Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
File: 3134372e39332e3134342e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier: wTsFc7+cJkoOrHicBXIRXXW8LIqk+mHiK1iIYsd66Ys=
Subject key identifier: 38:A6:B2:CC:44:DF:DE:1C:CA:B8:DD:8B:AF:7A:87:19:93:EC:1E:6A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B7E71F1184F0B70DDB0A8D2A3CBF2DE2B44AEDE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
Signing time: Fri 25 Sep 2026 15:29:27 +0000
ROA not before: Fri 25 Sep 2026 15:24:27 +0000
ROA not after: Fri 24 Sep 2027 15:29:27 +0000
asID: 40021
IP address blocks: 147.93.144.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7e:71:f1:18:4f:0b:70:dd:b0:a8:d2:a3:cb:f2:de:2b:44:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 15:24:27 2026 GMT
Not After : Sep 24 15:29:27 2027 GMT
Subject: CN=38A6B2CC44DFDE1CCAB8DD8BAF7A871993EC1E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:cb:c9:b0:f4:2d:4f:49:b8:71:0a:0c:1f:
c3:7f:c1:e6:43:33:2d:c3:b8:19:37:2c:fe:1a:e4:
f8:9a:74:db:32:42:0f:66:10:c9:f0:a8:c7:c7:83:
67:79:8d:4d:00:df:92:95:eb:2e:e4:cf:52:b9:1b:
cf:d5:ab:7a:df:fc:27:e3:c8:ef:f3:60:09:2a:d7:
81:81:14:c8:e0:cd:2b:d6:bb:81:70:b5:87:62:ca:
02:d4:41:6b:f0:62:5b:7e:6f:df:e4:47:e5:66:61:
47:04:57:5e:db:5d:48:71:dc:28:47:e0:10:5e:ce:
5c:b5:89:ea:57:36:d2:87:46:45:a0:66:df:05:68:
e0:82:41:42:f9:af:31:ad:cd:e3:c4:90:3a:cf:08:
e3:91:5c:d8:58:c2:8b:cf:51:6c:64:b1:28:18:2d:
3e:fb:e9:79:45:ce:e0:02:87:e7:5c:da:e8:f4:9b:
ad:36:f0:1b:2f:6f:66:d8:7b:ae:25:76:47:c5:ce:
65:98:c8:a6:2f:88:28:07:d1:21:f3:30:36:7d:87:
5b:1a:00:38:5a:53:66:7c:8c:7b:b8:4a:dc:6e:67:
54:cb:c0:cf:23:87:dd:e0:44:8d:4f:92:c0:ac:eb:
04:1d:f8:75:0e:00:21:90:bd:43:21:30:aa:0c:a7:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:B2:CC:44:DF:DE:1C:CA:B8:DD:8B:AF:7A:87:19:93:EC:1E:6A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:e6:ac:e2:cc:46:8b:6e:ee:f7:e2:e7:e9:95:26:51:51:d2:
66:48:99:df:71:58:0e:a2:64:06:ba:80:0e:23:3a:98:90:10:
80:46:58:31:1e:2b:45:be:4f:f0:4e:0e:3a:9c:16:5a:b3:54:
3e:d7:a2:3a:5f:f3:68:bf:23:f8:59:a5:09:c2:c0:30:39:b3:
bf:9f:6b:20:6f:47:30:b3:38:5c:93:56:19:19:d8:f8:8c:83:
7b:e2:92:ce:8c:f9:53:be:ff:35:bd:94:af:79:e9:3a:fb:8f:
2b:1e:14:3c:90:bc:f1:41:52:e1:e9:fb:93:19:7f:2b:dd:b6:
e0:d1:e4:eb:21:58:d1:36:24:2f:e5:4d:66:34:94:64:6d:fa:
8f:cb:e9:9e:82:92:e0:01:b9:f9:e4:2d:3e:21:c4:e5:8a:5c:
19:d4:d9:49:aa:4b:f9:ab:bf:ef:2a:cf:41:50:7b:14:14:2d:
0b:cc:cd:0b:f9:9c:34:09:8f:61:13:aa:64:52:32:94:62:10:
77:c7:b3:43:cc:65:41:4d:5b:fb:b3:ee:52:ec:29:c0:02:9c:
1d:01:e1:51:f9:4e:a7:06:59:54:f5:89:a1:a8:ff:d1:94:0a:
2d:32:de:39:e4:19:32:57:98:6e:b0:af:34:bb:b3:80:71:7d:
a2:34:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:44:09 2026 by rpki-client