Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3136382e302f32322d3232203d3e20313431393935.roa
File: 3134372e39332e3136382e302f32322d3232203d3e20313431393935.roa (raw, json)
Hash identifier: EjtUDFWie9uklnYeXxIxysAA7ZIMRjgyblbvignfu+I=
Subject key identifier: BF:BB:45:B3:7F:DB:95:DD:0D:C5:CF:EB:91:61:92:8C:3D:E3:A8:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F4F7193EE019B5E8AE1C4A20C448B3D5372FFAA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3136382e302f32322d3232203d3e20313431393935.roa
Signing time: Mon 23 Mar 2026 11:37:21 +0000
ROA not before: Mon 23 Mar 2026 11:32:21 +0000
ROA not after: Mon 22 Mar 2027 11:37:21 +0000
asID: 141995
IP address blocks: 147.93.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4f:71:93:ee:01:9b:5e:8a:e1:c4:a2:0c:44:8b:3d:53:72:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 23 11:32:21 2026 GMT
Not After : Mar 22 11:37:21 2027 GMT
Subject: CN=BFBB45B37FDB95DD0DC5CFEB9161928C3DE3A816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:3c:26:e0:59:18:c6:50:a8:ff:d7:b6:57:
38:78:55:91:74:0e:89:eb:fc:67:45:f4:6c:74:38:
04:20:be:42:8b:ed:0f:b5:50:09:6e:c5:4f:8c:c8:
1c:d1:47:93:ec:5e:4b:1d:12:3e:e6:96:25:91:7f:
18:37:7b:51:90:95:1e:f5:4c:c3:fd:f4:50:ad:60:
89:62:e3:75:33:2b:57:94:fd:08:68:a2:a8:26:e6:
76:15:89:40:e5:3f:ac:bc:64:5e:78:bb:f6:03:b4:
98:7a:2e:20:0a:41:8f:38:6c:db:b9:bc:9d:ca:b3:
86:87:09:55:8d:47:ef:f1:aa:7d:16:fa:35:90:8b:
fe:1e:83:1f:4d:b1:2d:20:06:d9:11:28:27:5c:39:
e9:7e:09:1e:0b:47:05:d8:ba:dc:29:aa:35:10:bb:
4a:38:be:38:31:9d:67:8d:42:de:48:aa:72:0d:48:
b3:95:e3:ea:e7:0d:9e:79:fd:2c:44:75:93:28:f2:
83:e1:98:6c:1f:ff:2d:5f:f4:2e:b8:ad:38:61:da:
85:1d:9e:0b:59:83:09:d2:3d:9f:5b:03:71:d5:64:
ac:57:31:90:2c:f1:60:40:d7:0a:90:b3:e7:88:6d:
43:ed:02:a2:92:f5:bb:0c:7e:50:95:60:5f:e2:5b:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:45:B3:7F:DB:95:DD:0D:C5:CF:EB:91:61:92:8C:3D:E3:A8:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3136382e302f32322d3232203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.168.0/22
Signature Algorithm: sha256WithRSAEncryption
78:1d:22:73:bf:f5:8a:7b:8c:91:f7:b9:52:eb:47:0a:80:c0:
74:4f:77:3c:c2:b3:9f:28:08:f3:49:50:31:e4:59:7d:2b:e1:
1d:45:fa:f9:c8:41:3b:29:bf:e5:bc:fc:22:b0:d1:57:1c:45:
7d:ee:cd:d2:9d:18:7e:60:aa:f8:e7:3d:64:37:b2:55:79:8a:
52:d6:75:71:8c:7d:be:23:9b:a3:fe:52:78:f2:af:46:99:87:
3c:a1:4c:7c:97:54:b0:83:d8:17:5f:f1:5d:93:19:ce:76:71:
ec:3e:cc:ae:6c:70:3d:6e:95:16:e4:ee:72:6b:96:ec:02:ef:
05:e1:15:24:66:39:a8:33:05:01:1e:53:5c:55:6e:d9:f4:2e:
82:3c:09:4f:e7:e4:53:8a:93:a3:26:f2:83:9b:70:6f:ca:50:
6c:0c:3a:6b:ac:fb:8d:0c:ea:e8:bc:75:c7:6c:6c:84:45:fa:
ae:23:4d:cd:e3:28:88:a5:e5:53:dd:35:08:d7:ab:6b:91:ff:
0d:88:58:82:58:a0:e7:9c:5c:69:03:22:43:b8:ad:66:ea:8a:
fc:15:82:15:13:1e:a5:39:71:9a:8e:13:10:ca:7c:bd:e6:a4:
08:71:b8:7a:e1:41:04:cb:48:48:f0:42:ab:ea:ad:d6:5f:7b:
fa:04:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:47 2026 by rpki-client