Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e36342e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e36342e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: DZcatGqcrGQdyDe7EAxeuoAoiEjt1Nb275xuWIg//tE=
Subject key identifier: 46:D1:36:37:AA:C2:AC:01:C0:0C:19:56:CA:74:A2:4A:A3:B0:42:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4604F8FA759E18EB4EFB66C645E90B5570B0D993
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e36342e302f32312d3234203d3e203437353833.roa
Signing time: Mon 19 Oct 2026 21:29:59 +0000
ROA not before: Mon 19 Oct 2026 21:24:59 +0000
ROA not after: Mon 18 Oct 2027 21:29:59 +0000
asID: 47583
IP address blocks: 147.93.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:04:f8:fa:75:9e:18:eb:4e:fb:66:c6:45:e9:0b:55:70:b0:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 19 21:24:59 2026 GMT
Not After : Oct 18 21:29:59 2027 GMT
Subject: CN=46D13637AAC2AC01C00C1956CA74A24AA3B042B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:62:c7:af:3d:75:79:80:53:4d:ab:95:2c:
98:33:b1:09:dc:5b:66:fd:11:10:94:6d:0e:a3:4b:
5a:e5:c2:29:2e:ac:7c:f8:0d:31:db:b8:0e:f7:52:
23:19:1c:81:99:74:45:16:a4:a0:74:10:61:c6:35:
29:eb:65:74:b8:47:b3:1e:82:92:80:12:ad:a2:c6:
1b:e1:ef:4b:fe:30:e0:a2:f0:e3:db:81:a5:dc:8a:
b7:af:8e:03:32:b5:36:f8:01:4c:98:53:5e:90:ac:
cf:b0:7f:e9:1b:a0:6e:14:ae:b8:35:cd:0b:39:96:
c6:8a:34:0e:50:96:d9:98:0a:74:6e:3f:e3:71:bc:
ea:67:80:ee:f2:6c:80:f4:45:78:12:89:00:d7:15:
29:4a:69:c7:ff:1a:7d:51:eb:82:0f:2f:e9:ef:f2:
f3:60:be:7d:2e:85:f9:84:4a:27:90:71:b5:f8:bc:
2c:c1:42:c0:9c:15:77:4b:38:cd:67:69:57:25:76:
0c:cb:87:1b:0e:20:cb:b7:b2:db:18:fa:7b:67:21:
b2:e2:d0:81:90:ea:91:3b:b4:76:12:9e:77:d8:f4:
98:91:97:1e:ee:03:4c:ff:df:d4:a0:d7:05:f0:b2:
6b:6c:e7:27:79:ab:66:ec:5b:27:47:7a:88:1a:ff:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:36:37:AA:C2:AC:01:C0:0C:19:56:CA:74:A2:4A:A3:B0:42:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e36342e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:35:60:7b:a9:71:45:8d:57:9a:4f:1b:68:fa:d5:5b:44:e7:
15:41:ad:96:d6:85:49:c4:c7:70:20:bd:76:f1:6f:e8:ce:db:
ee:f5:99:9d:a2:e7:0e:29:4c:69:73:c3:5c:2d:12:6b:37:eb:
36:5b:b4:ed:bb:3d:e9:23:49:f6:ef:8e:0f:43:68:ef:29:fb:
14:59:2b:a2:75:e5:70:aa:2c:41:b0:58:2c:0a:eb:c5:86:83:
96:a6:7a:a1:4f:ce:ed:34:2b:65:7d:e7:49:bd:9b:9b:75:4d:
d6:6f:9e:63:6b:f2:c7:5b:97:ff:fa:c9:ee:ad:97:f8:d7:77:
da:6c:cc:a4:2b:30:37:20:b7:af:c7:4f:6b:52:15:6e:87:bb:
9b:88:6e:ec:06:21:34:63:87:84:20:fe:63:4d:71:ad:93:34:
8c:6a:a9:c6:93:fc:2f:09:bf:c9:21:4f:5a:09:4f:c9:d2:d9:
11:1a:ce:88:f3:5d:7b:04:48:79:be:94:bb:51:71:5b:6a:f8:
2b:28:04:64:e6:df:e6:9a:94:cb:c8:34:0a:f9:0e:60:f4:a5:
54:04:22:8d:c0:32:ba:49:2e:bb:06:a7:d6:ca:b7:d2:df:38:
78:1f:00:cf:c6:97:76:43:ba:3c:e6:8e:07:a3:b5:ad:9d:17:
60:6d:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:28:57 2026 by rpki-client