Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37372e302f32342d3234203d3e203437353833.roa
File: 3134372e39332e37372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: FG9r2SdQxZBPL4qMEypxYgczTDLRiK5nkFhCnMxX+OI=
Subject key identifier: 4C:E7:B1:11:B2:74:66:23:1F:6E:18:17:8D:D4:53:AE:10:20:B6:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A04C6F1B7F5172878FD23E60F92A27C9B04CB28
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37372e302f32342d3234203d3e203437353833.roa
Signing time: Fri 13 Feb 2026 16:23:21 +0000
ROA not before: Fri 13 Feb 2026 16:18:21 +0000
ROA not after: Fri 12 Feb 2027 16:23:21 +0000
asID: 47583
IP address blocks: 147.93.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:04:c6:f1:b7:f5:17:28:78:fd:23:e6:0f:92:a2:7c:9b:04:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 13 16:18:21 2026 GMT
Not After : Feb 12 16:23:21 2027 GMT
Subject: CN=4CE7B111B27466231F6E18178DD453AE1020B6B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e2:f6:4c:ce:3e:c3:26:d5:5a:3b:4c:36:ea:
34:15:53:64:67:77:34:cd:9a:32:16:e9:d1:77:ce:
c4:b9:1e:fe:35:fc:0e:f5:61:56:b6:92:51:21:94:
36:f8:0c:6e:76:e5:4c:ce:7e:40:2b:66:34:56:c9:
fd:db:89:2d:09:c0:a8:97:93:c8:a6:f8:84:a6:e7:
88:69:34:27:df:92:bf:63:1b:41:ea:3b:f7:5d:92:
3e:f1:ef:53:55:20:c4:98:b3:eb:61:f5:bf:42:5c:
c2:bc:f3:d5:7f:4e:d1:1d:ee:f5:9e:90:cc:0e:4c:
5f:1d:b7:62:96:f2:28:e2:62:21:0c:e5:56:5b:82:
0b:23:ad:a0:ee:0f:17:64:b9:aa:80:fe:b1:83:6f:
8e:5a:bc:af:f1:df:82:ee:ec:61:09:51:d4:c9:6d:
49:f3:3c:06:f6:c5:99:05:b7:60:f4:e2:5e:49:b4:
29:f6:e2:98:91:ab:e2:b7:10:62:cd:43:69:e7:87:
b2:97:fa:a0:13:c1:37:02:78:2d:da:c1:b2:63:f2:
77:39:5f:e6:ae:cd:48:a6:65:ad:33:0d:f9:0c:5b:
e9:f8:e3:ce:93:80:0b:3c:91:ad:80:65:03:6c:66:
85:35:02:22:05:39:26:61:27:6c:db:f0:06:f8:1a:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:B1:11:B2:74:66:23:1F:6E:18:17:8D:D4:53:AE:10:20:B6:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e37372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:94:2a:80:05:bd:59:e8:10:06:1b:ec:56:79:cf:da:ec:77:
46:ac:68:eb:96:b1:6a:b7:57:74:aa:b0:59:0a:95:aa:6f:d8:
79:1a:2f:f7:0c:41:14:f3:c2:2c:e9:54:d6:d4:cb:7a:88:59:
42:f2:c9:60:ec:84:97:b5:c3:46:01:86:c9:8e:49:54:59:1b:
16:5a:24:42:31:00:ef:8b:1d:59:8a:37:5f:21:f9:2a:70:b6:
04:b2:ce:6a:3c:17:bb:0e:3d:1a:1d:fd:45:61:12:40:f3:38:
0c:42:79:9e:bc:88:fc:2e:c2:ea:01:0d:de:0d:9d:6e:80:a1:
0c:01:03:f2:f2:df:b4:64:27:26:d6:9e:cd:0c:9b:df:52:a6:
cb:57:6f:bc:8b:53:06:17:a9:29:3b:09:34:ce:64:26:d7:37:
02:b9:b9:4e:96:0d:0c:78:8f:6e:58:64:6e:cd:01:b3:58:cb:
bb:93:58:92:5a:0e:c4:32:dd:47:23:7f:6f:18:39:f2:08:63:
c9:9e:a8:a2:08:0e:e6:3e:01:37:8f:63:b9:2b:48:8d:08:bb:
0a:69:8e:ea:71:66:29:c9:f6:3a:b1:5c:bc:34:f2:f3:e9:53:
b2:a3:23:91:f9:5b:c9:b9:c9:ec:6e:f2:2f:4d:17:d0:09:5b:
2d:c0:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:06 2026 by rpki-client