Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e382e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5YxyexYXOWHm4B1e95p2EKXjCwpF40/2gVbqrXbJZh8=
Subject key identifier: DB:9B:49:46:3C:86:E1:7E:ED:09:00:0A:7A:CD:21:FC:B2:30:5D:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31558AACDDF2942F97EA9AEE6D7E8D14106C2B0D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e382e302f32312d3234203d3e203437353833.roa
Signing time: Wed 29 Oct 2025 14:48:47 +0000
ROA not before: Wed 29 Oct 2025 14:43:47 +0000
ROA not after: Wed 28 Oct 2026 14:48:47 +0000
asID: 47583
IP address blocks: 147.93.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:55:8a:ac:dd:f2:94:2f:97:ea:9a:ee:6d:7e:8d:14:10:6c:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 29 14:43:47 2025 GMT
Not After : Oct 28 14:48:47 2026 GMT
Subject: CN=DB9B49463C86E17EED09000A7ACD21FCB2305D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:09:e6:d7:2d:1a:43:bf:7f:6d:f2:60:7c:
10:37:18:d7:a8:e5:bc:9e:84:b5:c0:c2:f4:de:8f:
a3:b5:d4:53:16:ce:83:98:ba:68:64:f4:88:07:3d:
8b:26:59:b6:65:6f:ce:a2:e4:48:f2:09:4e:f1:31:
08:e1:8b:39:78:b2:a4:95:be:47:f1:37:47:6f:fb:
fc:40:59:72:c5:be:74:6e:22:36:ea:58:84:f8:ec:
91:ba:2d:ea:16:e9:a0:79:02:62:7c:0f:e3:3c:d5:
51:17:7f:bf:27:4b:ff:eb:3e:da:4d:e9:2e:87:1d:
80:6d:c7:cc:39:2e:7f:8c:46:ea:81:ef:e3:7d:8c:
a5:7d:ba:dc:8f:5d:0c:fe:24:56:65:82:36:3c:85:
6a:83:2b:e3:46:94:b5:24:ec:dd:46:d5:cb:98:46:
d2:69:2d:69:77:ed:82:dc:f4:cf:3a:77:b2:8d:2d:
ba:f3:39:2f:a8:26:ed:51:aa:d2:22:5a:71:79:f0:
f4:aa:af:db:26:53:47:c2:cd:31:55:d3:a0:eb:54:
c7:ea:27:ac:c5:7c:6e:47:fb:e1:92:b5:94:00:91:
f5:78:c7:ef:8a:00:bf:3e:21:1e:30:19:6c:53:db:
5a:25:d6:19:f3:1a:27:b1:8c:47:b1:42:be:ef:53:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:49:46:3C:86:E1:7E:ED:09:00:0A:7A:CD:21:FC:B2:30:5D:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:00:32:db:32:9e:45:bf:ff:e3:b5:93:67:b5:5e:32:ce:c6:
d1:45:3c:a4:36:b0:7b:86:b3:f5:f1:18:c2:08:0b:d2:4d:46:
47:bb:74:51:c3:70:46:2a:5c:5f:97:ad:06:22:04:87:bb:21:
b1:ab:5d:7e:da:59:bb:b3:71:db:4f:b3:b1:d5:87:22:81:cb:
a5:a1:f1:59:8d:c0:24:59:ba:75:2b:ab:64:76:1b:26:37:de:
0f:1c:0e:3d:76:ab:d5:2d:52:e1:f1:ec:f5:8f:3e:44:d2:0d:
38:a8:c7:d9:4c:aa:a1:53:7b:86:13:21:a3:08:58:46:57:58:
35:c7:d4:b5:f2:1e:9e:bc:99:b3:38:00:d5:a1:f9:cb:d4:8f:
e6:28:11:37:6a:1e:5b:84:cb:a4:05:00:0e:0f:83:8d:a7:04:
ba:7e:e6:53:25:1f:c4:e5:6b:7f:33:8d:5b:71:4e:a9:d9:71:
c9:8a:e6:5f:e6:56:24:e3:15:02:8a:82:a9:79:b5:f4:fd:f7:
ff:a0:37:93:77:48:c8:27:4b:c6:48:ef:84:43:22:6d:1a:7b:
2c:97:75:88:33:6e:c6:90:fb:fe:88:56:8a:39:92:9e:3b:c3:
f7:a4:fd:88:f2:a6:e6:96:81:d2:4c:51:ea:6e:7f:0a:38:b8:
92:1a:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:54:49 2025 by rpki-client