Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e34382e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e34382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: WsphqZX6vtfKN9yG+FHHYCrkS7eqpe/a0fv7am8lk8U=
Subject key identifier: 53:45:4D:78:26:E8:1B:0A:8B:6A:3D:7F:7D:5F:11:4B:5B:44:F9:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D94B4E7857588FEC77793853B0334B39FF12C4A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e34382e302f32312d3234203d3e203437353833.roa
Signing time: Wed 14 Oct 2026 17:29:46 +0000
ROA not before: Wed 14 Oct 2026 17:24:46 +0000
ROA not after: Wed 13 Oct 2027 17:29:46 +0000
asID: 47583
IP address blocks: 147.93.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:94:b4:e7:85:75:88:fe:c7:77:93:85:3b:03:34:b3:9f:f1:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 17:24:46 2026 GMT
Not After : Oct 13 17:29:46 2027 GMT
Subject: CN=53454D7826E81B0A8B6A3D7F7D5F114B5B44F914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:2a:2f:c4:b7:0f:e7:c6:c8:f1:46:bc:c3:
ab:db:d2:0b:d0:03:c8:c9:4d:5e:52:89:d3:92:98:
d8:84:4c:29:99:9a:73:f1:1f:77:0d:e2:23:1c:dc:
da:67:16:33:2f:9a:1f:e6:c1:96:c8:26:60:01:08:
76:7d:0f:cb:2f:f5:26:42:f8:2b:3f:40:47:50:68:
3b:95:ec:1a:a5:01:34:a6:f5:59:09:5c:db:21:5c:
a2:72:95:58:74:aa:fa:ff:58:f0:07:19:f3:b8:98:
ad:ba:43:29:51:c6:2f:66:77:2f:e8:f3:79:08:3c:
65:a2:99:a5:ba:36:bb:d3:15:cd:a9:1c:bf:8e:75:
46:9b:c4:88:15:f7:97:c4:1a:b0:07:82:22:0d:2a:
3f:24:f5:f7:9c:b5:93:ae:b0:50:69:c4:28:61:98:
9f:35:03:2c:9c:93:96:8b:25:8a:73:23:bd:59:0c:
d4:1d:f5:61:d4:4d:39:c7:88:4b:af:83:3d:4e:d0:
fe:0a:a1:37:4d:66:8d:e8:ee:ab:6a:13:29:9c:8c:
f6:0b:63:c8:03:d3:e9:b7:bc:81:02:34:ad:a8:49:
7b:e4:66:a6:39:98:69:ad:4f:af:e7:36:5a:97:97:
1c:26:7e:57:11:8c:4b:86:8f:c7:78:a3:46:99:48:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:4D:78:26:E8:1B:0A:8B:6A:3D:7F:7D:5F:11:4B:5B:44:F9:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e34382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.48.0/21
Signature Algorithm: sha256WithRSAEncryption
63:92:bd:45:13:d4:08:40:83:da:f0:bd:4b:be:b7:97:2a:8d:
d6:ab:06:d9:35:2c:d0:7d:f4:5f:6c:5b:bc:9e:7d:ad:64:4e:
b1:a1:af:8c:b1:fb:34:19:12:bc:a0:44:2d:6b:5e:40:c0:d2:
ee:bc:a8:41:9c:59:59:84:b6:d6:61:4c:28:f1:3d:b1:dc:6a:
80:27:ad:84:ff:ab:1b:d3:2b:97:8c:89:76:2e:c4:42:1b:2b:
05:d0:1f:6e:bf:ae:a3:48:4d:89:50:55:21:5b:b9:5d:8a:96:
52:9b:05:3c:e3:b1:95:62:d4:92:04:56:07:bc:cc:d8:0e:a4:
e1:ba:53:84:05:39:f1:63:89:98:83:dd:6f:b6:40:fa:48:74:
86:f6:2a:a9:81:39:63:89:2c:0a:e9:a2:a6:6f:40:af:c5:0e:
32:85:8c:4a:9a:0e:98:8c:62:c1:0a:ee:30:8f:9e:15:f1:58:
ed:cb:17:ed:d4:98:0a:23:c0:2e:dd:be:ad:72:56:25:be:59:
ef:76:aa:1f:49:91:15:3b:76:8e:66:27:c6:76:96:bb:8a:7e:
0d:1b:2e:26:21:03:53:96:58:24:3c:3c:ec:21:13:6d:33:86:
58:92:82:7a:b7:f4:cb:56:17:7a:6b:66:18:fb:88:36:92:64:
6a:f1:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:35:22 2026 by rpki-client