Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
File: 3134372e39332e3132382e302f32302d3332203d3e203430303231.roa (raw, json)
Hash identifier: MrvhHsy8G5mTG5HoBg6wkKaM+e743AMIhdQTFu9tVa8=
Subject key identifier: 74:75:82:83:2B:1B:AB:38:71:C5:D2:74:D7:E6:9F:9A:FB:3A:94:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FCB50DA381278346136A53472B82C68AA382914
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
Signing time: Fri 24 Oct 2025 14:48:47 +0000
ROA not before: Fri 24 Oct 2025 14:43:47 +0000
ROA not after: Fri 23 Oct 2026 14:48:47 +0000
asID: 40021
IP address blocks: 147.93.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:cb:50:da:38:12:78:34:61:36:a5:34:72:b8:2c:68:aa:38:29:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 14:43:47 2025 GMT
Not After : Oct 23 14:48:47 2026 GMT
Subject: CN=747582832B1BAB3871C5D274D7E69F9AFB3A9481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:9e:63:7d:36:97:4d:a0:45:89:6f:08:03:
6f:52:33:81:42:3a:4c:2c:88:b4:24:91:be:be:b7:
ff:10:b0:32:d1:04:5e:97:29:72:ed:8b:98:42:91:
36:4c:ff:2e:1d:b2:a2:d0:ec:66:0f:4e:a3:d3:2b:
18:6a:dc:50:9b:0a:8f:82:70:74:f7:e5:ba:62:bf:
d3:75:2f:13:4c:5e:cf:50:1b:d1:57:d1:25:a7:7e:
69:11:40:13:5e:0c:96:41:3c:7c:d3:cd:e9:d6:4b:
61:f7:ba:fb:fd:e7:8b:d0:ce:e8:e2:ae:d3:dc:81:
18:9b:b4:58:33:95:c9:90:a7:39:ac:06:69:97:bf:
e4:b8:22:68:0b:eb:31:0a:b3:0f:f1:c3:af:01:6c:
fe:f8:2a:69:28:0c:64:08:9e:62:d2:79:ba:57:66:
db:cf:e7:b2:52:83:6e:4a:e3:d6:91:56:4a:f2:0e:
b4:af:d3:c5:b8:ff:34:9d:32:28:8e:96:ac:01:ca:
7e:f7:66:de:1f:be:25:ec:b4:79:45:ea:3d:39:bb:
10:85:48:6e:70:a9:51:15:89:07:af:ce:ac:8b:42:
03:f3:6b:7a:ec:1f:4c:07:22:7f:68:42:b6:6a:0c:
73:8b:19:fd:48:93:d3:39:6d:36:44:71:de:49:41:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:75:82:83:2B:1B:AB:38:71:C5:D2:74:D7:E6:9F:9A:FB:3A:94:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.128.0/20
Signature Algorithm: sha256WithRSAEncryption
70:1a:38:ea:88:22:e4:2a:1f:6d:b6:05:cd:f1:b7:49:22:3f:
45:51:5d:f0:cd:e4:9d:1a:4a:8a:34:d4:e6:c4:2c:3c:28:25:
73:94:ce:8a:46:fd:0c:3c:86:25:dd:ef:9c:bb:5b:6d:11:99:
cd:a2:77:86:20:ec:80:eb:2d:40:2a:6d:6a:16:06:e7:f8:f3:
ba:49:ca:a5:7e:89:7a:d1:1f:91:e8:3d:8b:9b:d9:fc:26:ec:
93:76:5c:cb:d2:c6:db:7f:09:b1:79:f2:46:0f:39:18:12:50:
9d:7a:a8:12:ed:b8:57:46:0b:bc:27:90:e8:e5:de:d6:5d:14:
7e:93:67:84:da:36:35:10:f5:89:ba:56:93:7c:ac:a1:7b:3d:
c9:4e:e1:32:04:a9:c5:55:3e:17:3d:46:40:a2:14:fb:b7:01:
55:de:2b:76:a2:06:0a:fb:f8:ab:27:22:ab:57:06:ca:ec:d7:
38:4a:15:40:d2:ae:bc:97:29:2c:52:cc:6a:33:cf:4b:d8:d9:
e8:e8:70:b2:b8:32:0a:52:83:db:66:c2:02:58:8e:34:60:93:
91:b9:7c:91:63:22:fc:3f:a4:eb:b4:1f:4f:29:b8:3e:cb:a8:
b0:81:f6:11:f7:72:cc:08:24:a1:5e:24:7d:93:18:53:5a:d7:
85:d0:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:31 2025 by rpki-client