Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa
File: 3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 9GLBc0uiYX/pFXx2wSok2mQdyKz0lPc5639HjRq1Fb8=
Subject key identifier: 5B:F7:68:11:C2:EE:04:13:46:8C:98:F1:84:35:0F:10:85:4A:EC:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29764BD94E5DA81BF44E152547E17DA580F49B09
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 25 Sep 2026 15:29:28 +0000
ROA not before: Fri 25 Sep 2026 15:24:28 +0000
ROA not after: Fri 24 Sep 2027 15:29:28 +0000
asID: 141995
IP address blocks: 147.93.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:76:4b:d9:4e:5d:a8:1b:f4:4e:15:25:47:e1:7d:a5:80:f4:9b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 15:24:28 2026 GMT
Not After : Sep 24 15:29:28 2027 GMT
Subject: CN=5BF76811C2EE0413468C98F184350F10854AEC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:c7:8e:4c:3d:1a:a1:2b:fc:56:86:37:c4:
e1:c5:7f:23:18:0f:79:56:96:b4:e2:e8:36:8b:56:
c5:cd:64:28:54:f9:96:cb:86:66:35:69:b1:e5:ce:
88:8e:ee:73:eb:20:40:10:61:95:ea:ef:4c:56:1e:
29:b2:25:f3:fe:91:04:f7:12:5c:d5:c9:48:76:ed:
10:86:ca:8d:34:2c:4f:06:09:5e:0c:77:de:11:41:
96:f9:b5:12:b4:ae:0e:f9:3e:88:c3:30:a0:31:17:
35:34:47:a5:13:ef:b6:c9:37:73:c1:47:aa:db:57:
1c:8a:c3:bc:8d:de:a4:87:f0:65:69:6a:b9:20:03:
46:89:3b:de:22:61:91:3e:7d:f4:61:66:d3:32:b1:
a6:0e:d8:6b:a6:5d:5e:17:4f:57:0c:67:df:ca:55:
f3:7d:3d:01:e5:c3:3d:12:8f:bd:27:90:90:16:b4:
3e:36:0e:48:d8:7d:9c:a3:25:ba:25:2c:f4:6c:8e:
54:9d:93:ab:f4:87:bb:af:14:d0:72:16:62:11:64:
64:9d:64:e1:18:85:37:a5:13:96:03:55:cf:50:99:
90:51:96:83:e4:64:75:eb:60:1e:f6:40:c5:83:df:
1c:9b:67:76:0b:d2:a8:06:be:8f:19:ca:86:8d:27:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:68:11:C2:EE:04:13:46:8C:98:F1:84:35:0F:10:85:4A:EC:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:bb:ab:c8:59:b5:c5:b1:0f:e8:36:01:b7:ae:95:0f:0e:b6:
d1:fe:64:c6:41:d9:bc:41:6e:31:78:7a:c9:78:2b:6e:63:d8:
7a:e6:c0:f6:f7:2b:07:d7:b2:d0:49:d5:a9:35:36:6d:de:58:
b5:d7:47:69:bd:fb:de:25:f3:dd:d2:0c:0d:4b:53:e7:7a:e6:
d4:52:dd:af:e8:50:f0:13:f4:84:7e:ff:fe:ea:59:f0:fb:0e:
22:05:6b:27:9a:fc:5a:79:74:3d:c4:07:2e:0a:4a:58:58:19:
a1:cc:ef:e7:d6:b4:23:ef:6c:48:4c:a7:0e:2d:24:82:32:d6:
22:ea:3c:ff:28:c0:3b:5d:33:05:a2:19:f9:00:a2:62:89:15:
d8:80:86:b9:13:3a:a5:66:a1:d2:be:b5:1b:da:92:1f:32:9f:
fd:69:9b:21:43:d7:4e:77:de:31:19:d8:5a:fc:cc:fc:5b:20:
0c:eb:63:cc:61:b8:59:1b:e3:83:0c:c0:d6:85:3d:c9:b5:3c:
4b:8d:32:18:76:96:97:5a:80:5d:28:ad:fa:f3:e0:89:5f:3f:
7b:41:2d:3f:89:a0:01:e8:ea:1f:c6:2d:81:6c:a9:7e:84:08:
50:77:6f:2a:a3:bc:05:21:7c:81:22:4e:4b:0d:0e:81:a4:58:
43:c8:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:43:09 2026 by rpki-client