Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
File: 3134372e39332e31362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: A4jmmsmlR8OKHHBsU6ofTor/yIFdrNCT3rsMm3VSa58=
Subject key identifier: 2E:73:FC:DB:EE:9F:5B:00:D3:F6:D2:5A:E8:B2:A2:BB:BF:B8:EB:ED
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 474C31DD65B5018C2FFAE90D36D927B4312973D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
Signing time: Wed 29 Oct 2025 14:48:47 +0000
ROA not before: Wed 29 Oct 2025 14:43:47 +0000
ROA not after: Wed 28 Oct 2026 14:48:47 +0000
asID: 47583
IP address blocks: 147.93.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4c:31:dd:65:b5:01:8c:2f:fa:e9:0d:36:d9:27:b4:31:29:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 29 14:43:47 2025 GMT
Not After : Oct 28 14:48:47 2026 GMT
Subject: CN=2E73FCDBEE9F5B00D3F6D25AE8B2A2BBBFB8EBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:9c:af:bd:68:e9:8d:42:41:71:46:f3:09:
70:b4:75:a5:40:c7:9e:98:90:d4:04:72:da:24:80:
c5:1e:05:95:7d:ac:7f:6f:e8:12:58:86:ab:8c:4c:
5a:5a:9a:04:11:ba:0b:d5:9c:1c:76:f4:8d:2c:ab:
22:6b:64:a8:59:b4:5c:03:c8:f8:40:24:de:a5:60:
d2:08:11:65:9e:99:99:d7:a3:75:5b:a1:86:f2:0a:
91:16:2e:b5:11:90:ba:5d:35:d7:d1:1e:1a:51:00:
75:40:eb:65:b2:e7:31:31:97:94:c7:9e:bb:74:07:
c1:1c:db:2f:9d:9c:2d:92:ff:54:c7:74:88:ee:e2:
0e:99:d0:55:22:55:63:54:0b:12:f4:9b:c2:d1:64:
8c:6e:75:b5:30:20:bf:ff:17:30:82:16:e4:d9:f3:
39:d2:6c:53:ac:d3:aa:21:92:dd:26:f6:00:d1:0c:
83:fe:4c:f2:65:44:cd:35:41:7b:66:10:14:68:5e:
5a:67:6d:a7:40:91:e2:11:80:95:50:52:86:db:35:
cb:49:97:94:9d:20:aa:32:17:1b:b2:69:34:f7:7d:
e5:e3:6d:19:6b:b8:86:9f:0a:db:7c:3f:26:5d:21:
da:e2:27:e2:b5:06:9d:c9:e2:b4:67:d9:ea:73:d7:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:FC:DB:EE:9F:5B:00:D3:F6:D2:5A:E8:B2:A2:BB:BF:B8:EB:ED
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e31362e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:01:36:d9:af:50:58:f1:12:90:69:db:27:35:f2:81:f9:de:
40:ec:fc:39:f2:a7:a4:be:9b:c4:72:35:47:3b:34:76:98:10:
35:c3:4f:2c:9e:60:b2:f6:f8:dd:41:5a:82:97:73:27:4a:4b:
ce:48:8a:b0:ae:63:1e:07:ce:ee:76:6b:da:dd:3c:b1:8c:38:
36:4a:39:e1:79:c8:6b:b8:9c:d8:a1:e6:38:ca:78:fc:7a:ba:
0a:29:2e:77:04:f5:86:4d:49:9e:eb:3b:8a:66:bd:02:e2:1f:
25:04:ed:84:65:ad:a0:2c:70:f1:2b:b1:1c:0c:19:4a:f8:5e:
6f:48:a7:2f:4d:dc:1e:95:7f:4e:67:61:52:dd:f7:bd:c0:6c:
37:a2:6f:2d:dd:fe:ee:e5:91:20:ce:65:cf:b2:49:78:97:e2:
4f:79:f1:8f:d1:80:6b:cf:c4:b5:c4:70:a6:0e:15:62:eb:36:
a0:1f:75:16:71:7f:92:22:1a:ef:ae:a8:70:dc:f7:62:34:18:
5e:59:93:3e:84:e4:3a:30:bc:b3:dd:3e:4f:c2:c3:8f:d7:d3:
7b:b5:96:37:49:f8:7a:8f:13:3c:8a:89:91:2f:e3:27:8e:ab:
81:05:d3:26:07:04:62:7f:66:1a:f2:3d:ee:86:14:4f:56:61:
9e:b8:76:9d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUR0wx3WW1AYwv+ukNNtkntDEpc9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMjkxNDQzNDdaFw0yNjEwMjgxNDQ4NDdaMDMxMTAvBgNV
BAMTKDJFNzNGQ0RCRUU5RjVCMDBEM0Y2RDI1QUU4QjJBMkJCQkZCOEVCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdZyvvWjpjUJBcUbzCXC0daVA
x56YkNQEctokgMUeBZV9rH9v6BJYhquMTFpamgQRugvVnBx29I0sqyJrZKhZtFwD
yPhAJN6lYNIIEWWemZnXo3VboYbyCpEWLrURkLpdNdfRHhpRAHVA62Wy5zExl5TH
nrt0B8Ec2y+dnC2S/1THdIju4g6Z0FUiVWNUCxL0m8LRZIxudbUwIL//FzCCFuTZ
8znSbFOs06ohkt0m9gDRDIP+TPJlRM01QXtmEBRoXlpnbadAkeIRgJVQUobbNctJ
l5SdIKoyFxuyaTT3feXjbRlruIafCtt8PyZdIdriJ+K1Bp3J4rRn2epz19B7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQULnP82+6fWwDT9tJa6LKiu7+46+0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM3MmUzOTMzMmUzMTM2
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJNd
EDANBgkqhkiG9w0BAQsFAAOCAQEAOgE22a9QWPESkGnbJzXygfneQOz8OfKnpL6b
xHI1Rzs0dpgQNcNPLJ5gsvb43UFagpdzJ0pLzkiKsK5jHgfO7nZr2t08sYw4Nko5
4XnIa7ic2KHmOMp4/Hq6CikudwT1hk1Jnus7ima9AuIfJQTthGWtoCxw8SuxHAwZ
Svheb0inL03cHpV/TmdhUt33vcBsN6JvLd3+7uWRIM5lz7JJeJfiT3nxj9GAa8/E
tcRwpg4VYus2oB91FnF/kiIa766ocNz3YjQYXlmTPoTkOjC8s90+T8LDj9fTe7WW
N0n4eo8TPIqJkS/jJ46rgQXTJgcEYn9mGvI97oYUT1Zhnrh2nQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:47 2025 by rpki-client