA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
Signing time: Wed 30 Sep 2026 15:29:32 +0000
ROA not before: Wed 30 Sep 2026 15:24:32 +0000
ROA not after: Wed 29 Sep 2027 15:29:32 +0000
asID: 47583
IP address blocks: 147.93.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:17:d7:13:92:bd:2a:46:db:0f:7e:c9:44:1d:ae:4d:44:95:40:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 15:24:32 2026 GMT
Not After : Sep 29 15:29:32 2027 GMT
Subject: CN=3B7792D718A5A12470A59BAF76668BC6E9BFBC5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:04:64:25:e4:5c:9a:3c:88:ad:ad:95:52:
32:1d:d2:85:ff:04:56:8a:a4:21:29:28:c5:25:64:
34:ac:89:ea:0b:c9:2f:29:5d:14:0d:e8:99:a4:9a:
4d:74:0a:53:54:ee:72:31:36:f4:29:98:39:00:9c:
ce:5c:57:fa:45:bf:eb:41:c2:f7:35:5b:6d:9c:91:
04:ab:52:2c:7f:b0:40:d3:e3:68:75:15:c8:17:59:
48:c5:31:b8:93:ce:cd:df:8b:49:eb:d8:24:7d:38:
77:e8:97:b5:c1:5d:62:e8:a8:e3:0c:ce:a2:ef:ae:
15:9c:eb:78:e9:89:a2:cd:80:a8:08:1b:cf:ec:f1:
b6:f0:c0:34:45:90:69:f0:db:2f:74:02:66:fe:85:
cb:9a:e9:be:a9:6d:e2:51:19:30:21:fc:0d:11:0e:
d1:04:f3:bf:85:08:98:95:68:ae:d4:5e:ad:85:e2:
e2:ba:97:03:ac:36:8e:da:3a:80:dd:3f:22:89:e9:
ba:01:df:01:de:f8:68:90:73:20:e5:b2:2c:f9:d5:
4a:12:cf:30:5b:de:ac:ea:f6:70:79:9e:f9:19:b7:
07:00:aa:e1:f5:3c:a3:dc:51:90:23:8f:8f:e3:43:
d2:4b:e2:09:9e:21:c7:8e:ed:d3:a1:22:24:1d:6d:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:77:92:D7:18:A5:A1:24:70:A5:9B:AF:76:66:8B:C6:E9:BF:BC:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.16.0/20
Signature Algorithm: sha256WithRSAEncryption
35:dc:4c:eb:57:62:41:99:d4:90:e9:fc:69:3b:bb:32:fb:74:
b5:85:89:23:ce:d8:09:e0:72:43:d0:97:7a:a7:04:9b:3c:6e:
e4:b2:02:7b:4e:8b:16:bc:22:35:d6:14:47:13:71:a2:e6:5b:
e6:49:9d:e9:da:11:38:79:27:e8:21:0a:61:5f:15:8f:8e:2c:
37:73:76:7c:2c:6f:63:91:57:bb:21:ea:ee:af:72:c0:cb:91:
14:fd:e6:13:3a:a1:88:5e:b9:88:82:fe:65:fd:52:83:cc:a7:
a3:ee:40:22:71:7b:80:81:5a:97:d4:3b:da:49:71:1d:7e:24:
ad:54:16:40:64:b3:ee:6f:53:f1:99:c4:93:33:fd:ab:d4:dd:
d9:37:04:89:6e:90:73:18:c5:9d:4d:ca:55:d2:c0:9d:52:55:
39:45:ba:84:2d:7c:76:d7:4e:9e:63:ad:e8:51:94:72:b6:8d:
54:4f:26:98:f6:60:75:89:84:23:76:a6:45:b1:1d:a0:c6:e5:
78:b9:ff:14:d8:06:27:c5:dd:7a:20:92:71:f2:b2:df:1e:92:
71:3e:ac:ae:99:e3:d8:78:ca:c3:52:9c:fc:61:76:7d:a3:9d:
89:25:eb:a4:c1:db:50:44:58:2a:47:12:06:92:7f:9e:de:44:
cc:9e:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:12:18 2026 by rpki-client