Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20323132323338.roa
File: 39332e3131342e36302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Ln/SIQFht4fuk6qtoWcMtDP10eKxQEJIAT3Lp02+sIY=
Subject key identifier: 21:98:A9:32:A2:C1:7E:BE:E7:44:9B:A2:C7:0F:14:BD:A7:B0:FF:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D6C7B3ACE6396B929E6B0B042A964053C1A43A1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:40 +0000
ROA not before: Thu 10 Sep 2026 09:23:40 +0000
ROA not after: Thu 09 Sep 2027 09:28:40 +0000
asID: 212238
IP address blocks: 93.114.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6c:7b:3a:ce:63:96:b9:29:e6:b0:b0:42:a9:64:05:3c:1a:43:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:40 2026 GMT
Not After : Sep 9 09:28:40 2027 GMT
Subject: CN=2198A932A2C17EBEE7449BA2C70F14BDA7B0FFA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:4b:18:ab:21:16:4e:2f:77:88:a7:d0:e9:
c4:16:8a:3c:9a:44:23:24:9d:fc:bf:8f:e6:17:9b:
51:39:58:fc:9c:6c:e9:87:24:42:f8:a8:16:09:ce:
23:e0:55:46:32:9c:86:43:d4:2b:85:22:8d:f3:5e:
7d:ca:5c:d3:2d:4c:2f:6a:ce:5b:c5:61:e1:e0:15:
ae:fb:20:d3:1f:6c:c2:cc:b1:54:f4:f9:d1:11:cd:
2e:a7:a9:e8:fc:b2:18:58:b4:a0:dd:ac:9e:93:d9:
b0:55:4d:72:85:5f:ec:d9:20:b1:46:eb:5a:b6:b5:
9e:12:c1:27:4e:38:01:c9:08:29:c3:09:04:62:a4:
ba:dc:2a:af:82:67:00:09:45:95:4c:f4:05:e4:0e:
4a:b8:38:71:4a:1d:4d:fa:f5:4d:e8:e1:e5:ee:a4:
ef:32:17:7d:97:0a:c7:ae:7d:99:81:dc:3e:ff:bb:
1e:f5:76:a8:da:ac:b2:72:2d:4d:f1:da:63:4b:9c:
b4:02:3f:c0:24:5d:ce:73:21:5c:39:2b:c9:bd:d2:
dd:e9:6e:52:0d:25:ad:69:df:90:02:1e:e1:b4:0f:
d0:1d:c8:3b:e8:9a:53:70:0c:0d:9b:19:fd:fb:95:
9b:c4:d2:3c:c6:bb:4a:b6:cc:a6:b8:83:64:4a:5e:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:A9:32:A2:C1:7E:BE:E7:44:9B:A2:C7:0F:14:BD:A7:B0:FF:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8b:7c:8e:c9:e3:9d:cc:1a:ab:dd:1d:ca:57:b3:05:d1:50:
55:cc:52:35:1d:29:27:81:9d:5f:24:6e:d5:d8:61:17:05:85:
d5:a8:b7:25:fe:89:a8:fb:43:8a:1d:f2:6c:e9:1e:11:0f:ac:
b8:f1:40:80:8f:22:99:87:d4:fb:10:a2:af:86:64:1c:aa:5c:
23:ba:7d:ad:2a:8c:67:62:2f:84:69:a5:5f:ad:49:91:f3:8c:
6f:30:b0:8b:18:7d:00:1e:65:bc:b9:18:cb:14:33:50:60:94:
38:90:f7:fb:89:55:e0:fa:37:60:63:4a:d4:4e:eb:06:de:de:
a6:d3:be:3b:76:3f:11:0e:99:fd:a7:6a:77:ba:f5:5c:aa:41:
59:d3:2b:41:66:05:ef:30:fa:62:ef:49:0b:b8:00:6b:40:71:
93:ea:1b:fc:59:a5:d3:88:bf:40:f2:8b:92:5f:ec:4c:51:c2:
ad:36:65:ad:7a:e2:d2:8c:f7:3d:3f:b9:01:fa:dc:95:4d:b9:
24:47:04:02:51:9c:91:08:85:16:5b:ee:8a:91:b6:c4:c2:42:
7f:33:a1:fe:87:c7:af:ed:21:c6:aa:92:83:fa:91:75:ae:8e:
fc:81:62:7d:28:01:f5:ff:b8:a9:cf:32:d4:42:d4:d9:43:4d:
43:00:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:16 2026 by rpki-client