Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa
File: 3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 3duzsppA2801hH08dZ/COVJ2viZSMsA5Z1N8Om8kA/A=
Subject key identifier: C8:92:DE:30:F1:AC:65:9B:D9:DC:20:32:C1:18:F5:E1:15:D0:7D:FE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4679C8881022E8119C64DA01276FA00D151B54DD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 24 Oct 2025 14:48:46 +0000
ROA not before: Fri 24 Oct 2025 14:43:46 +0000
ROA not after: Fri 23 Oct 2026 14:48:46 +0000
asID: 141995
IP address blocks: 147.93.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:79:c8:88:10:22:e8:11:9c:64:da:01:27:6f:a0:0d:15:1b:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 14:43:46 2025 GMT
Not After : Oct 23 14:48:46 2026 GMT
Subject: CN=C892DE30F1AC659BD9DC2032C118F5E115D07DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:1d:49:77:af:61:87:fa:56:5d:78:4b:39:
1e:3d:ef:47:29:53:28:da:c2:ea:e3:c7:3d:5c:84:
9e:77:d1:49:5c:37:2e:f2:27:1f:25:7d:d9:c0:1b:
4b:de:f4:1b:96:48:b8:e7:17:b5:1f:ad:1e:94:2a:
8f:9e:c5:a1:8a:b4:7e:e5:b4:86:c9:c6:b7:09:e3:
bb:8b:5b:e2:14:67:5f:19:b8:f2:5a:71:21:10:88:
de:b3:e6:71:14:a8:00:20:3e:58:59:58:4a:aa:7a:
3a:30:6c:a8:d7:c4:e3:97:11:cf:62:b1:89:d7:7c:
28:a6:05:09:c4:03:fe:6b:cd:6a:fb:d5:96:9a:89:
b0:37:0a:61:1f:e1:5d:70:13:b7:87:74:92:bd:3a:
f0:9f:a3:5a:47:41:06:94:e3:96:f7:1a:a9:43:bf:
79:43:5e:1d:33:a2:a5:66:37:f1:29:84:61:1a:83:
1d:55:06:c0:7c:1e:2b:1f:68:36:77:45:9e:8f:d2:
49:67:7d:20:a0:14:98:61:c4:a5:04:46:cf:9f:bd:
9b:b5:79:dc:6e:8b:0b:3f:a5:fc:63:e4:08:0f:4e:
26:c3:d9:00:da:21:64:fd:e1:de:c3:f1:db:64:8e:
b9:a6:1c:cf:f4:43:78:77:42:2f:43:fe:9e:29:83:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:DE:30:F1:AC:65:9B:D9:DC:20:32:C1:18:F5:E1:15:D0:7D:FE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3135322e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:da:5d:aa:62:8e:8e:60:b3:87:54:d5:84:39:ad:3f:3f:75:
80:94:99:df:ab:51:c5:5d:cd:72:90:1d:ef:66:05:1c:fd:3d:
cc:58:8e:d5:66:7e:e0:e9:20:a4:c6:93:6c:40:a0:47:94:81:
11:e8:51:ce:1b:26:2f:50:73:ee:77:f1:c6:08:dc:d2:60:59:
e7:a1:26:f6:ff:6f:c4:77:9d:50:d1:35:0e:15:8d:82:08:3c:
39:ca:cb:d4:12:37:06:10:07:6f:77:44:c1:19:23:fb:e9:97:
32:83:74:f6:b4:25:19:87:54:66:d9:7b:3a:60:be:c5:2f:e8:
98:e9:a0:c4:29:4c:af:eb:46:b9:54:c1:5d:27:ba:be:53:ba:
ec:a1:bf:aa:0d:47:58:4b:7b:78:f1:0a:67:cc:5d:b5:f0:7e:
07:0f:6f:00:1b:bd:b8:6d:e7:71:ae:7e:08:5e:8c:f7:51:58:
62:53:86:09:d8:09:61:41:04:63:ed:3c:04:b3:4a:c8:b0:9f:
3f:69:ad:cf:96:8d:f0:a8:97:ac:17:b7:ce:f2:65:4b:04:53:
e3:c4:09:ce:16:85:7f:08:fe:e2:77:c7:b9:23:97:50:e1:10:
0b:8e:64:5c:31:8a:de:c7:ea:c9:49:95:82:aa:1c:73:a4:ef:
88:e9:05:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:58:40 2025 by rpki-client