Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e35362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: JHr0HdNl1+blbr5P1eJXzH7BRVPp/wxldX3JziwXxXs=
Subject key identifier: 8F:2A:3E:C7:EE:7E:63:D5:86:F3:65:7B:04:37:75:D7:D2:CA:51:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 56F29A2E3F2B0198A40B879011F16C63125A3891
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa
Signing time: Wed 14 Oct 2026 17:29:46 +0000
ROA not before: Wed 14 Oct 2026 17:24:46 +0000
ROA not after: Wed 13 Oct 2027 17:29:46 +0000
asID: 47583
IP address blocks: 147.93.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f2:9a:2e:3f:2b:01:98:a4:0b:87:90:11:f1:6c:63:12:5a:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 17:24:46 2026 GMT
Not After : Oct 13 17:29:46 2027 GMT
Subject: CN=8F2A3EC7EE7E63D586F3657B043775D7D2CA51A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:38:9c:8c:4c:e1:27:aa:7e:7b:72:16:4b:a2:
66:41:dc:35:7d:77:0b:05:a1:d0:68:be:16:a0:8b:
e4:cf:0f:e8:3f:84:13:fd:de:6e:13:1e:02:77:84:
bf:f8:be:93:d9:9a:bf:a4:e1:c5:8e:fa:92:c3:24:
d6:81:9f:52:c9:45:47:34:8a:6a:cb:25:ab:04:85:
2b:3f:8c:6f:fe:9d:b0:d8:e0:52:20:49:69:df:d1:
bc:1d:ee:87:f4:c8:7a:f4:aa:49:49:0a:f7:fe:a2:
1b:ef:fc:9d:a8:e8:20:83:8a:ff:41:7b:96:c6:2b:
b1:7b:70:82:3b:e2:36:cb:77:33:e0:93:63:be:68:
af:61:f9:29:43:76:51:9e:4d:b4:2e:6a:97:df:82:
77:16:b0:3a:f9:44:69:86:e8:1d:fd:52:c7:ce:89:
f5:9d:54:39:76:de:79:3a:79:b3:c6:14:82:1a:56:
9c:94:88:03:b3:fc:d8:4a:68:1c:ad:0a:8d:03:52:
5d:f8:39:e3:cf:64:e6:97:0a:fa:a7:06:b5:24:f9:
cc:b4:34:37:fd:b5:5a:1b:3f:f8:0c:93:8a:a6:b5:
5b:ab:a6:a3:de:28:d5:b8:c4:57:72:cf:79:57:a2:
4d:f2:e9:b0:c1:76:27:b4:e8:18:a3:5b:b0:91:c2:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2A:3E:C7:EE:7E:63:D5:86:F3:65:7B:04:37:75:D7:D2:CA:51:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.56.0/21
Signature Algorithm: sha256WithRSAEncryption
15:04:c4:0b:ce:c4:9b:ff:14:ec:47:95:3f:8a:00:4b:37:cb:
a2:19:2d:b2:98:d7:8a:98:81:87:db:f8:67:85:27:ef:0f:f4:
10:a3:30:cc:14:ac:ba:b7:05:0d:87:34:6f:04:a1:ac:d9:eb:
cf:bd:0c:7b:77:5c:43:eb:2b:b7:cb:f1:bb:4b:42:f1:60:a4:
7f:60:0d:5c:2c:69:a0:b1:70:20:06:3a:1b:c1:45:6f:00:f3:
56:6a:15:ae:c0:8f:bc:0a:c7:99:7e:49:07:c2:08:05:57:04:
71:02:d1:59:1f:ab:6c:49:34:30:02:8e:28:e7:81:78:e2:f6:
6f:e2:d0:97:d7:86:ce:d1:df:d5:9d:ae:8d:3f:72:5c:34:d7:
15:10:09:f9:c9:05:c8:88:af:ec:65:df:a1:9b:b5:81:b1:dd:
71:32:25:41:7f:57:af:69:56:65:ca:b3:7e:1b:0a:05:ed:8b:
54:6c:5a:c2:bb:32:68:4c:0b:dc:e2:3d:61:2b:ea:06:d9:7e:
99:d0:64:2d:fc:d7:c5:29:12:7e:f0:cd:5f:e6:62:31:b4:4e:
d0:e4:05:08:f7:5b:08:02:62:14:da:8f:76:5f:6a:8f:42:c6:
31:ef:a0:42:96:ac:7d:e2:60:5f:ae:38:3d:fc:01:2d:83:60:
bc:52:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:21:11 2026 by rpki-client