Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135362e302f32322d3332203d3e20313431393935.roa
File: 3134372e39332e3135362e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 7mp2EkAD34zutpEx5DHH1IweGk3ot55heFxq9HjnfRE=
Subject key identifier: AB:C8:81:34:72:51:7D:C1:59:92:DE:8A:33:76:EC:A3:AC:0B:57:99
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D633043D14DAB00924EF8E1636F93F4375C1ED7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135362e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 25 Sep 2026 15:29:27 +0000
ROA not before: Fri 25 Sep 2026 15:24:27 +0000
ROA not after: Fri 24 Sep 2027 15:29:27 +0000
asID: 141995
IP address blocks: 147.93.156.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 18:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:63:30:43:d1:4d:ab:00:92:4e:f8:e1:63:6f:93:f4:37:5c:1e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 15:24:27 2026 GMT
Not After : Sep 24 15:29:27 2027 GMT
Subject: CN=ABC8813472517DC15992DE8A3376ECA3AC0B5799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:f8:68:66:78:b6:16:44:23:55:ac:d0:59:
36:4c:2d:dd:19:0d:a9:b4:18:44:0d:06:e2:f7:96:
d6:2a:d2:61:e5:01:88:1c:4a:9c:ef:9b:9b:cf:8d:
28:41:d0:48:02:c8:cf:dc:c6:91:c5:fd:b0:e3:74:
ff:f4:44:8f:8a:3c:43:4d:e5:09:d4:bb:8e:38:25:
21:6a:a7:54:6d:e6:26:64:8f:8e:38:b1:6c:c1:56:
25:c7:92:e2:92:f2:e7:a2:42:37:67:61:34:6d:c4:
90:2b:3a:eb:46:26:f4:e3:db:96:35:6a:e1:7c:44:
ab:2a:21:09:08:7d:b2:95:c2:f9:6e:41:0c:00:24:
09:d0:61:00:3b:69:4e:5b:a4:ed:e5:ca:c0:3e:20:
de:8e:f0:fe:40:a1:26:f7:63:55:90:f9:73:b3:b4:
4e:00:a2:c8:49:9a:12:94:c5:6a:b5:43:cb:eb:37:
5d:e6:0c:9e:d9:20:15:ee:07:75:20:4d:a2:49:2c:
53:4e:29:4f:0f:38:e4:a6:48:fc:df:91:90:f1:83:
0c:f4:d8:de:06:69:4d:7f:91:20:56:91:13:28:3a:
cd:99:b2:a1:61:74:50:f2:40:58:10:81:52:74:78:
1e:ad:19:e5:b4:bc:42:4a:16:83:d7:be:14:c2:b5:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:81:34:72:51:7D:C1:59:92:DE:8A:33:76:EC:A3:AC:0B:57:99
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135362e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.156.0/22
Signature Algorithm: sha256WithRSAEncryption
82:f7:32:d9:b3:49:25:e8:45:5b:8c:7e:3c:87:8c:a0:34:e3:
e1:e8:9b:61:30:d9:bc:25:c9:3f:d7:38:b4:af:fc:12:0d:77:
69:d0:85:70:83:c3:53:92:14:4d:f6:7f:54:e2:72:41:d2:eb:
48:e8:56:df:e5:5f:44:09:11:e0:6a:c5:3c:d1:f5:ee:f3:cc:
a8:ce:f1:1c:6a:8e:7d:8c:19:42:c8:64:d0:fa:ed:e9:11:ed:
c7:25:88:96:ad:ac:24:58:c9:1a:f4:55:6b:a5:96:1d:73:94:
a0:54:6e:8a:71:f6:2c:bd:6a:0d:24:8c:ad:2a:5a:e5:d2:5c:
aa:57:d0:8a:e2:d2:fb:13:e3:ab:b1:1e:48:08:78:f2:a4:8b:
41:50:1b:e2:bf:ba:3b:38:35:33:78:91:5a:2d:9d:67:d0:2c:
e9:3f:eb:8a:d9:27:5c:9a:b0:ad:9c:ed:51:46:8b:77:a3:d9:
32:f2:f9:9f:2e:cd:28:29:e1:4c:e4:9e:50:67:13:31:9c:41:
a8:df:03:0d:d2:91:d1:2f:e0:98:f1:32:ac:0c:3c:61:e9:98:
5f:19:4b:5b:a6:f3:47:db:cb:30:4a:da:fb:b0:2b:c9:f3:a9:
59:ad:6d:ba:5c:21:4f:75:84:52:26:cc:78:13:2f:95:42:7c:
78:c8:5a:4f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPWMwQ9FNqwCSTvjhY2+T9DdcHtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjUxNTI0MjdaFw0yNzA5MjQxNTI5MjdaMDMxMTAvBgNV
BAMTKEFCQzg4MTM0NzI1MTdEQzE1OTkyREU4QTMzNzZFQ0EzQUMwQjU3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzd/hoZni2FkQjVazQWTZMLd0Z
Dam0GEQNBuL3ltYq0mHlAYgcSpzvm5vPjShB0EgCyM/cxpHF/bDjdP/0RI+KPENN
5QnUu444JSFqp1Rt5iZkj444sWzBViXHkuKS8ueiQjdnYTRtxJArOutGJvTj25Y1
auF8RKsqIQkIfbKVwvluQQwAJAnQYQA7aU5bpO3lysA+IN6O8P5AoSb3Y1WQ+XOz
tE4AoshJmhKUxWq1Q8vrN13mDJ7ZIBXuB3UgTaJJLFNOKU8POOSmSPzfkZDxgwz0
2N4GaU1/kSBWkRMoOs2ZsqFhdFDyQFgQgVJ0eB6tGeW0vEJKFoPXvhTCtZ/bAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUq8iBNHJRfcFZkt6KM3bso6wLV5kwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzMTM1
MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKTXZwwDQYJKoZIhvcNAQELBQADggEBAIL3MtmzSSXoRVuMfjyHjKA04+Hom2Ew
2bwlyT/XOLSv/BINd2nQhXCDw1OSFE32f1TickHS60joVt/lX0QJEeBqxTzR9e7z
zKjO8Rxqjn2MGULIZND67ekR7ccliJatrCRYyRr0VWullh1zlKBUbopx9iy9ag0k
jK0qWuXSXKpX0Iri0vsT46uxHkgIePKki0FQG+K/ujs4NTN4kVotnWfQLOk/64rZ
J1yasK2c7VFGi3ej2TLy+Z8uzSgp4UzknlBnEzGcQajfAw3SkdEv4JjxMqwMPGHp
mF8ZS1um80fbyzBK2vuwK8nzqVmtbbpcIU91hFImzHgTL5VCfHjIWk8=
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:09 2026 by rpki-client