Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20313336373837.roa
File: 39332e3131342e36302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rhgsDEH/7n6n3Mx9cPeApkhPaZdkVh8eHWi3Cc5dTuM=
Subject key identifier: BF:5D:BA:C4:AA:CE:3A:E1:F8:E8:26:F7:15:42:73:23:47:C0:13:A3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 780977C9C6F330A054ED88E6AA05038A665B0EF6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 30 Sep 2026 15:29:32 +0000
ROA not before: Wed 30 Sep 2026 15:24:32 +0000
ROA not after: Wed 29 Sep 2027 15:29:32 +0000
asID: 136787
IP address blocks: 93.114.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:09:77:c9:c6:f3:30:a0:54:ed:88:e6:aa:05:03:8a:66:5b:0e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 15:24:32 2026 GMT
Not After : Sep 29 15:29:32 2027 GMT
Subject: CN=BF5DBAC4AACE3AE1F8E826F71542732347C013A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:81:bc:28:35:5c:ca:20:50:7d:83:49:ed:
bf:14:b1:d8:49:70:f6:2a:94:5b:66:90:ae:c8:fa:
84:57:58:e0:14:b0:2c:a0:ba:70:81:94:a6:cc:44:
71:6c:03:e9:1d:30:d2:6a:0e:1f:1c:e1:d5:63:7b:
f3:10:f7:28:5c:6c:50:88:4f:a5:af:c8:b4:9b:a7:
9a:0a:09:d1:34:41:89:bd:34:98:1a:82:88:b3:58:
41:3c:88:d0:89:e9:73:80:ba:af:51:0d:2f:6e:35:
7f:c9:69:26:0e:cd:44:c0:1c:80:c9:d9:27:42:df:
65:2a:ec:7a:ff:4c:17:82:97:9b:75:30:a6:01:ef:
2d:25:4d:8f:29:8f:95:44:2c:ad:22:60:be:35:71:
d3:16:d0:87:8c:8a:2e:5d:50:47:0e:27:83:2f:57:
f5:44:a7:12:b2:76:79:38:e8:10:f2:96:10:b2:0b:
50:63:ee:ee:a8:15:2a:14:e6:94:78:a5:ce:55:94:
14:16:79:ef:a0:13:3c:96:27:ab:c0:62:e1:9f:67:
9a:0b:be:2e:b8:44:15:7f:c7:44:4b:a4:82:57:96:
cd:91:52:f4:53:54:2b:3e:15:1c:46:78:8d:37:d6:
2a:b2:48:a1:63:09:65:c9:41:8b:f6:ca:ad:a7:6f:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5D:BA:C4:AA:CE:3A:E1:F8:E8:26:F7:15:42:73:23:47:C0:13:A3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
04:da:d8:8f:15:ae:4e:44:a7:82:ad:c8:7b:63:0c:7b:f5:36:
64:f7:29:8c:bb:71:ec:61:eb:f1:55:65:1e:b6:53:c2:bc:b6:
d7:98:60:aa:63:f1:f2:15:fd:d7:bd:56:e4:24:91:ec:77:31:
27:8d:4e:ee:0b:fa:c6:20:dc:83:47:26:2d:4d:04:2a:4c:57:
93:07:ea:ca:3f:68:6c:e0:5e:d3:1e:f6:a1:c5:20:9e:e2:9c:
57:db:d3:a2:ed:9a:f2:ea:5b:eb:7c:9f:34:26:7c:bb:d7:37:
45:56:ba:47:62:b2:64:7e:ba:ab:cf:63:08:fc:04:b0:39:48:
49:6f:a8:b1:a6:f3:92:43:3a:02:cb:0a:9d:2a:3d:9a:cf:c4:
fd:22:76:b6:eb:30:c0:6e:49:60:50:8a:67:86:cf:ca:3d:8e:
21:19:a5:74:07:22:85:9b:f8:2b:e5:39:59:63:30:f2:91:58:
f4:36:b6:f5:60:c3:a2:11:ec:83:f2:0b:83:6d:b8:db:c7:66:
d4:6b:1e:2e:71:9b:6f:9b:99:57:93:a9:d8:1f:01:66:59:e3:
b2:de:13:b0:08:22:22:f9:e6:fd:c0:46:71:9d:d6:5b:ac:04:
c7:9b:95:66:7f:2a:2f:28:69:12:37:cb:fa:bb:dc:d5:3c:f3:
66:b4:b7:77
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeAl3ycbzMKBU7YjmqgUDimZbDvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MzAxNTI0MzJaFw0yNzA5MjkxNTI5MzJaMDMxMTAvBgNV
BAMTKEJGNURCQUM0QUFDRTNBRTFGOEU4MjZGNzE1NDI3MzIzNDdDMDEzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7oG8KDVcyiBQfYNJ7b8UsdhJ
cPYqlFtmkK7I+oRXWOAUsCygunCBlKbMRHFsA+kdMNJqDh8c4dVje/MQ9yhcbFCI
T6WvyLSbp5oKCdE0QYm9NJgagoizWEE8iNCJ6XOAuq9RDS9uNX/JaSYOzUTAHIDJ
2SdC32Uq7Hr/TBeCl5t1MKYB7y0lTY8pj5VELK0iYL41cdMW0IeMii5dUEcOJ4Mv
V/VEpxKydnk46BDylhCyC1Bj7u6oFSoU5pR4pc5VlBQWee+gEzyWJ6vAYuGfZ5oL
vi64RBV/x0RLpIJXls2RUvRTVCs+FRxGeI031iqySKFjCWXJQYv2yq2nb0yzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUv126xKrOOuH46Cb3FUJzI0fAE6MwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMzJlMzEzMTM0MmUzNjMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XXI8MA0GCSqGSIb3DQEBCwUAA4IBAQAE2tiPFa5ORKeCrch7Ywx79TZk9ymMu3Hs
YevxVWUetlPCvLbXmGCqY/HyFf3XvVbkJJHsdzEnjU7uC/rGINyDRyYtTQQqTFeT
B+rKP2hs4F7THvahxSCe4pxX29Oi7Zry6lvrfJ80Jny71zdFVrpHYrJkfrqrz2MI
/ASwOUhJb6ixpvOSQzoCywqdKj2az8T9Ina26zDAbklgUIpnhs/KPY4hGaV0ByKF
m/gr5TlZYzDykVj0Nrb1YMOiEeyD8guDbbjbx2bUax4ucZtvm5lXk6nYHwFmWeOy
3hOwCCIi+eb9wEZxndZbrATHm5VmfyovKGkSN8v6u9zVPPNmtLd3
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:42 2026 by rpki-client