Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3949.roa
File: AS3949.roa (raw, json)
Hash identifier: 8VyQt1clEWHS+078mg5w0VnAt+rooiCRd3GtMFYrHWs=
Subject key identifier: D2:77:EF:66:FA:9A:E6:DF:43:2D:70:81:AD:88:A9:02:AD:84:8E:D1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 529D2C18454CD4059889E46183F613F919CF58C1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3949.roa
Signing time: Tue 31 Mar 2026 08:30:05 +0000
ROA not before: Tue 31 Mar 2026 08:25:05 +0000
ROA not after: Tue 30 Mar 2027 08:30:05 +0000
asID: 3949
IP address blocks: 82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9d:2c:18:45:4c:d4:05:98:89:e4:61:83:f6:13:f9:19:cf:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 31 08:25:05 2026 GMT
Not After : Mar 30 08:30:05 2027 GMT
Subject: CN=D277EF66FA9AE6DF432D7081AD88A902AD848ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:05:89:60:13:53:27:c6:19:87:78:08:da:
23:1b:39:7a:5d:a6:ec:ea:c6:b1:fd:4b:c2:02:09:
d6:2f:59:b3:b2:66:62:6c:88:98:cb:5f:72:76:43:
60:d5:8f:83:3b:3e:c6:6a:c5:8b:b5:04:85:22:96:
7f:f8:df:99:1c:28:57:b3:c8:c7:1e:5f:42:a6:66:
61:40:eb:05:e4:e2:02:53:5d:24:50:bd:52:e2:6c:
79:3c:ca:f1:3b:c8:3e:a9:0a:3d:54:ab:1f:92:3a:
3c:39:c4:c5:eb:cc:e5:7a:1f:a1:00:b7:d3:ab:c1:
5e:99:8a:9f:ad:56:fc:ca:81:a4:41:19:ff:ee:84:
e8:f0:c6:59:4f:96:61:de:a5:9c:f3:7c:53:e8:33:
2f:1b:08:e8:90:17:81:2a:fe:2c:66:b5:7e:a2:3e:
59:d4:e4:cb:1f:96:71:f7:e9:d8:5d:d7:a4:96:e3:
10:3b:92:1c:32:41:50:46:c2:1a:ec:70:15:91:07:
4e:cb:1d:58:ee:f5:40:a2:08:b6:85:73:0f:30:d7:
15:a3:e3:dd:0a:20:ac:2f:22:49:60:08:ea:13:9a:
c5:88:35:6f:9d:1d:01:00:5d:b2:d5:28:cc:4b:05:
42:94:27:ab:71:6b:00:4e:01:36:16:cd:5e:17:29:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:EF:66:FA:9A:E6:DF:43:2D:70:81:AD:88:A9:02:AD:84:8E:D1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS3949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
45:02:8a:74:19:d8:93:82:a4:02:77:12:4c:4a:05:fe:01:11:
3a:c0:d7:cf:f1:04:18:a9:54:dc:0f:bb:4e:94:1b:9e:83:9e:
e0:6b:fc:8f:5f:ca:47:a8:a1:84:1f:0c:64:2e:57:76:f8:4a:
4b:01:d1:45:89:4d:8c:27:3f:41:96:37:98:4f:8a:f5:32:ba:
47:37:66:b6:30:26:40:ee:21:6e:b0:fa:bf:dc:3f:88:fc:46:
da:be:72:88:43:5d:e4:19:59:13:b2:71:18:c8:61:c4:d5:7a:
ea:86:6f:4c:a4:8b:4c:cb:ed:e0:1a:92:d3:98:26:e3:31:5d:
46:86:52:2f:e7:f0:f2:91:53:97:99:32:14:95:a5:25:c4:d2:
ab:1a:2e:3b:e8:7f:ea:98:8f:a8:1a:02:80:bd:79:29:9e:29:
c7:47:b1:e9:a0:1e:42:f7:86:aa:91:ee:92:ff:92:56:e8:57:
bc:87:ab:ed:d2:af:4e:36:fa:94:57:31:fb:d8:63:7a:9b:10:
15:c1:bf:3c:6c:12:8d:b0:ed:9c:0e:97:ed:0d:00:10:04:30:
7d:04:65:2d:d2:1c:4b:1c:f4:23:fb:62:e4:dc:42:e5:ca:96:
8e:a9:a3:8c:8c:79:3c:9d:84:f9:c3:a2:4c:cd:9c:77:63:23:
c1:41:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:37:47 2026 by rpki-client