Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e33322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: /yK37BxE9D4xMfRbhJ7Eivjn4LbuS1yei4qVSMpQAEo=
Subject key identifier: 39:26:A7:52:AC:F5:AE:F8:87:9A:D0:EF:23:EF:3F:91:64:57:8F:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5CC52234C48C5AFC2AC39534839560D38469B603
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa
Signing time: Wed 14 Oct 2026 17:29:46 +0000
ROA not before: Wed 14 Oct 2026 17:24:46 +0000
ROA not after: Wed 13 Oct 2027 17:29:46 +0000
asID: 47583
IP address blocks: 147.93.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c5:22:34:c4:8c:5a:fc:2a:c3:95:34:83:95:60:d3:84:69:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 17:24:46 2026 GMT
Not After : Oct 13 17:29:46 2027 GMT
Subject: CN=3926A752ACF5AEF8879AD0EF23EF3F9164578F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:df:9a:f2:5f:a5:79:73:c2:77:39:4e:bf:
ea:ed:72:d3:15:f6:46:69:96:57:18:09:f6:e8:cb:
18:9f:1a:da:b4:e4:12:47:ee:f8:8c:a0:0b:a5:d6:
31:7f:79:4f:21:c3:fb:63:d0:13:6e:a8:1b:24:3f:
bb:3c:a0:75:25:d6:7e:6c:1b:a2:8e:3a:79:11:cf:
00:54:5d:03:3f:2f:44:9a:95:2a:3f:ba:13:a0:42:
b6:2f:00:76:ac:e4:9c:f1:2b:f7:5e:3f:a1:98:d3:
76:6b:b4:d8:7c:25:52:bc:2f:db:9f:86:9c:19:2a:
74:ef:ae:8e:f0:49:1a:15:db:bc:dd:27:61:2d:c8:
96:d5:ac:fd:c1:b5:34:f9:90:68:e9:d1:5f:13:c5:
d1:e7:9f:7b:9b:d0:0b:47:90:3b:37:cd:a9:8e:7d:
c9:5e:7d:c8:25:80:21:f0:ce:37:a9:e0:18:28:fb:
b8:d2:2a:03:c9:1a:1c:28:e9:6d:32:68:e5:4d:0c:
fb:3f:ba:12:d2:7d:4c:c3:82:ca:fb:34:df:ba:41:
75:06:a2:27:c7:87:86:a2:44:14:2f:71:74:b0:f9:
e6:f1:04:65:c7:d0:36:ce:f0:3b:7f:90:4f:9e:bc:
48:ae:8a:bc:ed:c4:0c:fc:c4:f6:e1:8c:0a:70:86:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:A7:52:AC:F5:AE:F8:87:9A:D0:EF:23:EF:3F:91:64:57:8F:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.32.0/21
Signature Algorithm: sha256WithRSAEncryption
13:76:a4:03:5d:b2:da:c4:f4:fb:27:4a:e1:bf:8c:4c:68:60:
b8:00:fd:dc:9b:cd:f6:9f:fa:94:0f:0d:17:29:ab:ef:7b:b6:
a4:4f:5b:5b:e1:40:b5:ba:73:14:e7:d9:e9:9b:e5:3c:bf:0b:
0a:9c:ef:6b:e9:07:e5:5f:99:4e:a1:f2:11:39:84:fe:07:86:
4f:8a:44:5a:e4:b0:78:c7:9f:2b:1f:c6:33:56:ac:55:57:66:
ee:f1:70:76:b2:70:75:1e:c3:d7:fd:41:7f:6c:b7:c1:17:46:
70:c8:a8:53:d1:cf:a3:ef:64:36:0d:12:02:fc:1b:8a:f9:09:
eb:71:5c:a5:8d:6e:05:c1:29:e0:66:96:66:59:4c:13:90:23:
0f:ed:39:19:c7:07:ff:86:17:86:3d:57:e3:b4:93:46:2f:84:
ca:e6:fe:56:b4:14:8e:05:93:ce:4d:a0:47:05:d9:0d:c6:07:
50:96:67:90:76:39:a2:64:31:e3:ba:e9:ef:ff:f7:ab:48:f2:
cc:3a:74:55:ac:df:da:44:5d:9f:fe:e0:00:ae:28:c7:cb:bd:
b2:27:82:87:51:4e:37:cb:c6:aa:8e:98:58:36:1d:92:54:b2:
97:eb:52:47:93:0e:1a:35:82:45:ba:41:83:99:5d:5b:31:07:
33:78:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:59:50 2026 by rpki-client