Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS39578.roa
File: AS39578.roa (raw, json)
Hash identifier: KQG+PsP6CkwFNYlqS8sCI7gmxa0gZmJgh9tlQ4w0NCw=
Subject key identifier: DC:FD:58:75:27:8F:57:C0:94:CF:5F:12:19:5E:7E:EF:92:13:BA:8C
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 39B73646656D637B660458E62DA2B68094E369D4
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS39578.roa
Signing time: Tue 10 Nov 2026 04:59:33 +0000
ROA not before: Tue 10 Nov 2026 04:54:33 +0000
ROA not after: Tue 09 Nov 2027 04:59:33 +0000
asID: 39578
IP address blocks: 177.29.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b7:36:46:65:6d:63:7b:66:04:58:e6:2d:a2:b6:80:94:e3:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 10 04:54:33 2026 GMT
Not After : Nov 9 04:59:33 2027 GMT
Subject: CN=DCFD5875278F57C094CF5F12195E7EEF9213BA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:4f:47:7f:ca:7f:1d:ac:eb:09:2c:8c:0c:
93:f2:13:c3:ef:c0:24:63:ef:43:22:dc:9a:ad:d2:
ee:6b:fd:da:49:9c:50:9d:da:bd:2e:99:7f:e5:71:
68:a2:3a:7a:50:da:b2:83:c0:ab:4d:d0:bd:60:7c:
79:0c:a9:61:b4:61:23:ba:17:1f:36:a2:f6:c3:36:
dd:51:58:48:32:be:7c:f6:c3:86:ab:fe:64:c3:7a:
5e:39:93:03:bd:d2:8a:be:8f:14:3f:93:59:95:da:
4b:b7:b8:82:1b:16:27:ae:8a:c1:c2:27:c2:9e:9d:
f3:f1:ea:bf:6f:ea:84:e8:bd:53:41:fa:3a:1b:5f:
6e:b0:17:8e:b9:31:36:fc:da:e9:1d:f8:a3:70:47:
28:8b:24:be:94:10:a2:4d:6e:32:e2:2e:b1:9e:4c:
6c:7c:fb:6a:ec:cc:c4:03:30:92:99:c9:af:54:9f:
c6:dc:64:61:18:60:94:aa:9c:66:48:f1:3a:59:ef:
c4:38:28:00:1e:23:04:01:0e:ac:c0:a0:55:a4:ac:
13:25:f8:11:64:c6:98:02:e4:93:71:e8:33:c0:68:
c4:11:6f:01:4d:c8:85:f8:34:a3:43:1a:a9:29:62:
8a:1d:00:ba:b2:71:f9:fa:58:36:5d:18:e6:88:5a:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:58:75:27:8F:57:C0:94:CF:5F:12:19:5E:7E:EF:92:13:BA:8C
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS39578.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.246.0/24
Signature Algorithm: sha256WithRSAEncryption
69:44:56:47:e7:70:1e:58:aa:06:a1:0d:76:21:90:3a:17:05:
3e:1c:35:78:61:a2:4f:35:ae:2a:2b:c8:4d:d0:a7:db:50:47:
72:6d:78:39:3b:49:a5:49:4a:2a:4d:38:44:bf:a7:b8:42:df:
a3:03:34:0a:63:81:25:c6:33:a3:e1:f7:df:ce:70:85:3d:6b:
f1:4b:d0:29:09:18:33:eb:d1:8c:df:d2:22:03:e3:8e:cd:15:
b2:07:69:29:0e:5c:8a:4c:3e:41:c1:4c:e6:d2:9c:16:35:55:
f2:02:c0:6d:a8:71:b4:6e:e0:26:63:ed:89:2b:06:ca:59:63:
b8:23:fa:c0:40:98:d1:df:ea:13:a8:3a:69:6d:27:38:ca:e4:
45:b3:3a:3e:5b:3e:99:5b:74:7d:29:13:03:9b:db:be:ae:55:
21:d4:c1:d2:6c:b5:94:49:99:73:99:56:b0:a7:c5:3b:24:d8:
56:fd:2b:3e:8f:56:65:3b:9b:4c:bd:02:11:f0:4a:a3:6e:ec:
ef:4d:f1:d7:bb:9a:04:7b:03:99:a3:fb:dc:8a:e7:d7:11:e7:
92:01:12:b4:54:65:a3:02:e9:b7:6d:af:90:56:2b:67:d5:9d:
42:15:6f:e9:54:a9:4f:c5:3f:2c:3a:73:ae:9f:e9:de:d5:20:
74:ac:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:01 2026 by rpki-client