Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3136382e302f32312d3332203d3e203531313637.roa
File: 3134372e39332e3136382e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: tLCh2RTitPkoC8zny0QuNOr/pFsSXJAJNJlIiNJqJpM=
Subject key identifier: 86:3F:8D:D2:FC:98:33:91:9C:4F:3C:D5:50:1F:07:76:F4:8F:26:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49D7D9DE43130830F96EA429ABDCCD294B29976C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3136382e302f32312d3332203d3e203531313637.roa
Signing time: Fri 24 Oct 2025 14:48:46 +0000
ROA not before: Fri 24 Oct 2025 14:43:46 +0000
ROA not after: Fri 23 Oct 2026 14:48:46 +0000
asID: 51167
IP address blocks: 147.93.168.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d7:d9:de:43:13:08:30:f9:6e:a4:29:ab:dc:cd:29:4b:29:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 14:43:46 2025 GMT
Not After : Oct 23 14:48:46 2026 GMT
Subject: CN=863F8DD2FC9833919C4F3CD5501F0776F48F26AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:4f:d0:0c:4b:70:29:19:ed:c3:5f:70:61:
43:83:b4:32:1d:f7:ee:77:b8:cf:0c:1d:67:7e:68:
a9:a7:20:d4:59:6c:61:a0:e6:06:8a:9c:e0:db:9d:
6a:56:19:66:a1:15:78:97:29:70:b4:44:f5:c3:43:
f9:0f:fe:bd:63:99:ab:3d:1e:8a:5e:4c:58:7f:56:
60:79:5e:47:f0:03:cb:ab:b3:59:30:be:f5:54:8e:
18:e7:de:3d:b6:86:1f:e8:da:e0:74:f0:a3:7a:e1:
41:9a:55:a9:35:3a:da:02:5a:77:9b:a4:c0:bc:9e:
28:58:c0:35:30:7f:29:4e:52:29:b1:d2:f3:a8:6f:
bc:fe:42:f9:05:e4:56:cf:70:e4:79:52:57:fd:de:
48:21:3e:29:82:c1:94:01:77:1b:64:8b:f9:4f:13:
d5:ff:c3:0b:f5:96:49:9f:9b:77:ae:db:b8:9a:6a:
33:f6:9b:9e:0e:43:73:94:5e:20:8c:4d:83:44:b2:
8b:bf:c0:2b:5f:9e:bf:33:94:33:e4:87:60:fe:bf:
95:09:1f:17:f0:3e:23:34:84:d9:f1:aa:2d:da:50:
fa:24:7e:e2:a9:9f:79:c7:8f:f7:85:b4:0e:3e:f0:
32:ff:c2:e0:cf:e5:29:05:ae:9b:f4:af:a5:4b:d4:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:8D:D2:FC:98:33:91:9C:4F:3C:D5:50:1F:07:76:F4:8F:26:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3136382e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.168.0/21
Signature Algorithm: sha256WithRSAEncryption
79:cf:33:ff:a2:47:41:58:e8:1a:ca:c5:03:35:55:db:82:8c:
02:d3:88:f4:80:42:4b:b7:ff:11:60:07:6b:d6:44:cf:c7:a3:
4e:df:c3:ba:14:81:2b:ca:83:37:0c:55:18:4b:e9:01:93:3d:
af:d7:b0:9c:b7:fc:12:0a:ec:61:b9:4b:dc:e2:3c:a4:89:b1:
4b:46:27:eb:a6:64:16:14:15:8a:be:fb:a3:36:85:ce:b2:81:
4a:cc:65:c7:92:0a:e7:20:3e:96:46:a5:ec:a3:58:77:8a:c5:
46:ba:39:2b:24:3a:aa:e2:66:00:90:9e:94:d4:f0:88:54:90:
04:38:12:c1:ef:ca:30:43:81:f5:f6:b9:60:05:f5:da:82:b3:
cf:2a:ee:93:a1:df:32:37:a1:a8:29:05:4c:9f:4e:c5:73:03:
b1:3d:67:aa:38:d6:79:e3:af:04:4e:77:e1:b1:3b:e5:6e:f2:
65:1b:0c:65:d4:dc:ea:81:54:2f:7e:55:2f:e5:17:4b:2c:ab:
0b:11:86:7f:f4:4d:74:43:b8:ce:42:dd:fb:46:0c:9d:f3:4e:
d6:e7:3a:a7:92:8d:a7:a3:6b:c8:96:9e:5e:f6:d2:b4:9f:4b:
98:ee:21:59:83:5f:f3:8a:a5:d9:bf:a6:75:a7:d6:63:4e:a7:
67:42:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:01:32 2025 by rpki-client