Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e382e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: LOa3Z+G1xXHC6chcu2XGdCZftAYMUQN0TbR3pVCih/8=
Subject key identifier: 32:D4:5B:79:3E:18:FB:57:F3:4F:4A:3D:43:5B:7C:2D:FD:5E:32:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 30B550FD38CA2D799929FF3124098297B32FC905
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e382e302f32312d3234203d3e203437353833.roa
Signing time: Wed 30 Sep 2026 15:29:32 +0000
ROA not before: Wed 30 Sep 2026 15:24:32 +0000
ROA not after: Wed 29 Sep 2027 15:29:32 +0000
asID: 47583
IP address blocks: 147.93.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b5:50:fd:38:ca:2d:79:99:29:ff:31:24:09:82:97:b3:2f:c9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 15:24:32 2026 GMT
Not After : Sep 29 15:29:32 2027 GMT
Subject: CN=32D45B793E18FB57F34F4A3D435B7C2DFD5E32EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:5e:37:b0:82:8e:5d:f4:be:2f:31:31:cd:
00:4a:c8:c7:29:5c:c9:05:91:47:50:75:c6:ec:2c:
0a:8c:0c:4c:0a:4e:ad:1e:2a:b9:a5:67:d2:29:0b:
9f:54:ad:1a:6c:85:ad:ca:46:f8:6f:21:22:a9:3a:
4b:59:22:e2:f5:3d:8a:b0:7a:96:b4:cf:e5:73:28:
b4:a0:6a:a3:b2:0a:81:6e:03:c5:30:c1:7c:af:32:
73:df:0e:e7:be:48:36:a7:c6:11:a4:8d:b8:33:82:
66:01:96:03:49:52:29:07:c5:5b:68:f8:71:ba:48:
b1:26:28:9b:86:34:1c:72:9c:6a:3d:32:f8:91:7e:
13:62:5a:c4:4e:73:40:eb:33:18:1e:52:a0:19:6f:
51:dc:25:6d:5b:c4:bf:4f:1e:6e:ad:53:ef:b5:45:
5c:59:fb:6c:31:9d:3e:d8:cc:d1:98:c2:e2:5c:01:
e2:02:b0:29:10:d9:fb:cf:c4:dd:55:ba:3b:97:45:
78:14:38:96:06:53:48:dc:95:04:57:12:63:bd:11:
d3:98:02:62:d1:7c:c4:60:33:80:9c:35:7e:2f:55:
06:7c:e5:1b:da:98:c2:06:9c:8e:a6:a1:41:e4:d3:
fe:ae:e4:f0:e5:4b:aa:69:4c:ea:ab:50:e8:9d:c8:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:5B:79:3E:18:FB:57:F3:4F:4A:3D:43:5B:7C:2D:FD:5E:32:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.8.0/21
Signature Algorithm: sha256WithRSAEncryption
45:d7:9b:c3:39:8c:f3:9a:2b:58:0d:11:05:a3:d0:8d:c6:7c:
b4:31:62:51:14:04:d1:35:fa:9c:f5:b6:78:ad:07:42:70:2c:
33:61:71:b8:a2:25:10:46:8a:be:32:31:6f:bf:d7:f0:a8:b5:
5f:da:df:54:63:1d:05:c2:78:c0:eb:f6:82:aa:b9:ad:df:85:
ba:ef:6e:0e:c0:00:54:37:71:5d:61:a4:b6:50:f7:c5:11:c0:
ad:47:85:4e:fb:34:68:40:b7:7e:f5:bd:3b:f4:25:be:72:df:
93:e1:03:69:cd:6a:36:26:a4:49:dd:de:7a:a0:b2:cd:48:d9:
cc:10:be:d4:cd:4f:2b:ae:64:86:fd:77:04:96:4e:59:c4:69:
3a:9c:c3:f7:18:89:75:8a:45:c1:5d:75:e1:38:16:fb:b5:c6:
7f:3c:76:f5:17:d6:8a:13:1d:95:ef:58:b8:80:05:05:e0:ca:
8d:48:82:b5:24:f4:9c:b1:87:34:6e:23:84:a8:be:9c:39:f3:
ec:44:83:a7:17:d5:aa:de:84:af:e5:86:09:82:77:91:01:21:
50:de:d7:a6:36:73:cc:3d:06:07:c7:76:e0:c2:ca:64:ea:be:
59:2c:26:37:ca:ec:a4:d2:ee:a7:d7:71:72:74:e2:c8:65:e1:
84:c8:1c:dd
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUMLVQ/TjKLXmZKf8xJAmCl7MvyQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MzAxNTI0MzJaFw0yNzA5MjkxNTI5MzJaMDMxMTAvBgNV
BAMTKDMyRDQ1Qjc5M0UxOEZCNTdGMzRGNEEzRDQzNUI3QzJERkQ1RTMyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEV43sIKOXfS+LzExzQBKyMcp
XMkFkUdQdcbsLAqMDEwKTq0eKrmlZ9IpC59UrRpsha3KRvhvISKpOktZIuL1PYqw
epa0z+VzKLSgaqOyCoFuA8UwwXyvMnPfDue+SDanxhGkjbgzgmYBlgNJUikHxVto
+HG6SLEmKJuGNBxynGo9MviRfhNiWsROc0DrMxgeUqAZb1HcJW1bxL9PHm6tU++1
RVxZ+2wxnT7YzNGYwuJcAeICsCkQ2fvPxN1VujuXRXgUOJYGU0jclQRXEmO9EdOY
AmLRfMRgM4CcNX4vVQZ85RvamMIGnI6moUHk0/6u5PDlS6ppTOqrUOidyEdDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUMtRbeT4Y+1fzT0o9Q1t8Lf1eMu8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzODJl
MzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOTXQgw
DQYJKoZIhvcNAQELBQADggEBAEXXm8M5jPOaK1gNEQWj0I3GfLQxYlEUBNE1+pz1
tnitB0JwLDNhcbiiJRBGir4yMW+/1/CotV/a31RjHQXCeMDr9oKqua3fhbrvbg7A
AFQ3cV1hpLZQ98URwK1HhU77NGhAt371vTv0Jb5y35PhA2nNajYmpEnd3nqgss1I
2cwQvtTNTyuuZIb9dwSWTlnEaTqcw/cYiXWKRcFddeE4Fvu1xn88dvUX1ooTHZXv
WLiABQXgyo1IgrUk9JyxhzRuI4Sovpw58+xEg6cX1arehK/lhgmCd5EBIVDe16Y2
c8w9BgfHduDCymTqvlksJjfK7KTS7qfXcXJ04shl4YTIHN0=
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:08:46 2026 by rpki-client