Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130322e302f32332d3332203d3e203531313637.roa
File: 38392e3134372e3130322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: N/x994L3QLw/BANf6kA+l3tszhY7OkZKoOTmXUSdYSo=
Subject key identifier: 04:F1:59:79:B8:05:4F:73:31:3A:1C:E7:D5:47:38:E7:43:7A:F7:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3893673B022CA4092F2301A2E101C983C5C444D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130322e302f32332d3332203d3e203531313637.roa
Signing time: Thu 02 Apr 2026 21:23:34 +0000
ROA not before: Thu 02 Apr 2026 21:18:34 +0000
ROA not after: Thu 01 Apr 2027 21:23:34 +0000
asID: 51167
IP address blocks: 89.147.102.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:93:67:3b:02:2c:a4:09:2f:23:01:a2:e1:01:c9:83:c5:c4:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 21:18:34 2026 GMT
Not After : Apr 1 21:23:34 2027 GMT
Subject: CN=04F15979B8054F73313A1CE7D54738E7437AF76D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:38:ab:75:c9:f0:d1:a3:e6:d2:a6:1a:14:
7c:c7:b3:40:69:4f:08:20:f4:91:fd:d9:1b:e4:47:
65:e0:d0:1f:8e:f0:7d:47:1b:bc:fe:6d:bc:30:48:
13:4d:a8:65:9b:16:48:1f:4b:5a:15:9a:68:84:9f:
df:46:68:e8:81:fa:ed:7e:6b:25:82:c6:e4:43:c9:
e1:21:61:b4:71:58:cd:8d:3f:47:70:db:21:ca:98:
cc:5a:50:f6:ef:74:32:6a:6b:18:1b:20:0f:56:27:
0f:b0:e5:23:e9:4d:5c:7e:ab:ad:70:80:cc:d7:43:
23:22:f1:2a:42:fd:1d:aa:10:5f:ec:d1:5e:fb:d0:
e2:c1:3f:3c:2d:8d:02:b9:dc:a5:44:8e:da:96:2b:
c3:85:00:9c:20:bb:1a:85:fe:a5:38:e2:f3:9a:c5:
d0:40:c8:aa:88:a1:8c:52:92:a6:d2:00:e1:0c:5a:
2e:a3:6e:34:48:82:44:40:f3:3a:eb:6f:ac:c6:8c:
08:44:c5:8b:9b:24:e2:4b:7a:ad:67:ba:49:85:5c:
27:e0:e2:d9:e2:94:92:a6:cc:17:05:3c:a7:4d:2c:
33:9c:72:e2:dc:0b:16:58:f7:a8:6e:ac:11:d8:ff:
e7:bd:24:fb:08:d9:80:43:93:83:97:88:6b:b9:47:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:59:79:B8:05:4F:73:31:3A:1C:E7:D5:47:38:E7:43:7A:F7:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.102.0/23
Signature Algorithm: sha256WithRSAEncryption
71:7b:20:e8:77:50:24:64:4f:4e:a8:12:fa:93:0a:c0:94:d9:
14:1c:d1:6d:49:20:9e:68:84:7b:e7:d7:78:23:1b:cf:c3:ed:
4c:e5:b5:2a:42:fc:b8:52:8c:29:6c:be:ee:a9:c4:76:09:b3:
51:30:51:8e:a3:55:e6:75:d7:99:f5:51:fb:2e:23:ab:6d:87:
26:ce:a9:cd:71:fb:3e:3b:4e:9c:ee:13:30:66:da:e2:1d:5a:
cc:29:67:aa:a0:b5:86:10:eb:3d:94:7f:d2:e5:7b:53:de:42:
5f:31:c6:61:c3:55:dc:4b:2a:bb:37:fd:05:b2:c2:90:f1:4d:
2e:e8:45:d2:55:74:a4:8b:94:b0:26:f8:7c:2b:21:65:24:b2:
26:05:eb:80:0c:61:72:f0:13:1b:6b:77:63:56:7f:dd:ea:95:
0e:f4:46:4d:b8:f5:91:5f:ac:b4:95:5b:ea:a6:90:14:ac:17:
54:f2:14:5d:5b:74:8a:7f:a4:fb:89:ae:78:81:17:b8:46:80:
30:58:6a:59:e1:9c:13:7c:d4:61:d7:10:5f:23:b3:17:4f:71:
f1:31:14:16:54:41:67:a2:0e:33:79:0d:ce:d5:de:c0:90:3a:
5b:2e:87:70:1f:e1:61:a4:2f:90:cc:d6:19:83:30:48:ea:18:
ec:d3:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:45 2026 by rpki-client