Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230372e302f32342d3234203d3e203330393637.roa
File: 39342e3135362e3230372e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: cZUZxjlF+2DjE9w2a0mcnJGkCqVlZ78zwmk2B7/Bj/A=
Subject key identifier: 0B:20:DC:41:B1:A0:3B:1D:5B:92:F4:82:FB:A2:DB:3E:99:05:22:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02FD642353A1E881826933AAE766A2EC5EAE0189
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230372e302f32342d3234203d3e203330393637.roa
Signing time: Fri 24 Jul 2026 11:26:32 +0000
ROA not before: Fri 24 Jul 2026 11:21:32 +0000
ROA not after: Fri 23 Jul 2027 11:26:32 +0000
asID: 30967
IP address blocks: 94.156.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fd:64:23:53:a1:e8:81:82:69:33:aa:e7:66:a2:ec:5e:ae:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 11:21:32 2026 GMT
Not After : Jul 23 11:26:32 2027 GMT
Subject: CN=0B20DC41B1A03B1D5B92F482FBA2DB3E99052225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:33:08:78:03:40:a6:50:60:48:ba:80:45:
e3:5b:4a:fd:55:7d:bc:59:19:9f:93:f2:9f:eb:a5:
3a:09:b9:79:84:f1:1d:04:e8:02:b0:70:92:3e:fd:
52:69:7c:ee:dc:46:83:f8:03:e8:70:52:a6:a0:02:
0f:54:29:a1:0b:36:b9:84:0f:5d:b5:59:2d:7d:66:
56:dd:39:28:b9:78:08:f6:7f:c6:8e:3d:0c:75:ea:
b2:0e:0e:81:f3:42:1e:8a:a4:6e:3a:b8:23:d3:da:
4f:b2:67:dc:6f:01:7d:e6:a0:59:ed:33:a5:89:d3:
4f:47:df:cc:7a:66:f2:04:b0:0a:f3:e4:6b:f6:f8:
e7:5b:b2:e2:e9:c8:3f:1a:04:5c:9f:bd:b9:40:2b:
78:83:9b:74:35:74:dd:c7:5d:e0:41:2f:4d:cb:d3:
18:53:a5:b5:b6:23:d1:de:a0:be:28:1e:9f:34:af:
af:ec:0d:f8:ff:35:98:5a:47:90:b7:1d:90:a5:4b:
d4:71:c8:1d:c2:9b:33:9e:22:1b:88:6d:bf:a5:62:
aa:fc:1e:ed:35:78:8e:ed:e0:d5:56:02:e3:f8:9c:
60:b0:46:a4:0b:e7:46:ef:d0:2b:7a:2a:f5:37:b2:
79:3f:de:84:15:91:ec:54:e8:3c:54:7c:02:cf:f2:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:DC:41:B1:A0:3B:1D:5B:92:F4:82:FB:A2:DB:3E:99:05:22:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230372e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.207.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f9:4a:b9:12:85:54:01:c3:c2:d9:d5:ed:2e:c8:fb:9f:3d:
17:2b:8b:e1:68:f8:c7:ba:b6:83:f5:86:0c:6e:b2:8e:ba:07:
67:73:d3:06:4d:7d:ff:83:76:2f:53:13:73:75:3c:7c:2b:f3:
87:7d:5b:e6:88:30:7e:ad:d5:e4:c8:cc:7b:86:b0:b8:69:9d:
31:37:2b:07:a6:1d:b8:cb:75:92:c5:e7:17:54:89:0c:92:c9:
b8:b0:d5:50:af:74:c8:32:86:c6:92:31:a3:eb:6c:3b:90:8e:
3e:1c:78:5c:61:cd:18:f0:da:be:81:d0:dd:47:f8:9b:dd:35:
2b:ef:e9:ad:d9:b1:ca:34:55:bf:1c:c6:83:23:f7:c8:3b:61:
59:68:b3:91:b4:10:b5:02:98:c2:c5:6f:08:6e:f1:67:c0:5f:
21:5e:22:1b:99:fb:60:9d:e1:a3:7c:26:3b:9f:99:d5:e4:91:
e7:80:2a:4d:ac:12:a0:af:4f:5a:cc:2e:9b:cd:f9:51:37:7a:
e3:0e:ff:0f:21:fb:50:04:46:df:a0:fb:3f:91:ca:a1:28:d4:
63:2b:d3:0a:2f:a1:b3:5d:f2:c5:d4:72:be:fc:e9:ac:8f:43:
34:9d:5f:07:6c:87:97:6e:3d:eb:cf:ae:5a:b2:d3:fc:3d:2f:
d4:c7:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:30 2026 by rpki-client