Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134382e302f32342d3234203d3e20313336373837.roa
File: 39342e3135362e3134382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: km5gnDoU+MQU6E9o+R89z2BCayVMnKkm1z+00unnm58=
Subject key identifier: 67:8C:BB:5B:7B:C1:9A:07:28:68:CF:26:43:1E:BA:D4:DB:C7:E7:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: C1524A41B24CC28ED67727991CB65E301C3D09
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 07 Aug 2026 15:27:46 +0000
ROA not before: Fri 07 Aug 2026 15:22:46 +0000
ROA not after: Fri 06 Aug 2027 15:27:46 +0000
asID: 136787
IP address blocks: 94.156.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c1:52:4a:41:b2:4c:c2:8e:d6:77:27:99:1c:b6:5e:30:1c:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 7 15:22:46 2026 GMT
Not After : Aug 6 15:27:46 2027 GMT
Subject: CN=678CBB5B7BC19A072868CF26431EBAD4DBC7E7B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:f3:3b:73:fe:5b:d4:ab:ba:61:a8:6c:56:
24:ac:f7:c3:ea:fd:57:83:76:75:43:4a:ef:33:0b:
25:f7:40:70:e9:63:4a:81:c5:ee:85:c0:64:63:08:
18:0e:97:52:3e:b3:5e:f0:a7:72:75:1a:e2:2c:33:
58:1f:e0:44:b8:4e:bd:5a:d9:2e:22:ef:1a:48:87:
58:1d:10:fa:c9:c6:6d:b0:c0:a1:77:3c:17:0a:52:
49:f8:ec:e3:ff:0b:96:72:f0:5e:65:95:94:95:3b:
72:82:99:41:43:70:6b:bd:47:1a:27:6e:ba:4f:94:
66:ed:f4:7f:17:4b:35:9c:f8:4e:5b:1b:e2:92:88:
21:99:80:c2:cf:bf:eb:3f:22:a9:42:0a:8c:92:0c:
66:12:23:14:25:94:6d:80:57:31:ee:5a:74:9f:3f:
91:1e:b9:3f:fa:ed:13:63:2a:76:2b:bf:83:00:b4:
98:ff:cb:67:ff:a0:20:7e:e0:92:ae:a8:a4:e2:8d:
b1:31:80:a5:48:de:4b:05:09:7f:f0:d5:7e:98:1a:
24:6a:4f:d8:59:25:05:b3:1b:02:e1:ed:24:ba:84:
81:9e:d5:84:27:ee:44:a9:02:47:90:bf:ac:21:17:
21:23:97:34:07:40:4a:44:60:73:1a:17:c7:e2:bc:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:BB:5B:7B:C1:9A:07:28:68:CF:26:43:1E:BA:D4:DB:C7:E7:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.148.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e7:5c:5d:8e:1a:ec:15:fe:dc:9e:4a:8c:85:aa:63:90:ab:
6c:42:c7:88:52:11:4b:1f:07:b1:bf:b7:db:bc:59:41:2b:3e:
50:3f:75:74:c6:44:3e:46:34:46:6f:c3:b9:e4:18:91:a5:e2:
2a:be:f2:95:47:24:d6:13:0d:c7:1a:90:88:a4:59:b3:30:d7:
6f:80:66:a8:38:41:3c:a2:ac:97:82:f7:28:53:7e:aa:3d:98:
0f:4f:37:7c:89:f5:33:82:d4:f3:bc:3a:44:68:fa:4d:34:72:
cd:4f:11:91:6d:16:be:24:40:00:b0:b7:88:de:56:ba:fd:f1:
91:b3:67:a8:5d:95:cc:9e:f4:65:d1:9b:dc:3c:60:75:f9:86:
24:79:4a:0d:a6:10:42:b4:d2:32:08:a1:69:f1:7f:80:36:65:
ab:d1:1a:0e:8e:02:d0:9f:1a:8f:b9:7a:e5:32:07:4b:10:af:
2e:fd:ec:7c:a7:59:84:22:52:63:0a:c4:5f:77:01:5d:2c:42:
78:e3:b8:c0:73:5b:7e:0d:bc:37:60:a1:bf:27:e4:6b:43:36:
72:d4:9c:b9:27:68:6b:4b:1c:af:33:ed:47:3a:4e:b9:1a:ac:
dd:3e:7e:4a:d9:86:ad:14:be:1e:14:82:db:05:3a:76:ff:8c:
e2:04:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:07 2026 by rpki-client