Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa
File: 39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: T3yniEpKK1S+W/xPBpfBNL4Vfnp3212DTwUzjgc/FD4=
Subject key identifier: AF:EB:BB:57:AC:C7:51:13:2B:D2:2A:6C:70:1E:CA:1D:EC:73:FA:9D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 04C797C203CE2651C2F24F7E694937CEACE031CE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 11:26:32 +0000
ROA not before: Fri 24 Jul 2026 11:21:32 +0000
ROA not after: Fri 23 Jul 2027 11:26:32 +0000
asID: 136787
IP address blocks: 94.156.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c7:97:c2:03:ce:26:51:c2:f2:4f:7e:69:49:37:ce:ac:e0:31:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 11:21:32 2026 GMT
Not After : Jul 23 11:26:32 2027 GMT
Subject: CN=AFEBBB57ACC751132BD22A6C701ECA1DEC73FA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:e2:5b:95:2c:a6:15:0b:4e:8a:4d:b6:96:
54:d3:23:f9:72:ed:96:d1:2b:e5:6a:37:d9:f4:5e:
11:e1:4b:07:d5:c3:9e:26:c9:b7:5d:08:74:9b:be:
1a:31:ee:3f:f8:a6:10:59:46:80:d5:10:62:fb:1b:
d1:b4:62:d9:9b:44:06:fe:be:8b:95:48:2a:cc:7c:
0b:06:8d:e3:95:e1:42:a9:30:76:78:b6:31:dc:4b:
34:e1:e0:c9:82:48:e1:67:a0:12:0e:f6:66:07:e7:
8b:57:f1:8d:41:4c:b9:dd:b7:5a:18:a4:28:58:d3:
2a:93:96:3e:4e:ac:cd:de:7c:28:71:c0:9d:a4:6c:
a4:6a:b3:33:ea:3e:b2:61:23:7b:9a:60:6f:24:e4:
e2:0e:82:95:c2:b2:34:9f:cd:94:c3:af:bf:4c:6b:
bf:2d:5c:cd:23:95:32:99:6f:ac:ac:d9:b1:93:24:
9d:ec:65:90:3e:ef:09:f1:52:a2:95:15:66:24:66:
3f:8c:4c:33:04:7b:a1:8a:33:c3:ff:0f:ee:8f:16:
f5:f2:13:f5:45:30:8f:61:95:8a:ae:bf:13:33:9e:
33:8e:51:2d:b3:9d:f1:b2:01:37:31:91:14:b9:67:
b3:b1:9e:e4:e8:52:55:a9:83:e6:e8:d3:ff:2b:43:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:BB:57:AC:C7:51:13:2B:D2:2A:6C:70:1E:CA:1D:EC:73:FA:9D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.206.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c0:24:29:fb:db:df:de:66:cc:8e:f9:95:19:72:6f:ee:37:
06:22:a9:ce:cf:e4:4c:08:12:2a:d7:e4:ce:b0:d2:5a:e5:bc:
88:80:fd:4a:e5:60:31:f5:7f:64:6a:76:c5:d2:2c:93:ae:6c:
61:d7:ce:d5:72:82:f9:c2:1f:78:57:69:a3:15:b4:df:d1:f9:
90:8c:5e:3d:19:b7:b1:77:df:f9:7d:69:95:6b:03:46:e5:a9:
29:a0:fb:f1:4d:a0:85:05:26:d0:49:a8:5e:e7:29:69:17:c5:
d1:e3:46:ce:68:4b:0c:a8:24:b3:05:13:b1:5c:e3:85:c2:95:
c2:56:13:7f:c4:30:72:b4:cd:07:04:3b:a6:8b:20:e0:c4:ae:
ef:53:d5:39:77:38:a2:92:25:3d:81:f8:22:1f:8c:92:14:b7:
c7:f5:7c:1b:75:03:c8:2c:9b:7c:95:82:6e:b6:39:79:3c:60:
e5:d5:b6:cb:f2:b5:bf:c7:3b:1b:d1:73:a4:4e:25:17:e7:57:
f4:b3:05:de:03:25:36:9e:f4:cb:89:d3:25:f6:5b:22:fc:04:
4e:41:18:bd:4b:bb:6a:04:35:8b:2b:b7:16:4b:0f:5c:01:01:
a1:6b:6e:2a:2c:ac:ab:89:fa:b9:fd:10:c0:91:19:08:02:93:
3f:fb:ad:be
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBMeXwgPOJlHC8k9+aUk3zqzgMc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxMTIxMzJaFw0yNzA3MjMxMTI2MzJaMDMxMTAvBgNV
BAMTKEFGRUJCQjU3QUNDNzUxMTMyQkQyMkE2QzcwMUVDQTFERUM3M0ZBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb+JblSymFQtOik22llTTI/ly
7ZbRK+VqN9n0XhHhSwfVw54mybddCHSbvhox7j/4phBZRoDVEGL7G9G0YtmbRAb+
vouVSCrMfAsGjeOV4UKpMHZ4tjHcSzTh4MmCSOFnoBIO9mYH54tX8Y1BTLndt1oY
pChY0yqTlj5OrM3efChxwJ2kbKRqszPqPrJhI3uaYG8k5OIOgpXCsjSfzZTDr79M
a78tXM0jlTKZb6ys2bGTJJ3sZZA+7wnxUqKVFWYkZj+MTDMEe6GKM8P/D+6PFvXy
E/VFMI9hlYquvxMznjOOUS2znfGyATcxkRS5Z7OxnuToUlWpg+bo0/8rQ/LBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUr+u7V6zHURMr0ipscB7KHexz+p0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMjMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABenM4wDQYJKoZIhvcNAQELBQADggEBAHbAJCn729/eZsyO+ZUZcm/uNwYiqc7P
5EwIEirX5M6w0lrlvIiA/UrlYDH1f2RqdsXSLJOubGHXztVygvnCH3hXaaMVtN/R
+ZCMXj0Zt7F33/l9aZVrA0blqSmg+/FNoIUFJtBJqF7nKWkXxdHjRs5oSwyoJLMF
E7Fc44XClcJWE3/EMHK0zQcEO6aLIODEru9T1Tl3OKKSJT2B+CIfjJIUt8f1fBt1
A8gsm3yVgm62OXk8YOXVtsvytb/HOxvRc6ROJRfnV/SzBd4DJTae9MuJ0yX2WyL8
BE5BGL1Lu2oENYsrtxZLD1wBAaFrbiosrKuJ+rn9EMCRGQgCkz/7rb4=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:32:42 2026 by rpki-client