Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38342e302f32322d3234203d3e203437353833.roa
File: 3134372e39332e38342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 2HhI7VXF3YFZU8T6+2IhOu9XeAPDIl1JjKaWNaKfcro=
Subject key identifier: 0D:51:49:B3:07:EB:51:F6:C1:CD:2B:22:D9:A8:0E:20:DA:5B:EA:67
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A7F914F47910D0A0DC8281E36B9AED3C764F5AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 19 Oct 2026 21:29:59 +0000
ROA not before: Mon 19 Oct 2026 21:24:59 +0000
ROA not after: Mon 18 Oct 2027 21:29:59 +0000
asID: 47583
IP address blocks: 147.93.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7f:91:4f:47:91:0d:0a:0d:c8:28:1e:36:b9:ae:d3:c7:64:f5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 19 21:24:59 2026 GMT
Not After : Oct 18 21:29:59 2027 GMT
Subject: CN=0D5149B307EB51F6C1CD2B22D9A80E20DA5BEA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:e6:20:0e:94:d3:a8:36:4d:fb:04:d7:91:
2e:17:bd:5c:c6:1a:17:bc:14:51:17:4f:8b:75:75:
b5:f6:89:ec:d0:94:b7:92:05:d8:f9:23:1a:ad:65:
da:d4:79:c2:6d:b1:ab:08:a6:f5:c8:bd:1c:50:c5:
eb:59:f2:0f:2b:4b:5b:1e:b2:59:65:de:3d:c9:4e:
4d:9e:cf:1c:09:61:d6:20:50:66:09:bf:74:a3:ff:
2c:b2:bf:8c:a5:23:4a:5f:18:5c:f6:a4:53:41:d0:
a0:2e:c3:52:d6:41:21:7b:cf:a4:47:63:c2:ef:b2:
6b:37:9c:3e:cc:7b:46:20:ba:b6:b3:d0:06:ec:a2:
a9:16:de:75:02:a1:23:eb:c6:8a:72:82:06:47:31:
b6:38:07:30:ab:9c:b4:25:d5:3d:64:a1:c6:11:90:
be:ec:20:c4:52:86:03:2c:4c:28:72:55:5e:bc:98:
9d:35:52:b8:70:3c:b3:8e:ce:ea:3b:f7:4f:d2:ab:
13:4b:3d:37:86:60:c6:9c:fa:70:45:95:5c:2b:52:
ca:62:29:5e:4a:d0:f6:67:46:21:aa:38:4c:9c:b1:
3c:77:1d:44:32:50:47:63:50:38:da:09:4d:8c:3f:
97:25:86:cb:43:df:d9:73:fc:95:cb:b1:e9:99:e2:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:51:49:B3:07:EB:51:F6:C1:CD:2B:22:D9:A8:0E:20:DA:5B:EA:67
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.84.0/22
Signature Algorithm: sha256WithRSAEncryption
10:bb:25:48:2c:43:de:7b:46:5c:41:c3:70:af:97:32:f4:54:
40:ba:bf:58:43:d8:ff:ae:31:62:30:58:cf:ab:0d:ae:75:b2:
b9:7d:55:90:f5:62:36:64:8f:ea:85:25:25:37:50:2c:53:57:
5a:12:77:59:2f:26:e0:f2:62:be:4b:c2:18:ac:79:cc:72:4a:
bb:09:22:eb:f1:ee:2c:ca:57:ce:ca:6b:84:a5:8c:e3:8f:39:
ca:82:e3:cd:02:a3:08:39:1e:7c:7a:e6:8b:0e:a6:5b:50:08:
79:58:c6:df:26:15:07:21:a0:6a:47:fe:5d:28:11:c1:c5:ed:
ec:96:af:18:3d:e1:e7:1b:13:63:c0:36:d4:fe:bc:10:53:76:
ed:51:09:aa:c7:11:f5:95:f3:d6:22:aa:9e:c7:fc:73:2a:3e:
45:d6:71:52:b3:6c:8c:03:70:21:c8:95:f3:40:40:a0:67:e9:
ef:01:7d:05:6b:d2:62:ff:c0:ee:de:d6:5a:9a:56:f3:f0:a1:
67:f5:e4:85:7f:d3:b7:5f:9d:a0:80:d1:5f:2b:80:7e:8f:75:
fd:f3:e6:6d:60:32:bb:96:ec:d4:0f:03:e1:68:19:dd:19:91:
60:b2:3f:a2:0b:25:70:e4:93:bd:60:06:61:d7:a0:08:ce:4c:
9e:e6:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:58:55 2026 by rpki-client