Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
File: 38392e3134372e3130302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Ce3JyDl2jP7gP8RpECR6eP0IjEi3TXYMxOSbescjnsA=
Subject key identifier: 53:D9:1C:FC:3D:AF:7D:9B:50:50:4F:66:7F:80:59:11:4F:E8:16:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 591B0016FDB21C7867486DD3E4BEECE1CEE83195
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
Signing time: Thu 26 Feb 2026 09:23:21 +0000
ROA not before: Thu 26 Feb 2026 09:18:21 +0000
ROA not after: Thu 25 Feb 2027 09:23:21 +0000
asID: 51167
IP address blocks: 89.147.100.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1b:00:16:fd:b2:1c:78:67:48:6d:d3:e4:be:ec:e1:ce:e8:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 09:18:21 2026 GMT
Not After : Feb 25 09:23:21 2027 GMT
Subject: CN=53D91CFC3DAF7D9B50504F667F8059114FE816FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:36:3b:49:a8:d2:0d:aa:2f:6e:cd:4b:53:
93:7c:11:c6:18:a3:0c:59:d0:7f:c1:d1:42:71:29:
9c:8d:a7:4d:ca:0f:17:9b:ba:38:fd:0c:4e:43:aa:
48:4e:9b:f7:4d:4e:78:a2:a1:aa:24:7c:4e:d9:f6:
97:2c:b1:fc:72:4c:27:65:92:6a:be:8f:7c:ae:a2:
da:82:88:1f:8d:d4:1b:bf:d9:f7:be:98:d8:27:40:
9f:61:49:91:3c:eb:67:89:6f:ef:38:10:11:89:c5:
19:76:9a:c0:4d:2f:9f:9c:66:bc:3a:c4:38:a6:47:
a3:c4:87:2e:2e:ab:18:e2:6f:d7:d8:0a:9b:cc:f4:
2a:a4:3f:84:0c:45:43:95:69:09:51:55:88:04:3c:
df:22:96:7b:c5:f2:fc:a9:d4:52:bd:8f:09:e3:3c:
3a:7c:77:53:2c:f3:b8:ca:d2:c0:c9:f5:04:e1:f2:
ea:ce:6f:f9:72:c8:e2:ac:0d:56:22:4c:e0:39:e8:
d3:3c:3a:09:38:4a:99:ee:05:8a:26:5d:b7:ca:ff:
fb:a3:80:86:52:8a:af:84:33:e4:1a:e2:e3:b3:33:
10:1b:1c:73:9b:1d:7b:39:45:3f:a4:72:59:62:6c:
3c:7d:fd:33:2a:c3:13:14:c4:cc:e0:d8:f3:44:7b:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:1C:FC:3D:AF:7D:9B:50:50:4F:66:7F:80:59:11:4F:E8:16:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.100.0/24
Signature Algorithm: sha256WithRSAEncryption
98:57:1f:4a:d6:da:50:2f:53:8e:c8:e6:15:36:7b:c9:8b:b8:
6b:bb:eb:d3:bc:8a:a2:e9:ed:12:d4:44:a6:2f:3a:b5:40:2f:
27:b7:e3:83:e1:e7:6b:7c:ea:e4:c9:8b:54:46:3b:cf:86:4d:
f6:7f:b4:32:20:82:aa:4d:b9:f2:2f:a8:ba:04:27:7e:0f:57:
43:ce:1f:08:4d:ea:25:f3:20:2d:75:6f:1e:4a:d0:ee:9b:02:
ab:55:45:6d:95:73:3b:44:3c:e0:af:66:fe:2b:e2:8d:89:16:
01:2e:be:a5:5c:2f:36:3b:51:6b:04:c6:24:56:fc:2e:db:3d:
ce:ec:2d:ea:8f:68:49:69:1e:fd:da:7a:ee:7c:16:9a:73:aa:
3f:e6:bd:42:06:b1:8b:fa:e4:72:0d:6b:d8:14:6c:4f:7e:fc:
2e:fb:10:b2:e0:78:4f:cd:a6:07:e2:a1:4f:c0:6e:f7:92:9e:
4c:c9:42:b1:cc:f8:94:c8:38:69:f1:bf:81:fd:22:0c:5a:7e:
d3:68:73:bd:16:73:a1:79:0d:4e:21:55:27:59:7f:bc:05:30:
29:74:ef:30:00:b9:e4:1d:a2:10:d7:45:1a:66:4a:b7:ba:2a:
d5:bc:35:94:94:8c:46:4e:ef:80:cf:35:a1:b6:29:26:a7:ec:
84:03:64:5d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWRsAFv2yHHhnSG3T5L7s4c7oMZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMjYwOTE4MjFaFw0yNzAyMjUwOTIzMjFaMDMxMTAvBgNV
BAMTKDUzRDkxQ0ZDM0RBRjdEOUI1MDUwNEY2NjdGODA1OTExNEZFODE2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWjY7SajSDaovbs1LU5N8EcYY
owxZ0H/B0UJxKZyNp03KDxebujj9DE5DqkhOm/dNTniioaokfE7Z9pcssfxyTCdl
kmq+j3yuotqCiB+N1Bu/2fe+mNgnQJ9hSZE862eJb+84EBGJxRl2msBNL5+cZrw6
xDimR6PEhy4uqxjib9fYCpvM9CqkP4QMRUOVaQlRVYgEPN8ilnvF8vyp1FK9jwnj
PDp8d1Ms87jK0sDJ9QTh8urOb/lyyOKsDVYiTOA56NM8Ogk4SpnuBYomXbfK//uj
gIZSiq+EM+Qa4uOzMxAbHHObHXs5RT+kcllibDx9/TMqwxMUxMzg2PNEe6PVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUU9kc/D2vfZtQUE9mf4BZEU/oFv8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzOTJlMzEzNDM3MmUzMTMw
MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
WZNkMA0GCSqGSIb3DQEBCwUAA4IBAQCYVx9K1tpQL1OOyOYVNnvJi7hru+vTvIqi
6e0S1ESmLzq1QC8nt+OD4edrfOrkyYtURjvPhk32f7QyIIKqTbnyL6i6BCd+D1dD
zh8ITeol8yAtdW8eStDumwKrVUVtlXM7RDzgr2b+K+KNiRYBLr6lXC82O1FrBMYk
Vvwu2z3O7C3qj2hJaR792nrufBaac6o/5r1CBrGL+uRyDWvYFGxPfvwu+xCy4HhP
zaYH4qFPwG73kp5MyUKxzPiUyDhp8b+B/SIMWn7TaHO9FnOheQ1OIVUnWX+8BTAp
dO8wALnkHaIQ10UaZkq3uirVvDWUlIxGTu+AzzWhtikmp+yEA2Rd
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:42:11 2026 by rpki-client