Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e392e302f32342d3234203d3e20323132323338.roa
File: 39342e3134302e392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: GoztFBPmyXCMWBSJ/Egt47uPuizo6pQC7COlMRkebUE=
Subject key identifier: 9E:C3:E7:AD:28:97:B2:D9:0E:BD:96:C2:3B:5D:25:45:BC:01:29:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 208C0484500F09FD8CA50ABDDDF1FB5ECCD42886
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e392e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:13 +0000
ROA not before: Tue 22 Sep 2026 13:24:13 +0000
ROA not after: Tue 21 Sep 2027 13:29:13 +0000
asID: 212238
IP address blocks: 94.140.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8c:04:84:50:0f:09:fd:8c:a5:0a:bd:dd:f1:fb:5e:cc:d4:28:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:13 2026 GMT
Not After : Sep 21 13:29:13 2027 GMT
Subject: CN=9EC3E7AD2897B2D90EBD96C23B5D2545BC0129B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:3b:71:30:1d:46:f6:f3:15:95:5a:d9:03:
b1:f9:fb:a0:d4:3e:74:47:09:a2:ef:75:60:f6:bf:
1a:5f:cf:aa:40:22:f3:ea:b8:18:65:a8:24:d6:00:
d4:ff:35:f8:1d:2a:3b:1c:f6:9f:0e:77:10:1c:7c:
81:4c:ad:00:b0:a2:14:ad:04:83:0a:41:37:71:a9:
68:9d:15:64:da:63:9a:56:14:f6:91:71:da:18:9d:
9a:da:4f:31:18:9b:4f:14:7d:a1:c0:93:91:6c:d8:
75:30:bf:c4:22:8a:19:6a:8a:e4:f5:9b:69:df:82:
62:63:5c:07:95:57:04:30:b1:61:f9:f2:35:69:66:
48:d7:2f:ab:b4:8b:7e:7d:ac:89:7a:64:65:1b:97:
1b:b2:0e:33:3e:72:0f:1b:31:1e:4d:72:ff:e1:62:
93:a5:a4:34:c1:f8:f6:8d:c0:34:a1:93:5d:27:d9:
8a:77:69:fb:12:b1:63:26:dc:c3:74:f7:ac:0a:f7:
1f:05:c8:93:42:71:40:f4:99:25:20:83:e7:de:79:
e5:89:60:4c:66:c9:43:b2:97:76:50:83:c2:cf:9e:
ee:ba:7b:2c:a0:bd:74:d6:d2:c6:a1:13:65:8c:d8:
81:e3:64:54:bb:2f:b6:45:c3:71:aa:8c:38:e9:25:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:E7:AD:28:97:B2:D9:0E:BD:96:C2:3B:5D:25:45:BC:01:29:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fb:ac:82:9a:06:d5:7d:5b:ab:b3:57:c2:23:ab:d6:29:30:
8f:7a:83:df:e8:2d:26:d5:21:00:cc:c9:be:03:ee:95:c2:18:
76:ee:cb:28:9e:7d:ca:97:1b:2f:73:cb:14:35:25:7d:68:85:
16:fb:f5:b0:1d:20:a6:97:98:c9:51:bc:eb:bc:ea:57:79:f4:
eb:e4:e8:94:1c:cd:8c:b1:1c:c3:4d:94:e0:2a:d2:e9:b0:9d:
2a:62:d0:05:90:bb:8d:2b:c8:59:83:6c:0e:7a:16:c2:a3:e0:
68:65:02:ff:c8:9b:a7:0c:d7:98:84:ab:29:01:90:27:ca:8e:
a2:f7:8e:b5:59:bc:81:ff:7b:56:3d:f6:25:ff:ab:5b:23:bf:
5c:9d:67:fd:e0:1a:9f:b2:b7:1f:99:07:a4:64:00:5b:eb:58:
0b:51:d5:64:7e:07:b7:ed:69:c9:23:ef:2b:0f:42:53:2e:6a:
80:b2:ab:7f:e0:0e:62:31:03:70:09:8e:ce:90:40:52:b3:27:
b1:ef:1a:ab:2d:d1:3d:c9:43:84:3d:70:ef:7c:d0:58:13:30:
d4:27:9d:f5:22:fc:97:63:22:d3:53:62:56:74:37:74:40:ea:
66:ea:da:1a:81:14:f5:b5:70:1e:c4:43:43:04:d4:b1:ac:c7:
c8:c4:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:10:58 2026 by rpki-client