Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37322e302f32322d3234203d3e203437353833.roa
File: 3134372e39332e37322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: BnXHvJlnGW9iF/EhrUG1UjjaYmeqllTFkfK0ddaXOVw=
Subject key identifier: DC:CC:D9:98:B8:5B:A2:7F:AA:50:A8:D9:A4:2B:07:1E:93:98:F6:3A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5DA19B8FF0224B59CAEA9C33763F7D3B567564D6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 19 Oct 2026 21:29:59 +0000
ROA not before: Mon 19 Oct 2026 21:24:59 +0000
ROA not after: Mon 18 Oct 2027 21:29:59 +0000
asID: 47583
IP address blocks: 147.93.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a1:9b:8f:f0:22:4b:59:ca:ea:9c:33:76:3f:7d:3b:56:75:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 19 21:24:59 2026 GMT
Not After : Oct 18 21:29:59 2027 GMT
Subject: CN=DCCCD998B85BA27FAA50A8D9A42B071E9398F63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:aa:f2:e1:a7:41:d0:f7:54:69:08:58:13:
f3:d9:08:c7:1e:54:76:c5:b5:67:14:ec:c8:c5:1d:
53:52:2f:a9:ce:9c:29:73:9e:a2:4c:54:b1:33:7c:
0b:e5:bd:b4:f7:c1:fe:e8:1e:56:ed:57:b2:12:54:
46:ef:72:00:e9:af:ff:8f:3f:f6:bb:cd:11:d5:08:
9a:d3:3b:3c:2f:c8:3a:82:66:6c:e6:d8:2f:15:77:
2a:65:e8:a1:65:07:c3:44:3c:88:66:d6:3a:65:cf:
41:28:a9:3a:d9:3c:bb:b2:ca:52:89:f5:9b:40:57:
f0:0e:29:5a:02:50:3c:21:70:d0:99:56:d4:e9:cb:
95:0c:15:9b:da:8b:f8:85:5e:cf:50:bd:d1:5d:85:
ec:b4:0f:b6:25:ff:41:c4:b1:52:90:06:c8:e3:39:
30:f0:14:12:c4:b4:fd:39:c0:dc:ff:3b:d6:36:3c:
fd:36:4c:26:86:12:9a:f8:57:b4:d2:d4:87:20:8c:
08:d7:a9:a6:08:92:1a:5f:83:37:bb:4f:10:0a:a7:
c8:9d:33:1f:20:67:1e:ad:fd:88:1a:b4:e1:ae:ff:
f0:ab:c6:a8:5d:93:f5:f6:f3:11:23:d5:ba:9a:fe:
6b:d3:73:51:97:cc:41:b8:84:7c:8a:45:d1:03:d5:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:D9:98:B8:5B:A2:7F:AA:50:A8:D9:A4:2B:07:1E:93:98:F6:3A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:67:f6:91:dd:cf:a6:9d:1f:2a:5d:7e:91:2f:68:18:cc:0d:
8a:5b:ae:40:59:51:06:a8:fe:d9:11:fe:1d:c2:c4:bb:ec:be:
5c:08:be:08:ea:01:f7:cf:4a:46:32:88:82:30:06:ca:d4:5d:
ee:45:2a:c9:cf:30:84:4c:56:6e:31:5d:61:75:1a:87:08:e6:
80:4e:99:14:88:f2:c4:b3:40:f3:ca:22:8d:ef:90:e2:80:21:
40:8c:43:1c:53:83:f0:80:2c:18:91:95:49:cb:4f:04:23:24:
e3:2b:78:aa:e7:37:99:b7:4d:c8:06:01:52:31:af:6c:86:f5:
fb:a5:21:b7:b4:90:b1:0c:56:d4:5c:22:0c:b6:3e:51:c1:4e:
86:b5:e3:5f:b2:26:88:9d:77:d4:df:00:35:99:4c:a9:ff:92:
de:95:33:53:95:1a:3a:3e:f2:52:3a:d4:93:74:da:d6:f3:e0:
e0:78:1f:3f:d5:db:ab:7a:bd:55:eb:20:2a:3b:72:f8:cd:fe:
95:8d:cc:6f:fb:bf:14:bd:f4:20:1f:18:5b:67:b7:f3:32:9e:
9f:da:15:08:14:84:ff:9a:13:20:25:2b:df:17:2d:d2:bb:84:
10:10:5b:96:b6:7c:aa:85:c3:28:06:c6:17:91:70:92:59:08:
29:9d:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:59:54 2026 by rpki-client