Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39342e3132342e37322e302f32342d3234203d3e20343030303339.roa
File: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=
Subject key identifier: 50:7A:F0:FB:6E:91:81:04:92:40:F3:27:31:D1:A2:A5:F9:31:F2:2B
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 472F75EBBBCFE40C0E4039BA79AF9B36FD66913D
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39342e3132342e37322e302f32342d3234203d3e20343030303339.roa
Signing time: Mon 09 Feb 2026 18:55:37 +0000
ROA not before: Mon 09 Feb 2026 18:50:37 +0000
ROA not after: Mon 08 Feb 2027 18:55:37 +0000
asID: 400039
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2f:75:eb:bb:cf:e4:0c:0e:40:39:ba:79:af:9b:36:fd:66:91:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:37 2026 GMT
Not After : Feb 8 18:55:37 2027 GMT
Subject: CN=507AF0FB6E9181049240F32731D1A2A5F931F22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:ff:02:d8:79:b6:3f:3e:7f:3a:43:2d:22:
5d:1f:ca:45:f6:06:0e:24:36:4e:1b:06:2c:84:bc:
1c:7e:c9:06:4c:b5:0d:0c:c7:64:d7:92:6a:57:69:
44:6b:c3:1a:20:1a:d0:20:f4:e7:0d:b6:06:7e:10:
95:12:12:22:c6:5f:a2:ab:82:72:67:20:c3:64:f9:
3c:fc:70:9e:34:44:f8:e8:b9:95:7d:5e:9c:95:92:
a6:4c:f4:9b:fe:54:31:29:1e:f9:82:99:d2:60:dd:
74:a9:5e:26:40:29:06:7c:4c:fc:7e:95:3d:b6:15:
57:7a:10:23:ec:16:56:d3:76:df:1a:c8:f7:fd:bb:
fa:bf:a3:e3:21:ad:3c:f1:b0:85:86:ac:ff:4a:1f:
3f:b1:ad:e6:c0:f0:17:1f:c9:b8:ff:09:c6:27:ee:
3b:b9:4a:5b:1a:27:e7:66:37:46:cf:e1:cf:cb:32:
e5:10:f3:24:cd:78:ad:7f:9c:80:c5:68:9f:d7:40:
fc:b3:7f:18:92:c5:a1:fa:23:72:c1:99:c1:c0:4f:
00:2a:5a:ef:e0:14:44:63:90:26:23:8b:51:ff:8b:
fa:86:cd:31:c7:b6:2a:f7:de:19:83:33:36:6d:b6:
7b:e3:cc:e4:c4:2d:8a:9e:db:fe:a5:66:8c:a3:a0:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:F0:FB:6E:91:81:04:92:40:F3:27:31:D1:A2:A5:F9:31:F2:2B
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39342e3132342e37322e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d8:24:bc:63:f4:de:c0:0c:4b:26:b9:2f:e7:34:6a:ff:a3:
eb:05:27:68:5c:c1:4d:95:47:e0:2f:e6:c8:77:a8:ff:95:11:
63:68:8e:eb:b9:b2:2e:15:51:c0:fd:68:83:d8:a5:3d:f2:9e:
aa:34:58:27:fc:e4:e1:25:f1:76:92:23:2e:b3:5d:c3:7b:eb:
d8:75:6f:b1:d4:be:e7:5d:ca:58:c6:37:2d:b5:ea:67:78:51:
fd:bb:f1:f4:fd:84:a6:ea:2c:85:29:47:75:8b:14:6d:09:0c:
b6:73:be:e6:89:70:e5:42:85:01:c6:5f:a1:5d:a6:c0:0a:6f:
ec:a9:91:52:13:f5:76:38:6e:70:90:1f:df:47:a9:5c:2e:8a:
96:09:06:aa:ac:b8:14:f8:64:d0:dd:09:ed:57:4d:5e:a9:17:
cb:c9:9b:16:7a:35:76:73:24:f7:4e:62:91:e8:ec:9f:47:e1:
ba:25:5d:f3:9f:7a:a0:0b:25:4f:24:40:0d:0d:12:da:65:38:
3b:2e:59:f1:fe:58:62:6e:bf:33:ca:d3:d9:f2:d5:4d:11:2b:
c0:3f:f9:4f:3f:a4:5d:b9:10:41:60:ea:27:e7:15:a0:63:20:
4d:fd:56:36:1a:38:3a:36:be:9c:ba:9d:ba:c0:0c:54:fd:83:
be:2a:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:19 2026 by rpki-client