Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa
File: 38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: gaWEVwFY5cDwlSAv0RzuOYJZKg5dpNMDltjAk5tRafE=
Subject key identifier: B4:A5:E5:77:AE:97:B1:0A:2E:D5:00:1E:58:15:36:0F:6C:10:07:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BEA06B4D16B0A37C1F0B964DB65E0BA35085C94
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa
Signing time: Sat 28 Feb 2026 09:23:22 +0000
ROA not before: Sat 28 Feb 2026 09:18:22 +0000
ROA not after: Sat 27 Feb 2027 09:23:22 +0000
asID: 147049
IP address blocks: 89.147.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ea:06:b4:d1:6b:0a:37:c1:f0:b9:64:db:65:e0:ba:35:08:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 28 09:18:22 2026 GMT
Not After : Feb 27 09:23:22 2027 GMT
Subject: CN=B4A5E577AE97B10A2ED5001E5815360F6C1007BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:55:03:9c:66:fe:d7:4a:bd:c0:99:0d:bf:
99:0f:3a:22:91:a4:67:42:40:57:3c:4c:1b:cd:0a:
25:2c:eb:2b:30:1e:09:cc:a2:a9:e2:48:3f:4c:87:
c5:f9:47:2c:91:cf:c9:c9:e4:6f:0e:30:1f:a7:93:
fc:5e:d1:a2:45:eb:ae:ac:8e:b6:8b:35:79:5c:94:
d4:92:e8:8f:cc:5f:09:97:4c:0c:0d:70:09:a2:3a:
93:e4:b9:e6:f9:8d:9f:0a:6b:b9:3a:5c:a8:7f:13:
31:92:bd:23:bd:3f:d0:e5:9b:99:3d:23:01:c6:97:
15:89:cf:d6:e3:b1:0e:00:75:45:d4:6d:e6:a3:5b:
99:b2:24:23:4d:d0:c4:68:14:e8:83:9b:f6:86:bf:
60:29:25:7e:b8:e0:c1:5b:8c:71:41:6a:0e:12:33:
4c:4d:33:5e:c6:36:70:13:9b:81:68:f6:f1:d6:5f:
cf:09:ec:40:83:bb:aa:19:b4:6e:dd:9a:1c:fd:b3:
a8:3b:74:5c:37:ff:d9:7e:8e:45:64:80:19:6a:27:
34:f8:d6:88:c2:74:20:79:8a:62:87:2a:27:fc:f0:
80:6b:64:0a:a8:1b:5a:0b:35:e2:8c:c0:b4:e7:c4:
93:0f:8e:80:29:14:e3:33:a0:da:27:c3:71:2a:53:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A5:E5:77:AE:97:B1:0A:2E:D5:00:1E:58:15:36:0F:6C:10:07:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.101.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5b:8a:30:26:92:d0:0a:48:a9:08:a2:db:77:47:bb:dc:76:
d1:1f:8b:08:09:9c:9f:7b:27:8f:1c:c8:ed:80:7a:82:8c:08:
4a:c3:b4:2d:4a:25:58:14:89:35:3a:79:ec:45:59:56:5d:a5:
63:34:9d:04:52:9a:32:e3:73:60:f1:2f:de:31:59:a2:2c:5e:
55:56:0d:44:a4:84:05:cf:50:ee:e9:29:5f:42:f2:22:1b:a7:
a1:12:3f:28:07:6b:16:a3:f7:ba:db:9d:4d:3d:95:6e:70:b1:
80:ed:59:97:2b:da:fd:68:86:21:88:33:de:18:8a:a1:f3:a8:
62:16:ca:7f:51:9a:e2:83:ef:72:3b:8a:56:d1:03:a5:f6:6f:
6f:db:96:2d:8b:63:10:75:e1:56:00:2c:4c:7e:25:b2:bf:26:
d3:31:b9:20:06:da:c1:33:6c:e7:a3:1b:fa:c8:bc:9e:3b:90:
e5:a4:8c:b9:0f:30:fc:25:2c:81:db:ce:d1:ee:08:19:7b:b3:
3a:7a:8e:9c:8f:00:95:3d:44:c3:ce:79:43:a1:7f:77:93:8b:
f0:90:b0:90:db:56:d4:e2:4e:ae:02:8a:35:fb:2f:21:14:39:
57:9b:01:71:69:01:fa:69:e5:48:25:97:e6:80:9f:ee:f7:2b:
0f:8a:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:48 2026 by rpki-client