Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
File: 3134372e39332e3134342e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier: fmfjUQgRicFa235HLADZmh6eCBcVzHiaVafTesKSHzw=
Subject key identifier: 86:0A:09:87:62:64:EC:AF:AA:0B:4D:08:7F:6D:39:8D:EA:98:FF:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A072EB307499282214D53A46A437ADF6914B3CD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
Signing time: Fri 24 Oct 2025 14:48:46 +0000
ROA not before: Fri 24 Oct 2025 14:43:46 +0000
ROA not after: Fri 23 Oct 2026 14:48:46 +0000
asID: 40021
IP address blocks: 147.93.144.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:07:2e:b3:07:49:92:82:21:4d:53:a4:6a:43:7a:df:69:14:b3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 14:43:46 2025 GMT
Not After : Oct 23 14:48:46 2026 GMT
Subject: CN=860A09876264ECAFAA0B4D087F6D398DEA98FF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:ed:4c:05:a4:6c:88:f0:43:7b:b1:f0:e3:
8e:05:32:22:45:56:18:e3:cf:36:94:ed:78:16:bf:
de:7c:6d:c0:88:30:b4:9c:49:d9:bd:ad:e3:ae:ae:
7e:94:e7:b7:dc:9a:21:59:38:4a:e5:1f:e2:18:eb:
f4:a2:71:a7:33:c4:c4:8d:f4:48:68:52:5b:1f:4d:
ec:f5:d3:04:79:99:06:a0:0e:b0:97:12:ad:3f:9b:
47:a8:be:d3:ce:52:60:81:da:a7:c6:a4:6c:09:3d:
48:ac:b2:0f:9e:ce:0b:d1:38:4e:95:34:4b:5f:71:
39:a0:af:32:57:9d:9a:5a:ec:b5:9d:d7:78:e4:e4:
64:84:83:27:6d:00:3a:ad:8e:98:ea:9e:cc:3f:8a:
24:3c:7f:0e:17:25:30:55:6d:a9:f7:e6:9e:10:d3:
06:a3:48:c5:24:a5:74:ef:11:a2:b4:3e:ab:c6:0c:
1a:e8:00:28:72:0a:98:22:81:c0:65:3d:99:1e:24:
84:10:eb:50:d0:47:d6:79:ac:de:95:d4:b0:bb:22:
f8:c4:6f:57:5f:04:15:61:43:d7:86:e9:11:e0:9a:
0c:34:6a:44:43:bf:e0:dd:33:de:50:f5:76:3d:38:
22:22:cf:c8:0d:97:9d:1a:e4:32:84:bb:6f:34:95:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:09:87:62:64:EC:AF:AA:0B:4D:08:7F:6D:39:8D:EA:98:FF:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:23:ec:05:d0:f0:a5:f2:29:07:5c:e8:41:0e:7b:70:08:85:
1a:34:42:8c:82:59:d6:4b:ea:dd:a4:e3:b5:5c:a6:7c:48:4d:
34:26:23:a7:1c:6d:13:9b:ba:03:42:49:47:20:7a:d7:cc:49:
b6:d7:9a:6e:72:77:e5:e6:6d:d7:28:c3:85:03:3c:5f:89:fe:
06:10:e6:79:e8:6d:9c:97:fa:8c:13:f9:0d:a1:4c:1d:e7:f3:
b7:4e:2c:81:17:36:c3:5f:2b:df:9a:4c:38:42:7c:76:1e:6e:
15:cf:b9:45:0d:72:b9:87:bc:44:13:47:3b:44:99:e0:e0:1b:
f2:36:c0:86:b3:7d:fb:3e:28:ca:6b:76:cd:e5:b7:7a:1f:d4:
6a:da:21:35:d6:68:54:ac:f7:c0:cd:38:98:bb:67:ac:ae:a7:
fd:a0:ed:ed:be:6a:0a:e7:ff:99:e6:11:74:4f:07:85:19:3d:
c9:37:fc:4d:bb:70:d1:0a:81:5e:7f:2d:f6:37:31:58:7d:ac:
c4:68:a7:56:88:87:c7:c5:08:f1:36:c0:88:bf:39:3f:1f:8a:
8c:07:5e:7f:3e:c5:35:9f:a6:d7:4f:2b:42:16:2f:fd:68:93:
88:34:c1:f0:a7:71:47:9c:70:2f:da:18:bc:3e:3b:c5:eb:00:
89:f7:d6:64
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOgcuswdJkoIhTVOkakN632kUs80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMjQxNDQzNDZaFw0yNjEwMjMxNDQ4NDZaMDMxMTAvBgNV
BAMTKDg2MEEwOTg3NjI2NEVDQUZBQTBCNEQwODdGNkQzOThERUE5OEZGMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfu1MBaRsiPBDe7Hw444FMiJF
VhjjzzaU7XgWv958bcCIMLScSdm9reOurn6U57fcmiFZOErlH+IY6/SicaczxMSN
9EhoUlsfTez10wR5mQagDrCXEq0/m0eovtPOUmCB2qfGpGwJPUissg+ezgvROE6V
NEtfcTmgrzJXnZpa7LWd13jk5GSEgydtADqtjpjqnsw/iiQ8fw4XJTBVban35p4Q
0wajSMUkpXTvEaK0PqvGDBroAChyCpgigcBlPZkeJIQQ61DQR9Z5rN6V1LC7IvjE
b1dfBBVhQ9eG6RHgmgw0akRDv+DdM95Q9XY9OCIiz8gNl50a5DKEu280ld69AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUhgoJh2Jk7K+qC00If205jeqY/xYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzMTM0
MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
k12QMA0GCSqGSIb3DQEBCwUAA4IBAQCaI+wF0PCl8ikHXOhBDntwCIUaNEKMglnW
S+rdpOO1XKZ8SE00JiOnHG0Tm7oDQklHIHrXzEm215pucnfl5m3XKMOFAzxfif4G
EOZ56G2cl/qME/kNoUwd5/O3TiyBFzbDXyvfmkw4Qnx2Hm4Vz7lFDXK5h7xEE0c7
RJng4BvyNsCGs337PijKa3bN5bd6H9Rq2iE11mhUrPfAzTiYu2esrqf9oO3tvmoK
5/+Z5hF0TweFGT3JN/xNu3DRCoFefy32NzFYfazEaKdWiIfHxQjxNsCIvzk/H4qM
B15/PsU1n6bXTytCFi/9aJOINMHwp3FHnHAv2hi8PjvF6wCJ99Zk
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:53:24 2025 by rpki-client